# changelog

author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.73.1.el8_10]
changelog:
  - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360]
  - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360]
  - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234]
  - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985}
  - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.74.1.el8_10]
changelog:
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.75.1.el8_10]
changelog:
  - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812]
  - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453]
  - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376]
  - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350}
  - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350}
  - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
  - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107}
  - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798}
  - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
  - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
  - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932}
  - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392}
  - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449}
  - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449}
  - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713]
  - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160]
  - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655]
  - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655]
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125}
  - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125}
  - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.76.1.el8_10]
changelog:
  - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
  - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
  - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498}
  - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193]
  - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.77.1.el8_10]
changelog:
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797}
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797}
  - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718}
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087}
  - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.78.1.el8_10]
changelog:
  - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302]
  - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527}
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730}


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.79.1.el8_10]
changelog:
  - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305}
  - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.6.1.el8_10]
changelog:
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686}
  - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361]
  - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361]
  - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361]
  - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361]
  - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804}
  - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048]
  - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907}
  - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972}
  - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
  - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
  - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
  - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
  - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759}
  - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759}
  - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759}
  - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783]
  - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130]
  - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130]
  - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130]
  - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130]
  - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130]
  - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130]
  - null_blk: poll queue support (Ming Lei) [RHEL-8130]
  - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130]
  - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073}
  - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555}
  - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555}
  - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555}
  - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555}
  - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555}
  - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675}
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675}
  - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952]


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.80.1.el8_10]
changelog:
  - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816]
  - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816]
  - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816]
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751}
  - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373}
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729}
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757}


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.81.1.el8_10]
changelog:
  - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386}
  - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386}
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817}
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841}
  - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920]
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297}
  - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111]
  - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909]
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909]
  - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909]
  - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909]
  - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909]
  - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909]
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909]
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909]
  - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909]
  - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909]
  - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909]
  - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909]
  - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909]
  - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909]
  - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909]
  - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909]
  - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909]
  - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909]
  - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909]
  - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909]
  - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909]
  - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909]
  - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909]
  - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909]
  - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909]
  - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909]
  - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909]
  - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909]
  - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909]
  - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909]
  - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909]
  - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909]
  - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909]
  - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909]
  - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909]
  - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909]
  - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909]
  - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909]
  - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909]
  - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909]
  - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909]
  - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909]
  - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909]
  - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909]
  - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909]
  - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909]
  - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909]
  - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909]
  - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909]
  - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909]
  - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909]
  - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909]
  - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909]
  - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909]
  - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909]
  - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909]
  - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909]
  - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909]
  - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909]
  - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909]
  - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909]
  - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909]
  - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909]
  - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909]
  - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909]
  - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909]
  - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909]
  - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909]
  - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909]
  - mm: add find_lock_head (Rafael Aquini) [RHEL-104909]
  - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909]
  - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909]
  - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909]
  - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909]
  - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909]
  - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909]
  - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909]
  - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909]
  - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909]
  - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909]
  - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909]
  - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909]
  - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909]
  - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909]
  - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909]
  - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909]
  - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909]
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849}
  - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032]


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.82.1.el8_10]
changelog:
  - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431]
  - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546]
  - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546]
  - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546]
  - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999}
  - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244}
  - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546]
  - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725}
  - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179}
  - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870}
  - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546]
  - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546]
  - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546]
  - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546]
  - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546]
  - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546]
  - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546]
  - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546]
  - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546]
  - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546]
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752}
  - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546]
  - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546]
  - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546]
  - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546]
  - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546]
  - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546]
  - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546]
  - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546]
  - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
  - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546]
  - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546]
  - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546]
  - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546]
  - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546]
  - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546]
  - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546]
  - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546]
  - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546]
  - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546]
  - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546]
  - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546]
  - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546]
  - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546]
  - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546]
  - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546]
  - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
  - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546]
  - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546]
  - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546]
  - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546]
  - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546]
  - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546]
  - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546]
  - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546]
  - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546]
  - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546]
  - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546]
  - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546]
  - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546]
  - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546]
  - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938}
  - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546]
  - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546]
  - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546]
  - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546]
  - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546]
  - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546]
  - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546]
  - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546]
  - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546]
  - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546]
  - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546]
  - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546]
  - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546]
  - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546]
  - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546]
  - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546]
  - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546]
  - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546]
  - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546]
  - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546]
  - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546]
  - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546]
  - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546]
  - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546]
  - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546]
  - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546]
  - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546]
  - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546]
  - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546]
  - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546]
  - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546]
  - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546]
  - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546]
  - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546]
  - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546]
  - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546]
  - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546]
  - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546]
  - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546]
  - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546]
  - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546]
  - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546]
  - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546]
  - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546]
  - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546]
  - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546]
  - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546]
  - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546]
  - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546]
  - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546]
  - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546]
  - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546]
  - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546]
  - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546]
  - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546]
  - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546]
  - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515]
  - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515]
  - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461]
  - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461]
  - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461]
  - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461]
  - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461]
  - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461]
  - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461]
  - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461]
  - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391]
  - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391]
  - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391]
  - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864}
  - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745]
  - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745]
  - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745]
  - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745]
  - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745]
  - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745]
  - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257}
  - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226}
  - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226}
  - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.83.1.el8_10]
changelog:
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367}
  - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285]
  - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781]
  - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781]
  - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781]
  - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781]
  - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781]
  - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757]
  - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215]
  - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215]
  - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215]
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611]
  - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}
  - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.84.1.el8_10]
changelog:
  - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775]
  - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718}
  - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005]


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.85.1.el8_10]
changelog:
  - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799]
  - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968}
  - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969}
  - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970}
  - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799]
  - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971}
  - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799]
  - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799]
  - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972}
  - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973}
  - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799]
  - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122]
  - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
  - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.86.1.el8_10]
changelog:
  - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825}
  - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237]
  - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898}
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724}
  - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513}
  - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921]
  - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921]
  - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921]
  - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921]
  - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921]
  - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921]
  - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.87.1.el8_10]
changelog:
  - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664]
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955}
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.88.1.el8_10]
changelog:
  - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199]
  - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539}
  - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.89.1.el8_10]
changelog:
  - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774]
  - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
  - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
  - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660]
  - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.91.1.el8_10]
changelog:
  - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355]
  - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240}
  - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
  - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963]
  - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171]
  - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171]
  - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226]
  - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226]
  - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744]
  - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744]
  - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744]
  - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.92.1.el8_10]
changelog:
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285}
  - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993}
  - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396]
  - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396]
  - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396]
  - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.93.1.el8_10]
changelog:
  - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449]
  - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096}
  - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.94.1.el8_10]
changelog:
  - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301}
  - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933}
  - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-545.el8]
changelog:
  - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667]
  - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537]
  - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098]
  - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760]
  - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760]
  - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760]
  - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780]
  - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994]
  - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994]
  - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994]
  - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-546.el8]
changelog:
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602}
  - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266]
  - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565}
  - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942]
  - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942]
  - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448}
  - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434}
  - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434}
  - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143]
  - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143]
  - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143]
  - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143]
  - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143]
  - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143]
  - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143]
  - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
  - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
  - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
  - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
  - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
  - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441]
  - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849]
  - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849]
  - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849]
  - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849]
  - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-547.el8]
changelog:
  - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505]
  - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505]
  - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505]
  - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505]
  - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505]
  - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505]
  - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505]
  - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505]
  - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505]
  - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505]
  - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505]
  - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505]
  - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505]
  - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505]
  - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505]
  - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505]
  - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505]
  - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505]
  - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841}
  - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030]


