# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-228.el10]
changelog:
  - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - s390/barrier: Make array_index_mask_nospec() __always_inline (Ramesh Chhetri) [RHEL-174629]
  - s390/entry: Scrub r12 register on kernel entry (Ramesh Chhetri) [RHEL-174629]
  - bitmap: introduce bitmap_weighted_xor() (Michal Schmidt) [RHEL-174745]
  - bitmap: add test_zero_nbits() (Michal Schmidt) [RHEL-174745]
  - bitmap: exclude nbits == 0 cases from bitmap test (Michal Schmidt) [RHEL-174745]
  - bitmap: test bitmap_weight() for more (Michal Schmidt) [RHEL-174745]
  - bitmap: add bitmap_weight_from() (Michal Schmidt) [RHEL-174745]
  - bitmap: align test_bitmap output (Michal Schmidt) [RHEL-174745]
  - bitmap: switch test to scnprintf("%*pbl") (Michal Schmidt) [RHEL-174745]
  - bitmap: Add test for out-of-boundary modifications for scatter & gather (Michal Schmidt) [RHEL-174745]
  - cpumask: Introduce cpumask_weighted_or() (Michal Schmidt) [RHEL-174745]
  - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Michal Schmidt) [RHEL-174745]
  - bitmap: remove _check_eq_u32_array (Michal Schmidt) [RHEL-174745]
  - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-172305]
  - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-172305]
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172748] {CVE-2026-43051}
  - redhat/configs: Enable MPAM options (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Make resctrl_mon_ctx_waiters static (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix the check for no monitor components found (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix MBA CDP alloc_capable handling on unmount (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add initial MPAM documentation (Gavin Shan) [RHEL-164228]
  - arm_mpam: Quirk CMN-650's CSU NRDY behaviour (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-6 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-4 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-1 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add quirk framework (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Call resctrl_init() on platforms that can support resctrl (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Select ARCH_HAS_CPU_RESCTRL (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add empty definitions for assorted resctrl functions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Update the rmid reallocation limit (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_rmid_read() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Allow resctrl to allocate monitors (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for csu counters (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add monitor initialisation and domain boilerplate (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add kunit test for control format conversions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for 'MB' resource (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Wait for cacheinfo to be ready (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add rmid index helpers (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Convert to/from MPAMs fixed-point formats (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Hide CDP emulation behind CONFIG_EXPERT (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add CDP emulation (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add plumbing against arm64 task and cpu hooks (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement helpers to update configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_get_config() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement resctrl_arch_reset_all_ctrls() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Pick the caches we will use as resctrl resources (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add boilerplate cpuhp and domain allocation (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Force guest EL1 to use user-space's partid configuration (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add helpers to change a task or cpu's MPAM PARTID/PMG values (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Initialise and context switch the MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Advertise the CPUs MPAM limits to the driver (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Drop the CONFIG_EXPERT restriction (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Re-initialise MPAM regs when CPU comes online (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Context switch the MPAM registers (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Make MPAMSM_EL1 accesses UNDEF (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Preserve host MPAM configuration when changing traps (Gavin Shan) [RHEL-164228]
  - arm64/sysreg: Add MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm_mpam: Reset when feature configuration bit unset (Gavin Shan) [RHEL-164228]
  - arm_mpam: Ensure in_reset_state is false after applying configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: Force __iomem casts (Gavin Shan) [RHEL-100932]