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.11.1.el9_2.tuxcare.6.els5]
changelog:
  - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
  - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}
  - libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534}
  - bpf: Fix partial dynptr stack slot reads/writes {CVE-2023-39191}
  - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
  - ima: define ima_max_digest_data struct without a flexible array variable
  - ima: detect changes to the backing overlay file
  - tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux {CVE-2023-6546}
  - tty: n_gsm: fix restart handling via CLD command {CVE-2023-6546}
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586}
  - netfilter: tproxy: bail out if IP has been disabled on the device {CVE-2024-36270}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}
  - Bluetooth: Fix double free in hci_conn_cleanup {CVE-2023-28464}
  - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super {CVE-2024-0841}
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}
  - tipc: fix UAF in error path {CVE-2024-36886}
  - Bluetooth: af_bluetooth: Fix deadlock {CVE-2024-26886}
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  - dma-mapping: benchmark: handle NUMA_NO_NODE correctly {CVE-2024-39277}
  - net/mlx5e: Prevent deadlock while disabling aRFS {CVE-2024-27014}
  - net/mlx5e: Introduce flow steering API {CVE-2024-27014}
  - x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
  - x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742}
  - x86: Introduce ia32_enabled() {CVE-2024-25742}
  - x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742}
  - x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742}
  - RDMA/srpt: Support specifying the srpt_service_guid parameter {CVE-2024-26744}
  - platform/x86: think-lmi: Fix reference leak {CVE-2023-52520}
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command {CVE-2024-27059}
  - fat: fix uninitialized field in nostale filehandles {CVE-2024-26973}
  - usb: xhci: Add error handling in xhci_map_urb_for_dma {CVE-2024-26964}
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete {CVE-2024-26897}
  - wifi: mac80211: fix race condition on enabling fast-xmit {CVE-2024-26779}
  - RDMA/qedr: Fix qedr_create_user_qp error flow {CVE-2024-26743}
  - wifi: iwlwifi: fix a memory corruption {CVE-2024-26610}
  - x86/fpu: Stop relying on userspace for info to fault in xsave buffer {CVE-2024-26603}
  - wifi: rt2x00: restart beacon queue when hardware reset {CVE-2023-52595}
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg {CVE-2023-52528}
  - RDMA/siw: Fix connection failure handling {CVE-2023-52513}
  - usb: hub: Guard against accesses to uninitialized BOS descriptors {CVE-2023-52477}
  - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc {CVE-2021-47185}
  - sctp: fail if no bound addresses can be used for a given scope {CVE-2023-1074}
  - memcg: enable accounting for file lock caches {CVE-2022-0480}
  - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() {CVE-2023-6176}
  - RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872}
  - drm/amd/display: Atom Integrated System Info v2_2 for DCN35 {CVE-2024-36897}
  - net/mlx5e: fix a potential double-free in fs_any_create_groups {CVE-2023-52667}
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() {CVE-2024-36902}
  - ipv6: prevent NULL dereference in ip6_output() {CVE-2024-36901}
  - vt: fix memory overlapping when deleting chars in the buffer {CVE-2022-48627}
  - hwmon: (coretemp) Fix out-of-bounds memory access {CVE-2024-26664}
  - i2c: Fix a potential use after free {CVE-2019-25162}
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump {CVE-2024-26615}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.11.1.el9_2.tuxcare.6.els6]
changelog:
  - tun: add missing verification for short frame {CVE-2024-41091}
  - tap: add missing verification for short frame {CVE-2024-41090}
  - drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
  - net: fix __dst_negative_advice() race {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm {CVE-2024-36971}
  - net: fix out-of-bounds access in ops_init {CVE-2024-36883}
  - net/sched: flower: Fix chain template offload {CVE-2024-26669}
  - netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
  - netfilter: nft_set_rbtree: Remove unused variable nft_net {CVE-2024-27397}
  - netfilter: nft_set_rbtree: prefer sync gc to async worker {CVE-2024-27397}
  - netfilter: nft_set_rbtree: rename gc deactivate+erase function {CVE-2024-27397}
  - netfilter: nf_tables: de-constify set commit ops function argument {CVE-2024-27397}
  - netfilter: nft_set_rbtree: .deactivate fails if element has expired {CVE-2024-27397}
  - sched/membarrier: reduce the ability to hammer on sys_membarrier {CVE-2024-26602}
  - drm/vmwgfx: Fix possible null pointer derefence with invalid contexts {CVE-2022-38096}
  - sched/psi: Fix use-after-free in ep_remove_wait_queue() {CVE-2023-52707}
  - wait: add wake_up_pollfree() {CVE-2023-52707}
  - x86/sev: Check for user-space IOIO pointing to kernel space {CVE-2023-46813}
  - x86/sev: Check IOBM for IOIO exceptions from user-space {CVE-2023-46813}
  - x86/sev: Disable MMIO emulation from user mode {CVE-2023-46813}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). {CVE-2024-37356}
  - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued {CVE-2024-38384}
  - netfilter: complete validation of user input {CVE-2024-35962}
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885}
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop] {CVE-2023-52635}
  - netfilter: validate user input for expected length {CVE-2024-35896}
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails {CVE-2024-37353}
  - bnxt: prevent skb UAF after handing over to PTP worker {CVE-2022-48637}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 {CVE-2024-38558}
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs {CVE-2024-36929}
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation {CVE-2024-36017}
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound {CVE-2024-33621}
  - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
  - gro: fix ownership transfer {CVE-2024-35890}
  - mlxbf_gige: stop interface during shutdown {CVE-2024-35885}
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() {CVE-2023-52809}
  - wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
  - scsi: mpi3mr: Sanitise num_phys {CVE-2024-42159}
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
  - drm/amdgpu/mes: fix use-after-free issue {CVE-2024-38581}
  - i40e: fix vf may be used uninitialized in this function warning {CVE-2024-36020}
  - vt: fix unicode buffer corruption when deleting characters {CVE-2024-35823}
  - ata: libata-core: Fix double free on error {CVE-2024-41087}
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925}
  - tcp_metrics: validate source addr length {CVE-2024-42154}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.11.1.el9_2.tuxcare.6.els7]
changelog:
  - tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284}
  - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301}
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285}
  - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673}
  - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987}
  - block/ioctl: prefer different overflow check {CVE-2024-41000}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." {CVE-2024-40984}
  - net/sched: Fix UAF when resolving a clash {CVE-2024-41040}
  - nvme: avoid double free special payload {CVE-2024-41073}
  - x86/tdx: Allow 32-bit emulation by default {CVE-2024-25744}
  - x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742}
  - x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742}
  - x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742}
  - x86: Make IA32_EMULATION boot time configurable {CVE-2024-25744}
  - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() {CVE-2024-25744}
  - x86/elf: Make loading of 32bit processes depend on ia32_enabled() {CVE-2024-25744}
  - x86/entry: Compile entry_SYSCALL32_ignore() unconditionally {CVE-2024-25744}
  - x86/entry: Rename ignore_sysret() {CVE-2024-25744}
  - x86/cpu: Don't write CSTAR MSR on Intel CPUs {CVE-2024-25744}
  - x86: Introduce ia32_enabled() {CVE-2024-25742}
  - x86: Fix misspelled Kconfig symbols {CVE-2024-25744}
  - x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
  - objtool: Add entry UNRET validation {CVE-2024-25744}
  - x86/cpu: Switch to arch_cpu_finalize_init() {CVE-2022-40982}
  - init: Provide arch_cpu_finalize_init() {CVE-2022-40982}
  - gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
  - gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
  - gfs2: Remove ill-placed consistency check {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
  - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956}
  - drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
  - net/mlx5: Discard command completions in internal error {CVE-2024-38555}
  - net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628}
  - perf/core: Fix potential NULL deref {CVE-2023-5717}
  - perf: Disallow mis-matched inherited group reads {CVE-2023-5717}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.11.1.el9_2.tuxcare.6.els8]
changelog:
  - drm/amd/pm: Fix negative array index read {CVE-2024-46821}
  - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818}
  - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813}
  - drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box {CVE-2024-46811}
  - Squashfs: sanity check symbolic link size {CVE-2024-46744}
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses {CVE-2024-46859}
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() {CVE-2024-40995}
  - net/sched: act_api: rely on rcu in tcf_idr_check_alloc {CVE-2024-40995}
  - netfilter: bridge: confirm multicast packets before passing them up the stack {CVE-2024-27415}
  - netfilter: let reset rules clean out conntrack entries {CVE-2024-27415}
  - mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray {CVE-2024-42243}
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify {CVE-2024-36899}
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem {CVE-2024-35895}
  - bpf, sockmap: Fix preempt_rt splat when using raw_spin_lock_t {CVE-2024-35895}
  - mm/huge_memory: don't unpoison huge_zero_folio {CVE-2024-40914}
  - cxgb4: fix use after free bugs caused by circular dependency problem {CVE-2023-4133}
  - timers: Restore ABI Compatibility with timer_delete Functions {CVE-2023-4133}
  - timers: Provide timer_shutdown[_sync]() {CVE-2023-4133}
  - timers: Add shutdown mechanism to the internal functions {CVE-2023-4133}
  - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode {CVE-2023-4133}
  - timers: Silently ignore timers with a NULL function {CVE-2023-4133}
  - timers: Rename del_timer() to timer_delete() {CVE-2023-4133}
  - timers: Rename del_timer_sync() to timer_delete_sync() {CVE-2023-4133}
  - timers: Use del_timer_sync() even on UP {CVE-2023-4133}
  - timers: Update kernel-doc for various functions {CVE-2023-4133}
  - timers: Replace BUG_ON()s {CVE-2023-4133}
  - timers: Get rid of del_singleshot_timer_sync() {CVE-2023-4133}
  - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function {CVE-2023-4133}
  - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function {CVE-2023-4133}
  - mm: avoid overflows in dirty throttling logic {CVE-2024-42131}
  - ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
  - igc: avoid returning frame twice in XDP_REDIRECT {CVE-2024-26853}
  - igc: Avoid transmit queue timeout for XDP {CVE-2024-26853}
  - nfsd: fix RELEASE_LOCKOWNER {CVE-2024-26629}
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc {CVE-2023-52880}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment {CVE-2024-42152}
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() {CVE-2024-42110}
  - x86: stop playing stack games in profile_pc() {CVE-2024-42096}
  - xdp: Remove WARN() from __xdp_reg_mem_model() {CVE-2024-42082}
  - NFSv4: Fix memory leak in nfs4_set_security_label {CVE-2024-41076}
  - ppp: reject claimed-as-LCP but actually malformed packets {CVE-2024-41044}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). {CVE-2024-41041}
  - sched/deadline: Fix task_struct reference leak {CVE-2024-41023}
  - tipc: force a dst refcount before doing decryption {CVE-2024-40983}
  - scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  - xhci: Handle TD clearing for multiple streams case {CVE-2024-40927}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912}
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station {CVE-2024-40911}
  - ipv6: fix possible race in __fib6_drop_pcpu_from() {CVE-2024-40905}
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING {CVE-2024-39476}
  - usb-storage: alauda: Check whether the media is initialized {CVE-2024-38619}
  - usb-storage: alauda: Fix uninit-value in alauda_check_media() {CVE-2024-38619}
  - crypto: bcm - Fix pointer arithmetic {CVE-2024-38579}
  - scsi: qedf: Ensure the copied buf is NUL terminated {CVE-2024-38559}
  - wifi: nl80211: don't free NULL coalescing rule {CVE-2024-36941}
  - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() {CVE-2024-36025}
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() {CVE-2024-35898}
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work {CVE-2024-35852}
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination {CVE-2024-35845}
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() {CVE-2024-35791}
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes {CVE-2024-35789}
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work {CVE-2024-27052}
  - nfp: flower: handle acti_netdevs allocation failure {CVE-2024-27046}
  - octeontx2-af: Use separate handlers for interrupts {CVE-2024-27030}
  - netfilter: flowtable: validate pppoe header {CVE-2024-27016}
  - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address {CVE-2024-26946}
  - scsi: qla2xxx: Fix command flush on cable pull {CVE-2024-26931}
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855}
  - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel {CVE-2024-26737}
  - Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
  - bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself {CVE-2023-52735}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() {CVE-2023-52651}
  - net: tap_open(): set sk_uid from current_fsuid() {CVE-2023-4194}
  - net: tun_chr_open(): set sk_uid from current_fsuid() {CVE-2023-4194}
  - seg6: fix the iif in the IPv6 socket control block {CVE-2021-47515}
  - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383}
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148}
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes {CVE-2024-46759}
  - net: bridge: mst: fix vlan use-after-free {CVE-2024-36979}
  - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071}
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk {CVE-2024-46743}
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup {CVE-2024-46747}
  - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}
  - drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725}
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724}
  - wifi: nl80211: Avoid address calculations via out of bounds array indexing {CVE-2024-38562}
  - wifi: nl80211: convert cfg80211_scan_request allocation to *_size macros {CVE-2024-38562}
  - overflow: Implement size_t saturating arithmetic helpers {CVE-2024-38562}
  - cdrom: rearrange last_media_change check to avoid unintentional overflow {CVE-2024-42136}
  - ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588}
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() {CVE-2024-38588}
  - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723}
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
  - sch/netem: fix use after free in netem_dequeue {CVE-2024-46800}
  - firmware: cs_dsp: Fix overflow checking of wmfw header {CVE-2024-41039}
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758}
  - HID: amd_sfh: free driver_data after destroying hid device {CVE-2024-46746}
  - xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756}
  - tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665}
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757}
  - drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731}
  - drm/amdgpu/mes: fix mes ring buffer overflow {CVE-2024-46700}
  - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882}
  - PCI/MSI: Fix UAF in msi_capability_init {CVE-2024-41096}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.11.1.el9_2.tuxcare.6.els9]
changelog:
  - smb: client: fix use-after-free in smb2_query_info_compound() {CVE-2023-52751}
  - smb: client: prevent new fids from being removed by laundromat {CVE-2023-52751}
  - cifs: fix dentry lookups in directory handle cache {CVE-2023-52751}
  - cifs: return a single-use cfid if we did not get a lease {CVE-2023-52751}
  - cifs: Check the lease context if we actually got a lease {CVE-2023-52751}
  - cifs: set rc to -ENOENT if we can not get a dentry for the cached dir {CVE-2023-52751}
  - cifs: use LIST_HEAD() and list_move() to simplify code {CVE-2023-52751}
  - cifs: fix wrong unlock before return from cifs_tree_connect() {CVE-2023-52751}
  - uprobe: avoid out-of-bounds memory access of fetching args {CVE-2024-50067}
  - net: do not delay dst_entries_add() in dst_release() {CVE-2024-50036}
  - smb: client: fix UAF in async decryption {CVE-2024-50047}
  - smb3: rename encryption/decryption TFMs
  - mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
  - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
  - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
  - drm/amd/display: fix double free issue during amdgpu module unload {CVE-2024-49989}
  - ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950}
  - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit {CVE-2024-49950}
  - mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858}
  - of: fdt: fix off-by-one error in unflatten_dt_nodes() {CVE-2022-48672}
  - filelock: fix potential use-after-free in posix_lock_inode {CVE-2024-41049}
  - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock {CVE-2024-41049}
  - drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092}
  - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
  - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895}
  - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
  - drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883}
  - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
  - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
  - tipc: guard against string buffer overrun {CVE-2024-49995}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698}
  - firmware_loader: Block path traversal {CVE-2024-47742}
  - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685}
  - ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884}
  - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX {CVE-2024-46871}
  - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889}
  - wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930}
  - net: do not leave a dangling sk pointer, when socket creation fails {CVE-2024-40954}
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
  - drm/amdgpu: Validate TA binary size {CVE-2024-44977}


author: Vadim Panov <vadim.panov@cloudlinux.com> [5.14.0-284.11.1.el9_2.tuxcare.6.els10]
changelog:
  - smb: client: fix use-after-free of signing key {CVE-2024-53179}
  - smb: client: stop flooding dmesg in smb2_calc_signature() {CVE-2024-53179}
  - smb3: fix oops in calculating shash_setkey {CVE-2024-53179}
  - cifs: return correct error in ->calc_signature() {CVE-2024-53179}
  - cifs: secmech: use shash_desc directly, remove sdesc {CVE-2024-53179}
  - cifs: replace kfree() with kfree_sensitive() for sensitive data {CVE-2024-53179}
  - xsk: fix OOB map writes when deleting elements {CVE-2024-56614}
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103}
  - scsi: sg: Fix slab-use-after-free read in sg_release() {CVE-2024-56631}
  - EDAC/igen6: Avoid segmentation fault on module unload {CVE-2024-56708}
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl {CVE-2024-56662}
  - net: inet: do not leave a dangling sk pointer in inet_create() {CVE-2024-56601}
  - initramfs: avoid filename buffer overrun {CVE-2024-53142}
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604}
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156}
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605}
  - Bluetooth: msft: fix slab-use-after-free in msft_do_close() {CVE-2024-36012}
  - Bluetooth: Fix support for Read Local Supported Codecs V2 {CVE-2024-36012}
  - Bluetooth: hci_codec: Fix leaking content of local_codecs {CVE-2024-36012}
  - blk-cgroup: Fix UAF in blkcg_unpin_online() {CVE-2024-56672}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() {CVE-2024-56602}
  - net: inet6: do not leave a dangling sk pointer in inet6_create() {CVE-2024-56600}
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173}
  - net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603}
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 {CVE-2023-52818}
  - bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}
  - ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689}
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' {CVE-2024-56608}
  - netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141}
  - HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit {CVE-2023-52519}
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). {CVE-2024-56642}
  - cifs: Fix buffer overflow when parsing NFS reparse points {CVE-2024-49996}
  - Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475}
  - PM / devfreq: Fix buffer overflow in trans_stat_show {CVE-2023-52614}
  - PM / devfreq: Rework freq_table to be local to devfreq struct {CVE-2023-52614}
  - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() {CVE-2024-41057}
  - cachefiles: fix slab-use-after-free in fscache_withdraw_volume() {CVE-2024-41058}
  - netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() {CVE-2024-41058}
  - memcg: fix possible use-after-free in memcg_write_event_control() {CVE-2022-48988}
  - Bluetooth: ISO: Fix UAF on iso_sock_timeout {CVE-2024-50124}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout {CVE-2024-50125}
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout {CVE-2024-50125}
  - Bluetooth: Consolidate code around sk_alloc into a helper function {CVE-2024-50125}
  - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() {CVE-2024-35861}
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() {CVE-2024-26754}
  - smb: client: fix potential UAF in cifs_stats_proc_write() {CVE-2024-35868}
  - smb: client: fix potential UAF in cifs_debug_files_proc_show() {CVE-2024-35868}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans {CVE-2024-50264}
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057}
  - wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531}
  - x86/alternatives: Disable KASAN in apply_alternatives() {CVE-2023-52504}
  - bpf: Fix out-of-bounds write in trie_get_next_key() {CVE-2024-50262}
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115}
  - media: edia: dvbdev: fix a use-after-free {CVE-2024-27043}
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2024-27043}
  - media: dvbdev: fix build warning due to comments {CVE-2024-27043}
  - media: dvbdev: adopts refcnt to avoid UAF {CVE-2024-27043}


author: Vadim Panov <vadim.panov@cloudlinux.com> [5.14.0-284.11.1.el9_2.tuxcare.6.els11]
changelog:
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format {CVE-2024-53104}
  - ALSA: 6fire: Release resources at card release {CVE-2024-53239}
  - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches {CVE-2024-26885}
  - bpf: fix OOB devmap writes when deleting elements {CVE-2024-56615}
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). {CVE-2024-50154}
  - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' {CVE-2024-27045}
  - af_packet: avoid erroring out after sock_init_data() in packet_create() {CVE-2024-56606}
  - cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741}
  - arm64: hibernate: Fix level3 translation fault in swsusp_save() {CVE-2024-26989}
  - perf: hisi: Fix use-after-free when register pmu fails {CVE-2023-52859}
  - nbd: fix uaf in nbd_open {CVE-2023-52837}
  - ring-buffer: Do not attempt to read past "commit" {CVE-2023-52501}
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) {CVE-2023-52637}
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
  - asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101}
  - pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
  - irqchip/gic-v3-its: Prevent double free on error {CVE-2024-35847}
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit {CVE-2024-27395}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961}
  - nfs: fix UAF in direct writes {CVE-2024-26958}
  - of: Fix double free in of_parse_phandle_with_args_map {CVE-2023-52679}
  - ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update {CVE-2024-35855}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.11.1.el9_2.tuxcare.6.els12]
changelog:
  - spec: update shim Conflicts, Provides keys
  - HID: core: zero-initialize the report buffer {CVE-2024-50302}
  - net: defer final 'struct net' free in netns dismantle {CVE-2024-56658}
  - bus: mhi: host: Add alignment check for event ring read pointer {CVE-2023-52494}
  - net: sched: fix ets qdisc OOB Indexing {CVE-2025-21692}
  - parport: Proper fix for array out-of-bounds access {CVE-2024-50074}
  - udf: fix uninit-value use in udf_get_fileshortad {CVE-2024-50143}
  - security/keys: fix slab-out-of-bounds in key_task_permission {CVE-2024-50301}
  - usb: typec: altmode should keep reference to parent {CVE-2024-50150}
  - dm cache: fix potential out-of-bounds access on the first resume {CVE-2024-50278}
  - dm cache: optimize dirty bit checking with find_next_bit when resizing {CVE-2024-50278}
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing {CVE-2024-50279}
  - spi: nxp-fspi: fix the KASAN report out-of-bounds bug {CVE-2024-46853}
  - smb: client: fix OOBs when building SMB2_IOCTL request {CVE-2024-50151}
  - net: sched: fix use-after-free in taprio_change() {CVE-2024-50127}
  - USB: serial: io_edgeport: fix use after free in debug printk {CVE-2024-50267}
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() {CVE-2024-53059}
  - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed {CVE-2024-53059}
  - tracing: Consider the NULL character when validating the event length {CVE-2024-50131}
  - crypto: scomp - fix req->dst buffer overflow {CVE-2023-52612}
  - NFSD: fix hang in nfsd4_shutdown_callback {CVE-2025-21795}
  - NFSD: add courteous server support for thread with only delegation {CVE-2025-21795}
  - efi: rt-wrapper: Add missing include {CVE-2023-21102}
  - arm64: efi: Execute runtime services from a dedicated stack {CVE-2023-21102}
  - mptcp: refactor passive socket initialization {CVE-2024-26782}
  - mptcp: implement delayed seq generation for passive fastopen {CVE-2024-26782}
  - smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864}
  - smb: client: fix potential UAF in cifs_dump_full_key() {CVE-2024-35866}
  - cifs: fix session state check in reconnect to avoid use-after-free issue {CVE-2024-35866}
  - smb: client: fix potential UAF in smb2_is_network_name_deleted() {CVE-2024-35862}
  - smb: client: fix potential UAF in is_valid_oplock_break() {CVE-2024-35863}
  - smb: client: fix potential UAF in cifs_stats_proc_show() {CVE-2024-35867}
  - bpf: Protect against int overflow for stack access size {CVE-2024-35905}
  - bpf: Fix verification of indirect var-off stack access {CVE-2024-35905}
  - devlink: fix possible use-after-free and memory leaks in devlink_init() {CVE-2024-26734}
  - leds: trigger: Unregister sysfs attributes before calling deactivate() {CVE-2024-43830}
  - ionic: fix use after netif_napi_del() {CVE-2024-39502}
  - ionic: clean interrupt before enabling queue to avoid credit race {CVE-2024-39502}
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970}
  - vt_ioctl: fix array_index_nospec in vt_setactivate {CVE-2022-48804}
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() {CVE-2022-49011}
  - raid1: fix use-after-free for original bio in raid1_write_request() {CVE-2024-35979}
  - md/raid1: free the r1bio before waiting for blocked rdev {CVE-2024-35979}
  - drm/amdgpu: fix usage slab after free {CVE-2024-56551}
  - drm/amd: Use `amdgpu_ucode_*` helpers for GPU info bin {CVE-2024-56551}
  - drm/amd: Add a new helper for loading/validating microcode {CVE-2024-56551}
  - drm/amd: check num of link levels when update pcie param {CVE-2023-52812}
  - drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments {CVE-2023-52812}
  - drm/amd: Disable PP_PCIE_DPM_MASK when dynamic speed switching not supported {CVE-2023-52812}
  - drm/amd: Fix logic error in sienna_cichlid_update_pcie_parameters() {CVE-2023-52812}
  - drm/amd: Use amdgpu_device_pcie_dynamic_switching_supported() for SMU7 {CVE-2023-52812}
  - drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with SMU13 {CVE-2023-52812}
  - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs {CVE-2023-52812}
  - drm/amd: Move helper for dynamic speed switch check out of smu13 {CVE-2023-52812}
  - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 {CVE-2023-52812}
  - drm/amd/pm: share the code around SMU13 pcie parameters update {CVE-2023-52812}
  - drm: zynqmp_kms: Unplug DRM device before removal {CVE-2024-56538}
  - padata: Fix refcnt handling in padata_free_shell() {CVE-2023-52854}
  - padata: Convert from atomic_t to refcount_t on parallel_data->refcnt {CVE-2023-52854}
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() {CVE-2024-57798}
  - drm/dp_mst: Skip CSN if topology probing is not done yet {CVE-2024-57798}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.1101.el9_2.tuxcare.7.els13]
changelog:
  - ext4: fix OOB read when checking dotdot dir {CVE-2025-37785}
  - wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905}
  - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' {CVE-2024-27042}
  - dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763}
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168}
  - cifs: Fix UAF in cifs_demultiplex_thread() {CVE-2023-52572}
  - veth: Fix use after free in XDP_REDIRECT {CVE-2023-53107}
  - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() {CVE-2024-53068}
  - arm64/sve: Discard stale CPU state when handling SVE traps {CVE-2024-50275}
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd {CVE-2025-21969}
  - wifi: mt76: mt7921e: fix use-after-free in free_irq() {CVE-2024-26892}
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read {CVE-2024-58069}
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() {CVE-2025-21927}
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702}
  - net_sched: sch_fifo: implement lockless __fifo_dump() {CVE-2025-21702}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() {CVE-2025-21993}
  - vlan: enforce underlying device type {CVE-2025-21920}
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
  - watch_queue: Actually free the watch {CVE-2022-49256}
  - can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988}
  - netfilter: nf_set_pipapo: fix initial map fill {CVE-2024-57947}
  - hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations {CVE-2021-47098}
  - aio: fix use-after-free due to missing POLLFREE handling {CVE-2021-47505}
  - aio: keep poll requests on waitqueue until completed {CVE-2021-47505}
  - smb: client: fix potential deadlock when releasing mids {CVE-2023-52757}
  - cifs: remove useless DeleteMidQEntry() {CVE-2023-52757}
  - media: uvcvideo: Remove dangling pointers {CVE-2024-58002}
  - media: uvcvideo: Only save async fh if success {CVE-2024-58002}
  - media: uvcvideo: Refactor iterators {CVE-2024-58002}
  - drm: nv04: Fix out of bounds access {CVE-2024-27008}
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() {CVE-2025-21780}
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array {CVE-2025-21785}
  - net: rose: fix timer races against user threads {CVE-2025-21718}
  - media: uvcvideo: Fix double free in error path {CVE-2024-57980}
  - vrf: use RCU protection in l3mdev_l3_out() {CVE-2025-21791}
  - geneve: Fix use-after-free in geneve_find_dev(). {CVE-2025-21858}
  - afs: Increase buffer size in afs_update_volume_status() {CVE-2024-26736}
  - net: atlantic: eliminate double free in error handling logic {CVE-2023-52664}
  - bpf: Check validity of link->type in bpf_link_show_fdinfo() {CVE-2024-53099}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.1101.el9_2.tuxcare.7.els14]
changelog:
  - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow {CVE-2024-38577}
  - tcp: fix mptcp DSS corruption due to large pmtu xmit {CVE-2024-50083}
  - vsock: Keep the binding until socket destruction {CVE-2025-21756}
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove {CVE-2025-22020}
  - drm/i915: Fix potential bit_17 double-free {CVE-2023-52930}
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition {CVE-2025-22056}
  - mm: shmem: fix data-race in shmem_getattr() {CVE-2024-46828}
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive {CVE-2024-50215}
  - net: explicitly clear the sk pointer, when pf->create fails {CVE-2024-50186}
  - net: wwan: fix global oob in wwan_rtnl_policy {CVE-2024-50128}
  - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free {CVE-2024-49983}
  - vhost_vdpa: assign irq bypass producer token correctly {CVE-2024-47748}
  - wifi: rtw88: always wait for both firmware loading attempts {CVE-2024-47718}
  - sched: sch_cake: fix bulk flow accounting logic for host fairness {CVE-2024-46828}
  - fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF {CVE-2024-46786}
  - net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934}
  - vhost/vsock: always initialize seqpacket_allow {CVE-2024-43873}
  - ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305}
  - nfsd: make sure exp active before svc_export_show {CVE-2024-56558}
  - SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync {CVE-2024-53208}
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one {CVE-2024-56663}
  - Bluetooth: fix use-after-free in device_for_each_child() {CVE-2024-53237}
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029}
  - tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
  - net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.1101.el9_2.tuxcare.7.els15]
changelog:
  - udmabuf: fix a buf size overflow issue during udmabuf creation {CVE-2025-37803}
  - bpf: Prevent tail call between progs attached to different hooks {CVE-2024-50063}
  - nfsd: fix possible badness in FREE_STATEID {CVE-2024-50043}
  - nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open {CVE-2024-46682}
  - nfsd: fix race between laundromat and free_stateid {CVE-2024-50106}
  - nfsd: split sc_status out of sc_type {CVE-2024-46682}
  - net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926}
  - net: fix geneve_opt length integer overflow {CVE-2025-22055}
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation {CVE-2024-53213}
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths {CVE-2022-48991}
  - xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.1101.el9_2.tuxcare.7.els16]
changelog:
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() {CVE-2022-49846}
  - net: atm: fix use after free in lec_send() {CVE-2025-22004}
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up {CVE-2025-21887}
  - rcutorture: Fix ksoftirqd boosting timing and iteration {CVE-2022-50177}
  - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() {CVE-2022-49940}
  - selinux: Add boundary check in put_entry() {CVE-2022-50200}
  - Squashfs: fix handling and sanity checking of xattr_ids count {CVE-2023-52933}
  - net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
  - ext4: ignore xattrs past end {CVE-2025-37738}
  - ext4: fix off-by-one error in do_split {CVE-2025-23150}
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list {CVE-2025-21919}
  - md: fix mddev uaf while iterating all_mddevs list {CVE-2025-22126}
  - ndisc: use RCU protection in ndisc_alloc_skb() {CVE-2025-21764}
  - md: factor out a helper from mddev_put()
  - Fix "Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd"
  - ext4: prevent stale extent cache entries caused by concurrent get es_cache