  - arm_mpam: Disable preemption when making accesses to fake MSC in kunit test (Gavin Shan) [RHEL-100932]
  - arm_mpam: Fix null pointer dereference when restoring bandwidth counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use non-atomic bitops when modifying feature bitmap (Gavin Shan) [RHEL-100932]
  - arm_mpam: Remove duplicate linux/srcu.h header (Gavin Shan) [RHEL-100932]
  - arm_mpam: Stop using uninitialized variables in __ris_msmon_read() (Gavin Shan) [RHEL-100932]
  - MAINTAINERS: new entry for MPAM Driver (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit tests for props_mismatch() (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit test for bitmap reset (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helper to reset saved mbwu state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use long MBWU counters if supported (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe for long/lwd mbwu counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Consider overflow in bandwidth counter state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Track bandwidth counter state for power management (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add mpam_msmon_read() to read monitor value (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers to allocate monitors (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe and reset the rest of the features (Gavin Shan) [RHEL-100932]
  - arm_mpam: Allow configuration to be applied and restored during cpu online (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use a static key to indicate when mpam is enabled (Gavin Shan) [RHEL-100932]
  - arm_mpam: Register and enable IRQs (Gavin Shan) [RHEL-100932]
  - arm_mpam: Extend reset logic to allow devices to be reset any time (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add a helper to touch an MSC from any CPU (Gavin Shan) [RHEL-100932]
  - arm_mpam: Reset MSC controls from cpuhp callbacks (Gavin Shan) [RHEL-100932]
  - arm_mpam: Merge supported features during mpam_enable() into mpam_class (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe the hardware features resctrl supports (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers for managing the locking around the mon_sel registers (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe hardware to find the supported partid/pmg values (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add cpuhp callbacks to probe MSC hardware (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add MPAM MSC register layout definitions (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add the class and component structures for firmware described ris (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate (Gavin Shan) [RHEL-100932]
  - ACPI / MPAM: Parse the MPAM table (Gavin Shan) [RHEL-100932]
  - ACPI: Define acpi_put_table cleanup handler and acpi_get_table_pointer() helper (Gavin Shan) [RHEL-100932]
  - platform: Define platform_device_put cleanup handler (Gavin Shan) [RHEL-100932]
  - arm64: kconfig: Add Kconfig entry for MPAM (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Find cache level by cache-id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add acpi_pptt_cache_v1_full to use pptt cache as one structure (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Stop acpi_count_levels() expecting callers to clear levels (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (Gavin Shan) [RHEL-100932]
  - s390/pfault: Fix virtual vs physical address confusion (Mircea Dragan) [RHEL-170908]
  - lib/vsprintf: Add specifier for printing struct timespec64 (CKI Backport Bot) [RHEL-172105]
  - RDMA/rw: Fix MR pool exhaustion in bvec RDMA READ path (Kamal Heib) [RHEL-163515]
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Import DMA-BUF module in uverbs_std_types_dmabuf file (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check id_priv->restricted_node_type in cma_listen_on_dev() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: select CONFIG_DMA_SHARED_BUFFER (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add DMABUF object type and operations (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Support external FD uobjects (Kamal Heib) [RHEL-163515]
  - RDMA/core: introduce rdma_restrict_node_type() (Kamal Heib) [RHEL-163515]
  - RDMA/umem: don't abuse current->group_leader (Kamal Heib) [RHEL-163515]
  - IB/core: Extend rate limit support for RC QPs (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Kamal Heib) [RHEL-163515]
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Kamal Heib) [RHEL-163515]
  - RDMA/core: add MR support for bvec-based RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: use IOVA-based DMA mapping for bvec RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: add bio_vec based RDMA read/write API (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Kamal Heib) [RHEL-163515]
  - RDMA/iwcm: Fix workqueue list corruption by removing work_list (Kamal Heib) [RHEL-163515]