author: Vadim Panov <vadim.panov@yahoo.com> [5.14.0-284.1101.el9_2.tuxcare.7.els17]
changelog:
  - net_sched: hfsc: Fix a UAF vulnerability in class handling {CVE-2025-37797}
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error {CVE-2025-38089}
  - net: ch9200: fix uninitialised access during mii_nway_restart {CVE-2025-38086}
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() {CVE-2025-22121}
  - locking/csd_lock: Change csdlock_debug from early_param to __setup {CVE-2022-50091}
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes {CVE-2025-21991}
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead {CVE-2022-49977}
  - NFSv4/pnfs: Fix a use-after-free bug in open {CVE-2022-50072}
  - NFSv4: Don't hold the layoutget locks across multiple RPC calls {CVE-2022-49316}
  - mm/khugepaged: fix ->anon_vma race {CVE-2023-52935}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.1101.el9_2.tuxcare.7.els18]
changelog:
  - tls: always refresh the queue when reading sock {CVE-2025-38471}
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
  - i2c/designware: Fix an initialization issue {CVE-2025-38380}
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() {CVE-2025-21867}
  - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  - ext4: avoid journaling sb update on error if journal is destroying {CVE-2025-22113}
  - ext4: define ext4_journal_destroy wrapper
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() {CVE-2024-36013}
  - Bluetooth: Remove BT_HS {CVE-2024-38620}
  - block, bfq: fix bfqq uaf in bfq_limit_depth() {CVE-2024-53166}
  - dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763}
  - bpf: Fix helper writes to read-only maps (alt version) {CVE-2024-49861}
  - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers {CVE-2023-52621}
  - netfilter: xtables: avoid NFPROTO_UNSPEC where needed {CVE-2024-50038}
  - xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  - net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556}
  - net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788}
  - padata: fix UAF in padata_reorder {CVE-2025-21727}
  - RDMA/mlx5: Fix page_size variable overflow {CVE-2025-22091}


author: Vadim Panov <vpanov@cloudlinux.com> [5.14.0-284.1101.el9_2.tuxcare.7.els19]
changelog:
  - mm/hugetlb: unshare page tables during VMA split, not before {CVE-2025-38084}
  - hugetlb: unshare some PMDs when splitting VMAs {CVE-2025-38084}
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  - tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
  - vsock: Fix transport_* TOCTOU {CVE-2025-38461}
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
  - net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-37914}
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
  - udp: Fix memory accounting leak. {CVE-2025-22058}
  - net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
  - sch_htb: make htb_deactivate() idempotent {CVE-2025-38177}
  - sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
  - sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
  - sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
  - sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
  - sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
  - net: fix udp gso skb_segment after pull from frag_list {CVE-2025-38124}


author: Sergei Nizovtsev <snizovtsev@cloudlinux.com> [5.14.0-284.1101.el9_2.tuxcare.7.els20]
changelog:
  - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2
  - proc: fix a dentry lock race between release_task and lookup
  - scsi: aacraid: Stop using PCI_IRQ_AFFINITY
  - scsi: aacraid: Remove useless code
  - scsi: aacraid: Remove unused aac_check_health()
  - scsi: aacraid: struct {user,}sgmap{,64,raw}: Replace 1-element arrays with flexible arrays
  - scsi: aacraid: Rearrange order of struct aac_srb_unit
  - scsi: aacraid: struct aac_ciss_phys_luns_resp: Replace 1-element array with flexible array
  - scsi: aacraid: union aac_init: Replace 1-element array with flexible array
  - scsi: aacraid: aachba: Replace snprintf() with the safer scnprintf() variant
  - Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity"
  - scsi: aacraid: Avoid -Warray-bounds warning
  - scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity
  - scsi: aacraid: Replace all non-returning strlcpy with strscpy
  - scsi: aacraid: Declare SCSI host template const
  - scsi: aacraid: Drop redundant pci_enable_pcie_error_reporting()
  - scsi: aacraid: Allocate cmd_priv with scsicmd
  - scsi: aacraid: Remove redundant "the"
  - scsi: aacraid: Fix undefined behavior due to shift overflowing the constant
  - scsi: aacraid: Clean up some inconsistent indenting
  - scsi: aacraid: Move the SCSI pointer to private command data
  - scsi: aacraid: Fix spelling of "its"
  - scsi: aacraid: Call scsi_done() directly
  - scsi: aacraid: Introduce aac_scsi_done()
  - scsi: aacraid: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
  - scsi: aacraid: Remove an unused include
  - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler {CVE-2024-25743}
  - net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356}
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() {CVE-2025-38550}
  - scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  - PM: hibernate: defer device probing when resuming from hibernation {CVE-2022-50202}
  - net: fix UaF in netns ops registration error path {CVE-2023-52999}
  - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed {CVE-2023-52999}
  - usb: typec: fix potential array underflow in ucsi_ccg_sync_control() {CVE-2024-53203}
  - soundwire: cadence: fix invalid PDI offset {CVE-2024-38635}
  - drm/i915/vma: Fix UAF on destroy against retire race {CVE-2024-26939}
  - netns: Make get_net_ns() handle zero refcount net {CVE-2024-40958}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487}
  - wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
  - wifi: ath11k: fix gtk offload status event locking {CVE-2023-52777}
  - wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() {CVE-2022-48632}
  - net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739}
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv {CVE-2021-47459}
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg {CVE-2021-47596}
  - Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  - crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  - crypto: qat - fix double free during reset
  - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
  - fs/smb/client: Reset password pointer to NULL {CVE-2023-5345}


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.11.8-1
changelog:
  - CLOS-2692: Updated to 10.11.8
  - CLOS-2692: Fixed "Can't enter LVE" logging message
  - CLOS-2557: tmpfiles config added


author: Timur Averianov <taverianov@cloudlinux.com> - 10.11.14-1
changelog:
  - CLOS-3531: Updated to 10.11.14
  - CLOS-3538: Stopped patching "mysql.server.sh", the upstream version will be used further on