  - RDMA/core: Avoid exporting module local functions and remove not-used ones (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Remove redundant DMABUF ops check (Kamal Heib) [RHEL-163515]
  - IB/core: Add query_port_speed verb (Kamal Heib) [RHEL-163515]
  - IB/core: Refactor rate_show to use ib_port_attr_to_rate() (Kamal Heib) [RHEL-163515]
  - IB/core: Add helper to convert port attributes to data rate (Kamal Heib) [RHEL-163515]
  - IB/core: Add async event on device speed change (Kamal Heib) [RHEL-163515]
  - IB/cache: update gid cache on client reregister event (Kamal Heib) [RHEL-163515]
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Fix rdma_ucm_query_ib_service_resp struct padding (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Fix leaking the multicast GID table reference (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Kamal Heib) [RHEL-163515]
  - RDMA/core: Reduce cond_resched() frequency in __ib_umem_release (Kamal Heib) [RHEL-163515]
  - RDMA/core: Add new IB rate for XDR (8x) support (Kamal Heib) [RHEL-163515]
  - RDMA/core: Prevent soft lockup during large user memory region cleanup (Kamal Heib) [RHEL-163515]
  - RDMA/restrack: Fix typos in the comments (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Correct typedef and bad line warnings (Kamal Heib) [RHEL-163515]
  - IB/isert: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/iser: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/rdmavt: rdmavt_qp.h: clean up kernel-doc comments (Kamal Heib) [RHEL-163515]
  - RDMA/core: WQ_PERCPU added to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Base cm_id destruction timeout on CMA values (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: fix some kernel-doc warnings (Kamal Heib) [RHEL-163515]
  - RDMA/core: let rdma_connect_locked() call lockdep_assert_held(&id_priv->handler_mutex) (Kamal Heib) [RHEL-163515]
  - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-163515]
  - IB/ipoib: Ignore L3 master device (Kamal Heib) [RHEL-163515]
  - RDMA/core: Use route entry flag to decide on loopback traffic (Kamal Heib) [RHEL-163515]
  - RDMA/core: Squash a single user static function (Kamal Heib) [RHEL-163515]
  - RDMA/core: fix "truely"->"truly" (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support write an event into a CM (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support query resolved service records (Kamal Heib) [RHEL-163515]
  - RDMA/cma: Support IB service record resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Support IB service records resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Add RMPP support for SA queries (Kamal Heib) [RHEL-163515]
  - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-165161]
  - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-171979]
  - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-159000]
  - iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement (Jerry Snitselaar) [RHEL-160189]
  - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (Jerry Snitselaar) [RHEL-160189]
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169737] {CVE-2025-68183}
  - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-147247]
  - x86/platform/uv: Handle deconfigured sockets (Krzysztof Pawlinski) [RHEL-158967]
  - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-164699]
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-164699]
  - net/ipv6: Remove HBH helpers (Michal Schmidt) [RHEL-156515]
  - net: mana: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - gve: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - bnxt_en: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - ice: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx4: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx5e: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on RX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on TX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Introduce payload_len helpers (Michal Schmidt) [RHEL-156515]
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-161120] {CVE-2025-68741}
  - selftests/bpf: Add test to verify the fix of kprobe_write_ctx abuse (Ines Qian) [RHEL-78291]
  - bpf: Fix abuse of kprobe_write_ctx via freplace (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix kprobe multi stacktrace_ips test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace ips test for kprobe_multi/kretprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove hexdump dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove xxd util dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Skip livepatch test when prerequisites are missing (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for livepatch + bpf trampoline (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for exclusive maps (Ines Qian) [RHEL-78291]
  - bpf: Require frozen map for calculating map hash (Ines Qian) [RHEL-78291]
  - bpf: Limit bpf program signature size (Ines Qian) [RHEL-78291]
  - bpf: Fix exclusive map memory leak (Ines Qian) [RHEL-78291]
  - selftests/bpf: Allow selftests to build with older xxd (Ines Qian) [RHEL-78291]