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.2.44-5
changelog:
  - CLOS-1955: Adjusted conflicts and obsoletes tags to mysqlclient18-compat
  - CLOS-1955: Added conflicts tags to another version of cl-MariaDB* packages


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.4.34-1
changelog:
  - CLOS-2692: Updated to 10.4.34
  - CLOS-2692: Fixed "Can't enter LVE" logging message
  - CLOS-2557: tmpfiles config added


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.5.25-1
changelog:
  - CLOS-2692: Updated to 10.5.25
  - CLOS-2692: Fixed "Can't enter LVE" logging message
  - CLOS-2557: tmpfiles config added


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com> Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 10.6.15-1

changelog:
  - CLOS-1923: Updated to 10.6.15
  - CLOS-1744: Added MySQL Provides tag in cl-MariaDB-meta-client package


author: Timur Averianov <taverianov@cloudlinux.com> - 10.6.23-1
changelog:
  - CLOS-3534: Updated to 10.6.23
  - CLOS-3538: Stopped patching "mysql.server.sh", the upstream version will be used further on


author: Timur Averianov <taverianov@cloudlinux.com> - 11.4.8-1
changelog:
  - CLOS-3526: Updated to 11.4.8
  - CLOS-3538: Stopped patching "mysql.server.sh", the upstream version will be used further on


author: Daria Kavchuk <dkavchuk@cloudlinux.com> 5.5.61-2
changelog:
  - MYSQLG-291: Added systemd service files and scripts
  - Removed part of posttrans scriptlet, which cleaned service files


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 5.5.68-1
changelog:
  - Updated up to 5.5.68
  - MYSQLG-477: governer patch: dropped const attribute for governor_charset_bin


author: Timur Averianov <taverianov@cloudlinux.com> - 8.0.43-1
changelog:
  - CLOS-3491: Update cl-MySQL80 to 8.0.43
  - CLOS-3538: Stop patching "mysql.server.sh", the upstream version will be used further on


author: Miroslav Rajcic <miroslav.rajcic@oracle.com> - 8.4.0-1
changelog:
  - mysql_stmt_bind_param C API removed, so increase the libmysqlclient major version to 24.
  - Removed mysqlpump, mysql_upgrade, zlib_decompress and lz4_decompress binaries


author: Timur Averianov <taverianov@cloudlinux.com> - 8.4.6-1
changelog:
  - CLOS-3529: Update cl-MySQL 8.4 to 8.4.6
  - CLOS-3538: Stop patching "mysql.server.sh", the upstream version will be used further on


author: Sergey Kokhan <skokhan@cloudlinux.com> - 3.9-1
changelog:
  - MODLS-528: Fixed error on restore "Too big FD number to restore"
  - MODLS-516: Open out of jail vma files before entering jail
  - Updated to CRIU version 3.9


author: Sergey Kokhan <skokhan@cloudlinux.com> Rostyslav Tulchii <rtulchii@cloudlinux.com> - 3.9-2
changelog:
  - MODLS-564: Remove errors that were logged by criu in apache error_log
  - MODLS-575: Fixed bug when restored lsphp masters spawn children with PIDs lower than last_pid


author: Sandro Mani <manisandro@gmail.com> - 2.15.6-2
changelog:
  - Fix licensecheck incorrectly detecting mime strings such as text/x-c++ as a binary file (#1249227)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.18.24-8
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Sérgio Basto <sergio@serjux.com> - 1.18.25-5
changelog:
  - Revert "Bundle a version of tar to make it compatible in EL7"
  - Keep BR: perl(Digest)
  - Remove --clamp-mtime option on tar of el7.
  - Add Requires perl(Digest::MD5) and perl(Digest::SHA*) on dpkg-perl (#1628409)


author: Sérgio Basto <sergio@serjux.com> - 1.18.25-8
changelog:
  - Requires perl(MIME::Lite) on dpkg-dev (rhbz #1678637)
  - Adds check section and performs unit tests but ignores failures


author: Dominik Mierzejewski <rpm@greysector.net> - 1.23-1
changelog:
  - update to 1.23 (#1597055)
  - point to working URLs
  - pretend t.tar test succeeds for now (#1601392)
  - make testsuite more verbose for the future


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 1.00.38-1
changelog:
  - Update to 1.00.38
  - split freetds-libs package (for multiarch support)
  - change default tds vesrion to auto
  - move odbc plugin from devel to libs package (#1449881)


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - Rebase package to include support for latest OEM hardware and to
    support deploying UEFI SecureBoot dbx updates.
  - Resolves: #1870811


author: Richard Hughes <richard@hughsie.com> 1.5.5-2
changelog:
  - Do not invalidate all remote timestamps during package install to fix rpm -V.
  - Backport some important high priority fixes from upstream.
  - Resolves: #1926382


author: Richard Hughes <richard@hughsie.com> 1.5.9-3
changelog:
  - Rebase to include the SBAT metadata section to allow fixing BootHole
  - Resolves: rhbz#1933012
  - Resolves: rhbz#1932953
  - Resolves: rhbz#1932909
  - Resolves: rhbz#1932882
  - Resolves: rhbz#1932579
  - Resolves: rhbz#1932553
  - Resolves: rhbz#1932423


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport upstream changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1969472
  - Resolves: rhbz#1976408


author: Richard Hughes <richard@hughsie.com> 1.7.1-2
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Resolves: rhbz#2029333


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Resolves: rhbz#2038258
  - Resolves: rhbz#2037294


author: Peter Jones <pjones@redhat.com> - 10-1
changelog:
  - Update to the final released version 10.
  - Make everything under /boot/efi be mode 0700, since that's what FAT will
    show anyway.


author: Peter Jones <pjones@redhat.com> - 10-4
changelog:
  - Roll in some bugfixes that'll be in fwupdate-11 upstream.
    This helps fix a couple of vendors machines.


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-3
changelog:
  - Use downstream garbd-wrapper and garbd.service to ensure compatibility
  - Add upstream versions of garbd-wrapper (called garbd-systemd) and garbd.service
    in case user want's to use them


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-4
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-99
changelog:
  - CLOS-2049: Governor dropin removed
  - CLOS-2170: Add additional safeguards for detecting MySQL AUTO version with DirectAdmin
  - CLOS-2173: Added mysqlclient21 installation for clMariaDB
  - CLOS-2117: mysql-version-list option added
  - MariaDB 10.11 support temporarily removed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-102
changelog:
  - CLOS-2215: bad_users_list ownership fixed
  - CLOS-1759: dbgovernor_map mysql charset changed to utf8mb
  - CLOS-1730: Timeouts added to avoid repetive log messages


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-105
changelog:
  - CLOS-2322: Fixed DB limits not applying to users after a MySQL Governor service restart
  - CLOS-2418: MySQL 8.0 community edition repo url changed


author: Dmitry Shibut <dshibut@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-107
changelog:
  - CLOS-2319: EOLed cl-MariaDB 10.3 removal result to server down
  - CLOS-2471: Fixed wizzard installation


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-109
changelog:
  - CLOS-2572: LVE busy in MySQL processes issue fixed
  - CLOS-2506: Fixed MySQL community downloads URL


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-110
changelog:
  - CLOS-2322: Fixed issue with not applying limits after Governor service restart
  - CLOS-2535: Governor threads logging added


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-111

changelog:
  - CLOS-2645: Corrected MariaDB version detection logic for DA config
  - CLOS-2593, CLOS-2613: Added extended logging
  - CLOS-2385: Added watchdog monitoring utility to governor package
  - CLOS-2386: Implemented external Sentry logging mechanism


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-111

changelog:
  - CLOS-2645: Corrected MariaDB version detection logic for DA config
  - CLOS-2593, CLOS-2613: Added extended logging
  - CLOS-2385: Added watchdog monitoring utility to governor package
  - CLOS-2386: Implemented external Sentry logging mechanism
  - CLOS-2594, CLOS-2641: Implemented logging from MySQL and uniform logging


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-114

changelog:
  - CLOS-2719: Re-enabled watchdog monitoring utility with adjusted logic and interval
  - CLOS-2711: Added extended logging rotation
  - CLOS-2780: Fixed governor restarts
  - CLOS-2596: Do not install missing MariaDB-compat package in case of CL9
  - CLOS-2735: Changed semaphore retry logic to timed wait


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-115
changelog:
  - CLOS-2947: Fix watchdog cron job to stop it from emitting emails
  - CLOS-2885: Prevent sentry_demon from logging zero counters to logs
  - CLOS-2817: Fix Sentry reporting
  - CLOS-2581: Add mysql backup script


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-116
changelog:
  - CLOS-2840: Reduce probability of Governor limits being not applied; prevented Governor hang-up after MySQL/MariaDB or Governor service abrupt termination (replaced semaphore-protected bad_list with lockless one)
  - CLOS-2942: Fix resource usage estimation, reduces probability of Governor limits applied incorrectly
  - CLOS-2873: Fix "/etc/container/dbuser-map" application
  - CLOS-2899: Fix "dbctl --lve-mode=" in case of initial LVE mode "off"


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-117
changelog:
  - Revert changes from 1.2-116 to create a temporary fallback point for 1.2-118
  - Backport fix for unclean handling of SIGTERM in sentry_daemon.py (CLOS-2954)


author:
[cell repeats an earlier one in this file: 106 characters]

changelog:
  - CLOS-2719: Re-enabled watchdog monitoring utility with adjusted logic and interval
  - CLOS-2711: Added extended logging rotation
  - CLOS-2780: Fixed governor restarts
  - CLOS-2596: Do not install missing MariaDB-compat package in case of CL9
  - CLOS-2735: Reduced probability of Governor limits being not applied (changed semaphore retry logic to timed wait in bad_list protection)


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com> Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 1.2-115

changelog:
  - CLOS-2947: Fix watchdog cron job to stop it from emitting emails
  - CLOS-2885: Prevent sentry_demon from logging zero counters to logs
  - CLOS-2817: Fix Sentry reporting
  - CLOS-2581: Add mysql backup script


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-119
changelog:
  - CLOS-2954: Remove prompt when handling SIGTERM in sentry_daemon.py, it was sometimes leading to "BrokenPipe" error
  - CLOS-2968, CLOS-2794: Improve error reporting


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-122
changelog:
  - CLOS-2999: Fix MySQL version logging
  - CLOS-3051: Improve MySQL connections management to avoid crashes
  - CLOS-3051: Improve error reporting
  - CLOS-3015: Add MariaDB 11.4 support


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-124
changelog:
  - CLOS-3196: Fix service dependencies - stopping/starting subordinate 'governor_sentry_daemon.service' by cPanel upgrade scripts was bringing 'db_governor.service' down


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-125
changelog:
  - CLOS-2663, CLOS-3257: Improve error reporting
  - CLOS-3257: Fix crash during statistics collection for LVE-Stats


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-127
changelog:
  - CLOS-3342: Fix outdated limitations in the scenario of several new DB users showed up in sequence fast, and then no new users seen for long
  - CLOS-3361: Fix MariaDB installation on machines with unknown "mysql" DNF module
  - CLOS-3354: Improve error reporting