  - bpftool: Allow bpftool to build with openssl < 3 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Update test_tag to use sha256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test widen_imprecise_scalars() with different stack depth (Ines Qian) [RHEL-78291]
  - bpf: account for current allocated stack depth in widen_imprecise_scalars() (Ines Qian) [RHEL-78291]
  - bpf: add _impl suffix for bpf_stream_vprintk() kfunc (Ines Qian) [RHEL-78291]
  - bpf:add _impl suffix for bpf_task_work_schedule* kfuncs (Ines Qian) [RHEL-78291]
  - bpf: Conditionally include dynptr copy kfuncs (Ines Qian) [RHEL-78291]
  - libbpf: Fix powerpc's stack register definition in bpf_tracing.h (Ines Qian) [RHEL-78291]
  - bpf: Sync pending IRQ work before freeing ring buffer (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix redefinition of 'off' as different kind of symbol (Ines Qian) [RHEL-78291]
  - bpf: Fix memory leak in __lookup_instance error path (Ines Qian) [RHEL-78291]
  - selftests: arg_parsing: Ensure data is flushed to disk before reading. (Ines Qian) [RHEL-78291]
  - selftests/bpf: make arg_parsing.c more robust to crashes (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for unpinning htab with internal timer struct (Ines Qian) [RHEL-78291]
  - bpf: Avoid RCU context warning when unpinning htab with internal structs (Ines Qian) [RHEL-78291]
  - libbpf: Fix undefined behavior in {get,put}_unaligned_be32() (Ines Qian) [RHEL-78291]
  - bpf: Finish constification of 1st parameter of bpf_d_path() (Ines Qian) [RHEL-78291]
  - libbpf: Fix missing #pragma in libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for rejection of ALU ops with negative offsets (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - bpf: Reject negative offsets for ALU ops (Ines Qian) [RHEL-78291]
  - libbpf: remove linux/unaligned.h dependency for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_sha256() implementation into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_errstr() into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: remove unused libbpf_strerror_r and STRERR_BUFSIZE (Ines Qian) [RHEL-78291]
  - libbpf: make libbpf_errno.c into more generic libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix realloc size in bpf_get_addrs (Ines Qian) [RHEL-78291]
  - libbpf: Replace AF_ALG with open coded SHA-256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stress test for rqspinlock in NMI (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test case for different expected_attach_type (Ines Qian) [RHEL-78291]
  - bpf: Enforce expected_attach_type for tailcall compatibility (Ines Qian) [RHEL-78291]
  - bpftool: Remove duplicate string.h header (Ines Qian) [RHEL-78291]
  - bpf: Remove duplicate crypto/sha2.h header (Ines Qian) [RHEL-78291]
  - libbpf: Fix error when st-prefix_ops and ops from differ btf (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace map lookup_and_delete_elem test case (Ines Qian) [RHEL-78291]
  - selftests/bpf: Refactor stacktrace_map case with skeleton (Ines Qian) [RHEL-78291]
  - bpf: Add lookup_and_delete_elem for BPF_MAP_STACK_TRACE (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix flaky bpf_cookie selftest (Ines Qian) [RHEL-78291]
  - selftests/bpf: Task_work selftest cleanup fixes (Ines Qian) [RHEL-78291]
  - bpf: Mark kfuncs as __noclone (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe multi write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context ip register change test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context registers changes test (Ines Qian) [RHEL-78291]
  - uprobe: Do not emulate/sstep original instruction when ip is changed (Ines Qian) [RHEL-78291]
  - bpf: Allow uprobe program to change context registers (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for program signing options (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add union argument tests using fexit programs (Ines Qian) [RHEL-78291]
  - bpf: Allow union argument in trampoline based programs (Ines Qian) [RHEL-78291]
  - selftests: bpf: Add tests for signed loads from arena (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - bpf, x86: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - selftests/bpf: add bpf task work stress tests (Ines Qian) [RHEL-78291]
  - selftests/bpf: BPF task work scheduling tests (Ines Qian) [RHEL-78291]
  - bpf: task work scheduling kfuncs (Ines Qian) [RHEL-78291]
  - bpf: extract map key pointer calculation (Ines Qian) [RHEL-78291]
  - bpf: bpf task work plumbing (Ines Qian) [RHEL-78291]
  - bpf: verifier: permit non-zero returns from async callbacks (Ines Qian) [RHEL-78291]
  - bpf: htab: extract helper for freeing special structs (Ines Qian) [RHEL-78291]
  - bpf: extract generic helper from process_timer_func() (Ines Qian) [RHEL-78291]
  - bpf: refactor special field-type detection (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable signature verification for some lskel tests (Ines Qian) [RHEL-78291]
  - bpftool: Add support for signing BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Embed and verify the metadata hash in the loader (Ines Qian) [RHEL-78291]
  - libbpf: Update light skeleton for signing (Ines Qian) [RHEL-78291]
  - bpf: Implement signature verification for BPF programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix selftest verifier_arena_large failure (Ines Qian) [RHEL-78291]
  - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 (Ines Qian) [RHEL-78291]
  - bpftool: Fix UAF in get_delegate_value (Ines Qian) [RHEL-78291]
  - bpftool: Add HELP_SPEC_OPTIONS in token.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: test cases for callchain sensitive live stack tracking (Ines Qian) [RHEL-78291]
  - selftests/bpf: __not_msg() tag for test_loader framework (Ines Qian) [RHEL-78291]
  - bpf: table based bpf_insn_successors() (Ines Qian) [RHEL-78291]
  - bpf: disable and remove registers chain based liveness (Ines Qian) [RHEL-78291]
  - bpf: signal error if old liveness is more conservative than new (Ines Qian) [RHEL-78291]
  - bpf: enable callchain sensitive stack liveness tracking (Ines Qian) [RHEL-78291]
  - bpf: callchain sensitive stack liveness tracking using CFG (Ines Qian) [RHEL-78291]
  - bpf: compute instructions postorder per subprogram (Ines Qian) [RHEL-78291]
  - bpf: declare a few utility functions as internal api (Ines Qian) [RHEL-78291]
  - bpf: remove redundant REG_LIVE_READ check in stacksafe() (Ines Qian) [RHEL-78291]
  - bpf: use compute_live_registers() info in clean_func_state (Ines Qian) [RHEL-78291]
  - bpf: bpf_verifier_state->cleaned flag instead of REG_LIVE_DONE (Ines Qian) [RHEL-78291]
  - bpf: Move the signature kfuncs to helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Return hashes of maps in BPF_OBJ_GET_INFO_BY_FD (Ines Qian) [RHEL-78291]
  - libbpf: Support exclusive map creation (Ines Qian) [RHEL-78291]
  - libbpf: Implement SHA256 internal helper (Ines Qian) [RHEL-78291]
  - bpf: Implement exclusive map creation (Ines Qian) [RHEL-78291]
  - bpf: Update the bpf_prog_calc_tag to use SHA256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf: Enforce RCU protection for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() (Ines Qian) [RHEL-78291]
  - bpf...d_path(): constify path argument (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a test for bpf_cgroup_from_id lookup in non-root cgns (Ines Qian) [RHEL-78291]
  - bpf: Do not limit bpf_cgroup_from_id to current's namespace (Ines Qian) [RHEL-78291]
  - bpftool: Search for tracefs at /sys/kernel/tracing first (Ines Qian) [RHEL-78291]
  - selftests/bpf: More open-coded gettid syscall cleanup (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for arena fault reporting (Ines Qian) [RHEL-78291]
  - selftests: bpf: use __stderr in stream error tests (Ines Qian) [RHEL-78291]
  - selftests: bpf: introduce __stderr and __stdout (Ines Qian) [RHEL-78291]
  - bpf: Report arena faults to BPF stderr (Ines Qian) [RHEL-78291]
  - bpf: core: introduce main_prog_aux for stream access (Ines Qian) [RHEL-78291]
  - bpf: arm64: simplify exception table handling (Ines Qian) [RHEL-78291]
  - bpf: WQ_PERCPU added to alloc_workqueue users (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_unbound_wq with system_dfl_wq (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_wq with system_percpu_wq (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix the issue where the error code is 0 (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_ATOMIC instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Introduce bpf_jit_emit_atomic_ops() to emit atomic instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement bpf_addr_space_cast instruction (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_MEM32 pseudo instructions (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add BPF program dump in veristat (Ines Qian) [RHEL-78291]
  - libbpf: Remove unused args in parse_usdt_note (Ines Qian) [RHEL-78291]
  - bpf, arm64: Remove duplicated bpf_flush_icache() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test kfunc bpf_strcasecmp (Ines Qian) [RHEL-78291]
  - bpf: add bpf_strcasecmp kfunc (Ines Qian) [RHEL-78291]
  - selftests/bpf: add benchmark testing for kprobe-multi-all (Ines Qian) [RHEL-78291]
  - selftests/bpf: skip recursive functions for kprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: move get_ksyms and get_addrs to trace_helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpftool: Add CET-aware symbol matching for x86_64 architectures (Ines Qian) [RHEL-78291]
  - bpftool: Refactor kernel config reading into common helper (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add LPM trie microbenchmarks (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto tests for arm64 (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enrich subtest_basic_usdt case in selftests to cover SIB handling logic (Ines Qian) [RHEL-78291]
  - libbpf: Fix USDT SIB argument handling causing unrecognized register error (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix typos and grammar in test sources (Ines Qian) [RHEL-78291]
  - bpf: Add selftest to check the verifier's abstract multiplication (Ines Qian) [RHEL-78291]