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-131
changelog:
  - CLOS-2945: Improve error reporting
  - CLOS-3340: Fix restriction causes reported to LVE-stats
  - CLOS-3340: Fix "dbctl restrict <user>" in period-based mode - it was decreasing restriction level
  - CLOS-3340: Fix "dbctl --lve-mode=..." - max. connection count limitation was not removed after restriction reset
  - CLOS-3340: Speed up "dbctl restrict <user>" and "dbctl unrestrict <user>" on machines with many users
  - CLOS-3340: Reduce resource consumption in period-based mode combined with max. connection count limitation
  - CLOS-3340: Reduce resource consumption by duplicate "dbctl unrestrict <user>"
  - CLOS-3340: Fix "penalty period" configuration in period-based mode - setting it to zero didn't turn it off, but still produced a 1 sec penalty period
  - CLOS-3340: Fix "dbgovernor-restrict.log" - remove redundant and misleading items
  - CLOS-3340: Fix "dbctl restrict <user>" - it could restrict administrative DB account
  - CLOS-3418: Fix outdated limitations


author: Haluk Yilmaz <hyilmaz@cloudlinux.com> 1.2-132
changelog:
  - CLOS-3217: Fix "dbtop" and "dbctl" - reports could be inconsistent under high load
  - CLOS-3217: Speed up "dbtop" and "dbctl"


author: Haluk Yilmaz <hyilmaz@cloudlinux.com> 1.2-133
changelog:
  - CLOS-3027: Strengthen string copy operations
  - CLOS-3027: Support long DB user names, up to 80 characters
  - CLOS-3027: Change shared memory structure to consume less memory


author: Timur Averianov <taverianov@cloudlinux.com> 1.2-134
changelog:
  - CLOS-3514: Reduce overhead in the scenario when a new DB user shows up in the middle of already high load
  - CLOS-3317: Fix invalid Linux user names reported to LVE-stats in cases of advanced authentication, like LDAP


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 1.2-136
changelog:
  - CLOS-3521: Fix mysql installation on Ubuntu
  - CLOS-3570: Do not install mysqlclient18 & mysqlclient21 on CloudLinux 10


author: Robbie Harwood <rharwood@redhat.com> - 2.02-143
changelog:
  - x86-efi: Fix an incorrect array size in kernel allocation
  - Also merge with 8.7
  - Resolves: #2031288


author: Leo Sandoval <lsandova@redhat.com> - 2.02-161
changelog:
  - Add Several CVE fixes
  - Resolves CVE-2024-45775 CVE-2025-0624
  - Resolves: #RHEL-75735
  - Resolves: #RHEL-79837


author: Nicolas Frayer <nfrayer@redhat.com> - 2.02-162
changelog:
  - ieee1275/ofnet: Fix grub_malloc() removed after added safe
  - Remove 'fs/ntfs: Implement attribute verification' patch
  - Related: #RHEL-79837


author: Leo Sandoval <lsandova@redhat.com> - 2.02-167
changelog:
  - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present
  - Resolves: #RHEL-80168


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2:2.02-169.cloudlinux.1
changelog:
  - CLKRN-867: move /boot/grub2/grubenv to /boot/efi/EFI/centos/ if it's a regular
    file(not a symlink) while updating/installing.
  - CLKRN-916: move fixing grubenv (CLKRN-867) to posttrans scriptlet when all
    needed dirs exis


author: Antonio Trande <sagitter@fedoraproject.com> - 1.8.20-3
changelog:
  - Force default ldflags for Fedora (bz#1548533)
  - Switch -shared flag to -Wl,--as-needed
  - Modify low optimization level for gnu compilers
  - New URL


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-56
changelog:
  - Resolves: #2162499 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2162485 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2162509 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-56.4
changelog:
  - Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting
    with mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-62
changelog:
  - Resolves: #2221083 - Apache Bug 57087: mod_proxy_fcgi doesn't send cgi 
    CONTENT_LENGTH variable when the client request used Transfer-Encoding:chunked


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.1
changelog:
  - Resolves: RHEL-45812 - httpd:2.4/httpd: Substitution encoding issue
    in mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-45785 - httpd:2.4/httpd: Encoding problem in
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45777 - httpd:2.4/httpd: Improper escaping of output
    in mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45758 - httpd:2.4/httpd: null pointer dereference
    in mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45743 - httpd:2.4/httpd: Potential SSRF
    in mod_rewrite (CVE-2024-39573)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.2
changelog:
  - Resolves: RHEL-46040 - httpd:2.4/httpd: Security issues via backend
    applications whose response headers are malicious or exploitable (CVE-2024-38476)
  - Resolves: RHEL-53022 - Regression introduced by CVE-2024-38474 fix


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.3
changelog:
  - Resolves: RHEL-56068 - Apache HTTPD no longer parse PHP files with
    unicode characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.5
changelog:
  - Resolves: RHEL-99944 - CVE-2025-49812 httpd: HTTP Session Hijack via a TLS upgrade
  - Resolves: RHEL-99969 - CVE-2024-47252 httpd: insufficient escaping of
    user-supplied data in mod_ssl
  - Resolves: RHEL-99961 - CVE-2025-23048 httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.6
changelog:
  - Resolves: RHEL-127073 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix
  - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.7
changelog:
  - Resolves: RHEL-135054 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135039 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134471 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Pavel Alexeev <Pahan@Hubbitus.info> - 2.4.7.01.1
changelog:
  - Owesome! Httpd 2.4.7 pushed. It shoud not require any hack anymore.
  - Major update to 2.4.7-01.
  - Apache from 2.4 version have modularity structure, so many changes:
  	- Mpm may be build without apache source tree!
  	- Exclude apache sources, turn mpm-itk tarball into regular source0.
  	- So drop all black magic!
  	- Instal it as module, retire separate systemd service files and related stuff.
  	- Rewrite README.Fedora.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 2.4.7.01-5
changelog:
  - Fix build issue on EL7 (rhbz# 1188159). Big thanks to Athmane Madjoudj <athmane@fedoraproject.org> for the work.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 2.4.7.04-1
changelog:
  - Update to version 2.4.7-04 to solve problem https://lists.err.no/pipermail/mpm-itk/2015-September/000925.html. By mail request of Marco Matarazzo.


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 10.00.15-1.cloudlinux
changelog:
  - CLKRN-639: added a script to collect data from clients' servers after a panic occurred
  - CLKRN-681: update to 10.00.9-1.cloudlinux
  - CLKRN-620: added netconsole config detailed description, corrected spec
  - CLKRN-620: added ptr for sentry server's ip (77.79.198.28)
  - Add optional 'dev' keyword
  - CLKRN-595: added logs reporting on a kernel crashing event


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 10.00.15-1.cloudlinux.2
changelog:
  - CLKRN-796: added needed dependency for scriptlets
  - CLKRN-785: improved parsing vmcore-dmesg.txt by cloudlinux-collect-panic-info script
  - CLKRN-786: deleted all debug output to prevent crontab email notifications


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 10.00.15-1.cloudlinux.5
changelog:
  - CLKRN-901: added client_id & system_id to the sent info on our KPR by rtulchii
  - CLKRN-914: redirect error output to /dev/null by rtulchii
  - CLKRN-880: organized return codes by rtulchii


author: Jan Macku <jamacku@redhat.com> - 10.00.16-1
changelog:
  - rename_device: also support dracut-style kernel cmdline configuration
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race


author: Jan Macku <jamacku@redhat.com> - 10.00.17-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ci: introduce GA ci from master to rhel8-branch
  - ci: Setup packit for RHEL8 branch
  - ci: Get rid of old ci files (travis and zanata)


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1:10.00.19-1.cloudlinux.1
changelog:
  - CLKRN-1004: added needed dependencies for cloudlinux-collect-panic-info script
  - CLKRN-901: added client_id & system_id to the sent info on our KPR by rtulchii
  - CLKRN-914: redirect error output to /dev/null by rtulchii
  - CLKRN-880: organized return codes by rtulchii
  - CLKRN-866: fixed tmp directory usage by users
  - CLKRN-796: added needed dependency for scriptlets
  - CLKRN-785: improved parsing vmcore-dmesg.txt by cloudlinux-collect-panic-info
    script
  - CLKRN-786: deleted all debug output to prevent crontab email notifications
  - CLKRN-772: fixed /usr/sbin/cloudlinux-collect-panic-info erasing  filesystem
  - CLKRN-639: added a script to collect data from clients' servers after a panic
    occurred
  - CLKRN-681: update to 10.00.9-1.cloudlinux
  - CLKRN-620: added netconsole config detailed description, corrected spec
  - CLKRN-620: added ptr for sentry server's ip (77.79.198.28)
  - Add optional 'dev' keyword
  - CLKRN-595: added logs reporting on a kernel crashing event


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.0.1-5
changelog:
  - Actually, specify pagesizes according to arches, closes #1545539
  - Remove patch disabling thp as this is now handled by configure, see
    upstream issue 526


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.5.1.el8_8]
changelog:
  - Revert "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2109600]
  - gfs2: Evict inodes cooperatively (Andreas Gruenbacher) [2109600]
  - gfs2: Flush delete work before shrinking inode cache (Andreas Gruenbacher) [2109600]
  - gfs2: Add SDF_DEACTIVATING super block flag (Bob Peterson) [2109600]
  - gfs2: check gl_object in rgrp glops (Bob Peterson) [2109600]
  - gfs2: Split the two kinds of glock "delete" work (Andreas Gruenbacher) [2109600]
  - gfs2: Move delete workqueue into super block (Andreas Gruenbacher) [2109600]
  - gfs2: Use container_of() for gfs2_glock(aspace) (Andreas Gruenbacher) [2109600]
  - gfs2: Get rid of GLF_PENDING_DELETE flag (Andreas Gruenbacher) [2109600]
  - gfs2: Make glock lru list scanning safer (Andreas Gruenbacher) [2109600]
  - gfs2: Fix use-after-free in gfs2_glock_shrink_scan (Andreas Gruenbacher) [2109600]
  - gfs2: Clean up gfs2_scan_glock_lru (Andreas Gruenbacher) [2109600]
  - gfs2: gl_object races fix (Andreas Gruenbacher) [2109600]
  - iomap/gfs2: Unlock and put folio in page_done handler (Andreas Gruenbacher) [2109600]
  - iomap: Add __iomap_put_folio helper (Andreas Gruenbacher) [2109600]
  - gfs2: Remove support for glock holder auto-demotion (2) (Andreas Gruenbacher) [2109600]
  - gfs2: Remove support for glock holder auto-demotion (Andreas Gruenbacher) [2109600]
  - gfs2: Minor gfs2_try_evict cleanup (Andreas Gruenbacher) [2109600]
  - gfs2: Partially revert gfs2_inode_lookup change (Andreas Gruenbacher) [2109600]
  - gfs2: Add gfs2_inode_lookup comment (Andreas Gruenbacher) [2109600]
  - gfs2: Uninline and improve glock_{set,clear}_object (Andreas Gruenbacher) [2109600]
  - gfs2: Simply dequeue iopen glock in gfs2_evict_inode (Andreas Gruenbacher) [2109600]
  - gfs2: Clean up after gfs2_create_inode rework (Andreas Gruenbacher) [2109600]
  - gfs2: Avoid dequeuing GL_ASYNC glock holders twice (Andreas Gruenbacher) [2109600]
  - gfs2: Handle -EBUSY result of insert_inode_locked4 (Andreas Gruenbacher) [2109600]
  - gfs2: Fix and clean up create / evict interaction (Andreas Gruenbacher) [2109600]
  - gfs2: Clean up initialization of "ip" in gfs2_create_inode (Andreas Gruenbacher) [2109600]
  - gfs2: Get rid of ghs[] in gfs2_create_inode (Andreas Gruenbacher) [2109600]
  - gfs2: Dequeue waiters when withdrawn (Bob Peterson) [2109600]
  - gfs2: Prevent double iput for journal on error (Bob Peterson) [2109600]
  - Revert "gfs2: stop using generic_writepages in gfs2_ail1_start_one" (Andreas Gruenbacher) [2109600]
  - gfs2: remove ->writepage (Andreas Gruenbacher) [2109600]
  - gfs2: stop using generic_writepages in gfs2_ail1_start_one (Andreas Gruenbacher) [2109600]
  - gfs2: List traversal in do_promote is safe (Andreas Gruenbacher) [2109600]
  - gfs2: do_promote glock holder stealing fix (Bob Peterson) [2109600]
  - gfs2: Use better variable name (Andreas Gruenbacher) [2109600]
  - gfs2: Make go_instantiate take a glock (Andreas Gruenbacher) [2109600]
  - gfs2: Add new go_held glock operation (Andreas Gruenbacher) [2109600]
  - gfs2: Revert 'Fix "truncate in progress" hang' (Andreas Gruenbacher) [2109600]
  - gfs2: Instantiate glocks ouside of glock state engine (Andreas Gruenbacher) [2109600]
  - gfs2: Fix up gfs2_glock_async_wait (Andreas Gruenbacher) [2109600]
  - gfs2: Add GL_NOPID flag for process-independent glock holders (Andreas Gruenbacher) [2109600]
  - gfs2: dump inode object for iopen glocks (Bob Peterson) [2109600]
  - gfs2: convert to use DEFINE_SEQ_ATTRIBUTE macro (Andreas Gruenbacher) [2109600]
  - gfs2: Use TRY lock in gfs2_inode_lookup for UNLINKED inodes (Bob Peterson) [2109600]


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.6.1.el8_8]
changelog:
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jon Maloy) [2160033] {CVE-2022-2196}


author: Denis Kirjanov <dkirjanov@cloudlinux.com> [4.18.0-477.13.1.lve.el8_8]
changelog:
  - KB-252: add dependency to kmod 25-19.cloudlinux.2
  - CLKRN-1096: force to load modern kmod in order kabi breakage.
  - CLKRN-1052: deadlock between prealloc truncate and fs unfreeze


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: Anatoly Stepanov <astepanov@cloudlinux.com> - 25-19.cloudlinux
changelog:
  - KMODLVE-464: depmod: resolve different sub-dir lengths issue
  - CLKRN-819: improved prioritizing with modules sharing the same name
  - bump epoch


author: Anton Mikaiev <amikaiev@cloudlinux.com> - 2.1-16
changelog:
  - CLKRN-1176: added patch to fix ttypushback vulnerability
  - CLKRN-1195: bumped kernel version for building (cl8) for debug kernel compatibility
  - CLKRN-1093: allow freezable sleep in kmodlve


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-17
changelog:
  - CLKRN-1210: make new page cache accounting default for new installations
  - CLKRN-1089: do not account page cache memory in lve stats output


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-18
changelog:
  - CLKRN-1371: fixed kernel.proc_disable_net & introduced kernel.proc_disable_net2
  - CLKRN-1386: adapt kmodlve building with FEAT_LINK_PROT == 0


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-19
changelog:
  - KMODLVE-600: iolimits events support for CL8/9
  - KMODLVE-601: tag get/put events support
  - CLKRN-1406: revert some changes related to prod_net_disable2 - made the behaviour obliged
  - CLKRN-1355: symlink owner protection fixes for CL9
  - CLKRN-1399: improved fs.protected_symlinks_create option to close the SecureLink creating vulnerability


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-22
changelog:
  - CLKRN-1455: change kernel (cl9) building version for 5.14.0-362.13.1.el9_3
  - CLKRN-1203: switch back to using rh_reserved for tag links
  - CLKRN-1439: reduce warnings from external cgroup moves


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-24
changelog:
  - CLKRN-1488: rework security_* hooks
  - CLOS-2484: suppress the warning for nonexistent 90-cloudlinux.conf in the script


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-26
changelog:
  - CLKRN-1546: always block cgroup move in a multithreaded app
  - CLKRN-1547: stringify more lve_enter flags
  - CLKRN-1541: do not kill unkillable tasks from de_thread()
  - CLKRN-1542: do not allow to interrupt lve_unlink()
  - CLKRN-1457: fixed XFS_QMOPT_FORCE_RES for cl9 kernels


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-28
changelog:
  - CLKRN-1559: check if the ptr is invalid in lve_do_renameat2_trace hook
  - CLKRN-1566: improved restrictions on accessing another mnt ns


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-32
changelog:
  - CLKRN-1606: call missing putname within SP
  - CLKRN-1447: adapted minor log for moving tasks outside of LVEs


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-37
changelog:
  - CLKRN-1698: disable write access to process memory via procfs
  - CLKRN-1688: CL9.5 kernel support
  - CLKRN-1685: implement iolimits for LVP


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-38
changelog:
  - CLKRN-1701: implement namespace check in __ptrace_may_access
  - CLKRN-1696: a switch to disable page cache accounting in lve pmem


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-41
changelog:
  - CLKRN-1717: enable lve_pmem_nocache by default
  - CLKRN-1716: adapted SP hooks variants for Ubuntu 22
  - CLKRN-1715: adapt datacycle hook for Ubuntu 22
  - CLKRN-1715: adapted XFS quota flag for Ubuntu 22 kernel (5.15.0)


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-53
changelog:
  - CLKRN-1910: disable unused ftrace hooks
  - CLKRN-2000: use fput_async if available and doesn't bug_on on non-kernel threads


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: Paul Howarth <paul@city-fan.org> - 1.8.0-1
changelog:
  - Update to 1.8.0
    - Added a basic dockerised test suite
    - crypto: Add support for the mbedTLS backend
    - See RELEASE-NOTES for details of bug fixes


author: Paul Howarth <paul@city-fan.org> - 1.8.0-5
changelog:
  - scp: Do not NUL-terminate the command for remote exec (#1489736, GH#208)
  - Make devel package dependency on main package arch-specific
  - Drop EL-5 support
    - noarch sub-packages always available now
    - Drop legacy Group: and BuildRoot: tags
    - Drop explicit buildroot cleaning
    - %{__isa_bits} always defined now


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-7.el8_0.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Danilo de Paula <ddepaula@redhat.com> - 1.8.0-8.1
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1696354
    (Ensure modular RPM upgrade path [ZStream Clone] [rhel-8.0.0.z])


author: Remi Collet <remi@remirepo.net> - 1.5.1-1
changelog:
  - update to 1.5.1
  - drop dependency on zlib-devel and bzip2-devel no more
    referenced in libzip.pc
  - drop rpath patch merged upstream


author: Remi Collet <rcollet@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2
  - add all explicit cmake options to ensure openssl is used
    even in local build with other lilbraries available


author: Tim Niemueller <tim@niemueller.de> - 5.1.4-7
changelog:
  - Add patch to from lua.org with smaller bugfixes
  - sed -i -e 's/5\.1\.3/5.1.4/g' on autotoolize patch, bug #641144


author: Michal Schorm <mschorm@redhat.com> - 0.996-2.12
changelog:
  - Bump version for 'mysql' module rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo
  - Resolves: #2180411


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.9.3-1
changelog:
  - Update to 2.9.3
  - Fixes various CVE's:
    RHBZ #1213960, #1262853, #1262854, #1274225, #1274226, #1276299
    RHBZ #1276300, #1277149, #1277150, #1281952, #1281953


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.0-37
changelog:
  - AAP-273: expand the range of LVEErrorCodes
  - AAP-253: spec and cmake redesigned for new httpd24 build
  - AAP-241: Update Copyright for mod_hostinglimits project
  - AAP-244: Fix cmakefiles for httpd24-mod_hostinglimits


author: Aleksandr Demeshko <ademeshko@cloudlinux.com> Nikolay Petukhov <npetukhvov@cloulinux.com> - 1.0-40
changelog:
  - AAP-510: log level changed to WARN for limited requests
  - AAP-493: Improved log output
  - AAP-508: Allowed AllowedHandlers and DenyHandlers directives inside Directory, Location and Files contexts


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-3
changelog:
  - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
    large response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-4
changelog:
  - Resolves: #1966728 - CVE-2021-33193 httpd:2.4/mod_http2: httpd:
    Request splitting via HTTP/2 method injection and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-5
changelog:
  - Resolves: #2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference
    or SSRF in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-9.3
changelog:
  - Resolves: RHEL-13367 - httpd:2.4/mod_http2: reset requests exhaust memory
    (incomplete fix of CVE-2023-44487)(CVE-2023-45802)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-10.1
changelog:
  - Resolves: RHEL-46214 - Access logs and ErrorDocument don't work when HTTP431
    occurs using http/2 on RHEL8


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-10.3
changelog:
  - Resolves: RHEL-58454 - mod_proxy_http2 failures after CVE-2024-38477 fix
  - Resolves: RHEL-59017 - random failures in other requests on http/2 stream
    when client resets one request


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-10.4
changelog:
  - Resolves: RHEL-105186 - httpd:2.4/httpd: untrusted input from a client causes
    an assertion to fail in the Apache mod_proxy_http2 module (CVE-2025-49630)


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-1
changelog:
  - new version 1.11.3
  - Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
    connections by continuous SETTINGS


author: Nikolay Petukhov <npetukhov@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-62
changelog:
  - MODLS-935: Fixed malformed http response caused by wrong http header
  - MODLS-940: Added oom score adjustment for lsphp processes


author: Nikolay Petukhov <npetukhov@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-63
changelog:
  - MODLS-952: Fixed the bug added when solving MODLS-935
  - CRIU support disabled on CL9 due to MODLS-955


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-64
changelog:
  - MODLS-946: lsapi_backend_use_own_log option context fixed
  - MODLS-956: liblsapi dependency made strict for mod_lsapi packages
  - MODLS-959: HTTP output filter error processing changed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-65
changelog:
  - MODLS-963: ea-php82 handler added
  - MODLS-962: DA installation script modified to be called without parameters


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-73
changelog:
  - CLOS-2334: Minor mod_lsapi scripts corrections
  - CLOS-2348: Execute condition changed in switch_mod_lsapi script


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-75
changelog:
  - CLOS-2832: AlmaLinux support added
  - CLOS-2818: Changed requirement from alt-php56 to alt-php81
  - CLOS-2860: Added lsapi_get_status_line declaration


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-77
changelog:
  - CLOS-2951: Add support of alt-php 5.2-5.5 for Alma
  - CLOS-2904: Ignore errors in blacklisted config files