  - bpf: Improve the general precision of tnum_mul (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove may_goto tests from DENYLIST.s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto verifier tests on s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add __arch_s390x macro (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a missing newline to the "bad arch spec" message (Ines Qian) [RHEL-78291]
  - s390/bpf: Add s390 JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove entries from config.{arch} already present in config (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for trampoline.c (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_prog_run_array_cg() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_task_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_iter_run_prog() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_inode_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_cgrp_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: Use sha1() instead of sha1_transform() in bpf_prog_calc_tag() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Tests for is_scalar_branch_taken tnum logic (Ines Qian) [RHEL-78291]
  - bpf: Use tnums for JEQ/JNE is_branch_taken logic (Ines Qian) [RHEL-78291]
  - selftests/bpf: Use vmlinux.h for BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Add documentation to version and error API functions (Ines Qian) [RHEL-78291]
  - s390/bpf: Use direct calls and jumps where possible (Ines Qian) [RHEL-78291]
  - bpftool: Add kernel.kptr_restrict hint for no instructions (Ines Qian) [RHEL-78291]
  - bpf: Add a verbose message when the BTF limit is reached (Ines Qian) [RHEL-78291]
  - bpf: Replace get_next_cpu() with cpumask_next_wrap() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for DEVMAP reuse (Ines Qian) [RHEL-78291]
  - libbpf: Fix reuse of DEVMAP (Ines Qian) [RHEL-78291]
  - bpf: Remove migrate_disable in kprobe_multi_link_prog_run (Ines Qian) [RHEL-78291]
  - selftests/bpf: Copy test_kmods when installing selftest (Ines Qian) [RHEL-78291]
  - bpf: Don't use %pK through printk (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpf: Remove redundant __GFP_NOWARN (Ines Qian) [RHEL-78291]
  - bpf: Standardize function declaration style (Ines Qian) [RHEL-78291]
  - bpf: removed unused 'env' parameter from is_reg64 and insn_has_def32 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test multi_st_ops and calling kfuncs from different programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add multi_st_ops that supports multiple instances (Ines Qian) [RHEL-78291]
  - bpf: Allow struct_ops to get map id by kdata (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for token argument (Ines Qian) [RHEL-78291]
  - bpftool: Add bpftool-token manpage (Ines Qian) [RHEL-78291]
  - bpftool: Add bpf_token show (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test concurrent task local data key creation (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test basic task local data operations (Ines Qian) [RHEL-78291]
  - selftests/bpf: Introduce task local data (Ines Qian) [RHEL-78291]
  - bpf: Allow syscall bpf programs to call non-recur helpers (Ines Qian) [RHEL-78291]
  - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (Charles Haithcock) [RHEL-154387]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-228
changelog:
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-228
changelog:
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
  - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - ptrace: require CAP_SYS_PTRACE on mm-less tasks (kABI-safe Qualys fix)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-229.el10]
changelog:
  - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176448] {CVE-2026-46333}
  - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174757] {CVE-2026-43303}
  - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171616] {CVE-2026-23375}
  - anon_inode: rework assertions (Rafael Aquini) [RHEL-171616]
  - vfs: use the new debug macros in inode_set_cached_link() (Rafael Aquini) [RHEL-171616]
  - vfs: catch invalid modes in may_open() (Rafael Aquini) [RHEL-171616]
  - vfs: add initial support for CONFIG_DEBUG_VFS (Rafael Aquini) [RHEL-171616]
  - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add open() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add exec() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add chmod() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add chown() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests: add file SLAB_TYPESAFE_BY_RCU recycling stressor (Rafael Aquini) [RHEL-171616]
  - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171616]
  - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171616]
  - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171616]
  - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171616]
  - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171616]
  - coccinelle: kmalloc_obj: Remove default GFP_KERNEL arg (Michal Schmidt) [RHEL-174796]
  - default_gfp(): avoid using the "newfangled" __VA_OPT__ trick (Michal Schmidt) [RHEL-174796]