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-78
changelog:
  - CLOS-3055: Restore CRIU support in mod_lsapi DA tarballs
  - CLOS-3007: Add PHP 8.4 support as well as support of future PHP versions
  - CLOS-3007: Add heuristic to resolve unlisted PHP handlers
  - CLOS-3043: Add support of Ubuntu 22


author: Timur Averianov <taverianov@cloudlinux.com> 1.1-81
changelog:
  - CLOS-3184: Fix installation error on CL7+Plesk, leading to Apache service not starting; improve future upgrade reliability for other configurations


author:
  Timur Averianov <taverianov@cloudlinux.com> Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 1.1-86

changelog:
  - MAXWS-785: Fix backend termination script hanging in the background when there were too many processes
  - CLOS-3499: Update package to be compatible with CloudLinux 10


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.1-87

changelog:
  - CLOS-3355: Set the docroot and domain information in the env before spawning lsphp
  - CLOS-3574: Use LSPHPRC instead of PHPRC if ea-php is version 8.4 and higher
  - CLOS-3646: Support RLIMITs


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.0.8-8.2
changelog:
  - Resolves: RHEL-134487 - httpd:2.4/httpd: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (CVE-2025-55753)


author: Leonid Kanter <lkanter@cloudlinux.com> - 0.7.2-1
changelog:
  - update to with-setid-mode="owner"
  - handle update of packages built with --with-setid-mode="owner" (dkasyanov@)


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, s390 and robin hood
  - Add a new plugin 'conflicting_variables.so'


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-2
changelog:
  - new version 1.18.0
  - Resolves: #1668717 - [RFE] Support loading certificates from hardware token
    (PKCS#11)
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1651377 - centralizing default index.html on nginx
  - Resolves: #1825683 - Outdated Red Hat branding used in nginx default pages


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2112345 - nginx:1.22 for RHEL 8
  - add stream_geoip_module and stream_realip_module
  - remove obsolete --with-ipv6


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1.1
changelog:
  - Resolves: RHEL-12726 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack)(CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-2
changelog:
  - Resolves: RHEL-12728 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack)(CVE-2023-44487)


author: Korde Nakul <nakul.korde@intel.com> 1.4.1-1
changelog:
  - OPAE git repository layout changes.
  - Removed Safe String module dependency.
  - Various bug fixes.
  - Ported python tools to python3.6.
  - Various Static code scan bug fixes.
  - Removed pybind11 3rd component from OPAE source repository.


author: Tomas Hoger <thoger@redhat.com> - 16.02-7
changelog:
  - Add conditional for building with(out) GUI support.  Keep GUI enabled for
    Fedora and EPEL builds, but disabled for RHEL.
  - Add missing dependency - 7zG requires 7z.so, so p7zip-gui needs to require
    p7zip-plugins.


author: Sérgio Basto <sergio@serjux.com> - 16.02-9
changelog:
  - Security fix for CVE-2017-17969 (from Debian)
  - Add 05-hardening-flags.patch, 09-man-update.patch, 10-drop-fm-doc.patch
    and 14-Fix-g++-warning.patch patches from Debian, very small changes
    better documentation, compile flags and compile warning.


author: Anton Volkov <avolkov@cloudlinux.com>, Vladislav Fomin <vfomin@cloudlinux.com> 0.3-11
changelog:
  - PAMLVE-8: build pam_lve rpm package for CL8
  - PAMLVE-6: strange lve1 appears after attempt to create lvp
  - CAG-603: use CloudLinux Zug GmbH instead of Cloud Linux Inc
  - update EULA


author: Paul Howarth <paul@city-fan.org> - 0.19-5
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Use a patch rather than scripted iconv to fix documentation encodings
  - Simplify find command using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 0.20-1
changelog:
  - Update to 0.20
    - Fix test skip count on Win32 (CPAN RT#76335)
  - Drop UTF8 docs patch; issue fixed upstream


author: Paul Howarth <paul@city-fan.org> - 0.007-1
changelog:
  - Update to 0.007
    - Adapt to dot no longer being in @INC
    - Adapt to unicode syswrite being deprecated
  - Drop redundant Group: tag


author: Remi Collet <rcollet@redhat.com> - 7.4.19-2
changelog:
  - fix SSRF bypass in FILTER_VALIDATE_URL
    CVE-2021-21705
  - fix Local privilege escalation via PHP-FPM
    CVE-2021-21703


author: Remi Collet <rcollet@redhat.com> - 7.4.33-1
changelog:
  - rebase to 7.4.33
  - fix: due to an integer overflow PDO::quote() may return unquoted string
    CVE-2022-31631


author: Remi Collet <rcollet@redhat.com> - 7.4.33-2
changelog:
  - fix low/moderate CVEs
    RHEL-66589
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096
  - Fix Security issue with external entity loading in XML without enabling it
    CVE-2023-3823
  - Fix Buffer mismanagement in phar_dir_read()
    CVE-2023-3824
  - Fix Missing error check and insufficient random bytes in HTTP Digest
    authentication for SOAP
    CVE-2023-3247
  - fix #81744: Password_verify() always return true with some hash
    CVE-2023-0567
  - fix #81746: 1-byte array overrun in common path resolve code
    CVE-2023-0568
  - fix DOS vulnerability when parsing multipart request body
    CVE-2023-0662


author: Remi Collet <rcollet@redhat.com> - 7.4.33-3
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217
  - Fix pgsql extension does not check for errors during escaping
    CVE-2025-1735
  - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
    CVE-2025-6491
  - Fix Null byte termination in hostnames
    CVE-2025-1220
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14705
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 7.4.6-1
changelog:
  - update to 7.4.6
  - add ffi extension
  - add /usr/share/php/preload as default ffi.preload configuration
  - run FPM tests
  - set opcache.enable_cli in provided default configuration
  - ensure all shared extensions can be loaded
  - drop wddx, recode and extensions
  - run test suite using 4 concurrent workers


author: Boris Ranto <branto@redhat.com> - 0.9.6-1
changelog:
  - Rebase to latest upstream version
  - Modify backwards compatible symlink for qt(4)
  - Enable pinentry-emacs since it was enabled by default in 0.9.5


author: Leigh Scott <leigh123linux@googlemail.com> - 0.105-14
changelog:
  - Fix source url
  - Remove build requires desktop-file-utils
  - Add version to PolicyKit-authentication-agent provides
  - Spec file clean up


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.23-3
changelog:
  - Use /usr/bin/perl instead of /usr/bin/env perl.
  - Add BR: perl(*).
  - Use wildcards instead of hardcoded *.gz for man-pages.


author: Petr Viktorin <pviktori@redhat.com> - 5.1.1-2
changelog:
  - Remove the python2 version of docs
  - Remove Qt subpackages
  - Drop dependency on python2-olefile (breaking MicImagePlugin.py, FpxImagePlugin)


author: Petr Viktorin <pviktori@redhat.com> - 5.1.1-3
changelog:
  - Remove the Python 2 subpackage
  - Remove the libimagequant dependency
    The imagequant library was only used to support a non-default image
    quantization mode.


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-7
changelog:
  - Add upstream patch to solve build-time warning
  - Move patches to dist-git
  - Resolves: rhbz#1639348


author: Kalev Lember <klember@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Switch to new upstream at https://github.com/pygobject/pycairo
  - Switch to distutils build system
  - Tighten subpackage deps with the _isa macro
  - Rename Python 2 package to python2-cairo
  - Enable Python 3 support


author: Petr Viktorin <pviktori@redhat.com> - 1.16.3-2
changelog:
  - Allow Python 2 for build
    See: https://hurl.corp.redhat.com/rhel8-py2

  - Skip tests on Python 2 (python2-pytest is being removed)


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-2
changelog:
  - New patch to not turn DeprecationWarning in tornado module into Exception
  - Fixes FTBFS with Python 3.8


author: Benjamin A. Beasley <code@musicinmybrain.net> - 20190801-6
changelog:
  - Simplify and modernize invocation of make
  - We do not switch to CMake because the configuration for it is too
    primitive in this upstream release, and several patches would be needed.


author: Jan Dobes 5.0.27-1
changelog:
  - 1383668 - close and reopen syslog when redirecting child output
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.33-1
changelog:
  - fix rhnsd triggered upgrade of rhnsd on systemd systems
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "1260527 RHEL7 rhnsd reload doesn't work"


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.19-2
changelog:
  - Update "missing" scripts to automake-1.15
  - Add active polling for acquiring policy file
  - Fix translation of hex values in AVCs (#1477236, #1709742)
  - require initscripts to ensure that "service" call works properly


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.21-1
changelog:
  - Use dbus.mainloop.glib.DBusGMainLoop() instead of dbus.glib
  - Fix AVC.__typeMatch to handle aliases properly
  - Handle sockets with abstract path properly (#1775135)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.22-2
changelog:
  - Log plugin exception traceback when log level is DEBUG
  - sepolicy.info() returns a generator, not a list (#1784564)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.23-1
changelog:
  - browser: Check return value of Gdk.Screen().get_default() (#1574434)
  - Improve and unify error messages (#1763982)
  - setroubleshoot.util: Catch exceptions from sepolicy import
  - Add dpkg support
  - Do not refer to hardcoded selinux-policy rpm in signature
  - Make date/time format locale specific (#1812674)
  - Improve speed of plugin evaluation (#1794807)
  - Do not try to report a bug on None package
  - sealert: Drop unused import slib.dbus.service
  - Drop updater.py - it's not used and doesn't work
  - root user doesn't need to use SetroubleshootPrivileged API
  - Use pydbus, a modern Python dbus API, for SetroubleshootPrivileged
  - Report bug on a package which owns the related SELinux domain (#1811644)
    https://pagure.io/setroubleshoot/issue/18
  - Add Local SELinux policy package version to analyses reports
  - setroubleshoot.utils.get_rpm_nvr_by_scontext add option to use DBUS method
  - Export setroubleshoot.utils.get_rpm_nvr_by_scontext via DBUS
  - setroubleshoot.util: get_rpm_nvr_by_type() and get_rpm_nvr_by_scontext()


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-1
changelog:
  - Add 'fur' into shipped locales
  - Update translations (#1820570)
  - Log full reports with correct syslog identifier
  - Cancel pending alarm during AVC analyses


author: Javier Martinez Canillas <javierm@redhat.com> - 15-3
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715878
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717064


author: Peter Jones <pjones@redhat.com> - 15-4
changelog:
  - Rebuild for bug fixes and new signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
  - Once more with the MokListRT config table patch added.
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Implement Lenny's workaround
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-8
changelog:
  - Fix a load-address-dependent forever loop.
    Resolves: rhbz#1861977
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311
    Related: CVE-2020-15705
    Related: CVE-2020-15706
    Related: CVE-2020-15707


author: Andrew Lukoshko <alukoshko@cloudlinux.com> - 15.8-1.el8.cloudlinux.1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: СVE-2023-40548
    Resolves: СVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
  - Add CloudLinux Secure Boot CA 2 cert as trusted


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: Sérgio Basto <sergio@serjux.com> - 2.8-1
changelog:
  - Update to 2.8 more 2 patches to fix builds on non-x86 and arm
    https://bitbucket.org/multicoreware/x265/issues/404/28-fails-to-build-on-ppc64le-gnu-linux
    https://bitbucket.org/multicoreware/x265/issues/406/arm-assembly-fail-to-compile-on-18