  - add default_gfp() helper macro and use it in the new *alloc_obj() helpers (Michal Schmidt) [RHEL-174796]
  - coccinelle: Add kmalloc_objs conversion script (Michal Schmidt) [RHEL-174796]
  - slab.h: disable completely broken overflow handling in flex allocations (Michal Schmidt) [RHEL-174796]
  - slab: Introduce kmalloc_flex() and family (Michal Schmidt) [RHEL-174796]
  - compiler_types: Introduce __flex_counter() and family (Michal Schmidt) [RHEL-174796]
  - checkpatch: Suggest kmalloc_obj family for sizeof allocations (Michal Schmidt) [RHEL-174796]
  - slab: Introduce kmalloc_obj() and family (Michal Schmidt) [RHEL-174796]
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (David Marlin) [RHEL-172460]
  - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (David Marlin) [RHEL-172460 RHEL-172865] {CVE-2026-31772}
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state (David Marlin) [RHEL-172460]
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response (David Marlin) [RHEL-172460]
  - Bluetooth: MGMT: validate mesh send advertising payload length (David Marlin) [RHEL-172460]
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (David Marlin) [RHEL-172460]
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (David Marlin) [RHEL-172460]
  - Bluetooth: MGMT: validate LTK enc_size on load (David Marlin) [RHEL-172460 RHEL-172580] {CVE-2026-43020}
  - Bluetooth: hci_h4: Fix race during initialization (David Marlin) [RHEL-172460]
  - Bluetooth: hci_event: move wake reason storage into validated event handlers (David Marlin) [RHEL-172460]
  - Bluetooth: SCO: fix race conditions in sco_sock_connect() (David Marlin) [RHEL-172460 RHEL-172607] {CVE-2026-43023}
  - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (David Marlin) [RHEL-172460]
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
  - Bluetooth: hci_aml: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Enable HFP hardware offload for WCN6855 and WCN7850 (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Refactor HFP hardware offload capability handling (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Remove duplicate entry for 0x13d3/0x3618 (David Marlin) [RHEL-172460]
  - Bluetooth: btintel: Remove unneeded CONFIG_PM* #ifdef's (David Marlin) [RHEL-172460]
  - Bluetooth: btnxpuart: Remove unneeded CONFIG_PM ifdef (David Marlin) [RHEL-172460]
  - Bluetooth: btintel_pcie: Remove unnecessary check before kfree_skb() (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Reject autosuspend if discovery is active (David Marlin) [RHEL-172460]
  - Bluetooth: hci_core: Export hci_discovery_active (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
  - Bluetooth: Fix using PHYs bitfields as PHY value (David Marlin) [RHEL-172460]
  - Bluetooth: btqca: Add WCN6855 firmware priority selection feature (David Marlin) [RHEL-172460]
  - Bluetooth: btqca: move WCN7850 workaround to the caller (David Marlin) [RHEL-172460]
  - Bluetooth: btmtksdio: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
  - Bluetooth: hci_bcm4377: Use generic power management (David Marlin) [RHEL-172460]
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174522] {CVE-2026-43284}
  - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-170705]
  - iommu/arm-smmu-v3: Fix typos introduced by arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Do not continue in __arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Perform per-domain invalidations using arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add arm_smmu_invs based arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Populate smmu_domain->invs when attaching masters (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Pre-allocate a per-master invalidation array (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Introduce a per-domain arm_smmu_invs array (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add an inline arm_smmu_domain_free() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Explicitly set smmu_domain->stage for SVA (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (Jerry Snitselaar) [RHEL-88961]
  - sort.h: hoist cmp_int() into generic header file (Jerry Snitselaar) [RHEL-88961]
  - lib/sort.c: add _nonatomic() variants with cond_resched() (Jerry Snitselaar) [RHEL-88961]
  - lib/list_sort: clarify comparison function requirements in list_sort() (Jerry Snitselaar) [RHEL-88961]
  - lib/sort: clarify comparison function requirements in sort_r() (Jerry Snitselaar) [RHEL-88961]
  - cgroup/cpuset: Skip security check for hotplug induced v1 task migration (Waiman Long) [RHEL-160958]
  - cgroup/cpuset: Simplify setsched decision check in task iteration loop of cpuset_can_attach() (Waiman Long) [RHEL-160958]
  - blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-93825]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-230.el10]
changelog:
  - powercap: intel_rapl: Add support for Nova Lake processors (Steve Best) [RHEL-117269]
  - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171638]
  - selftests/bpf: Ensure typedef are deduplicated in split BTF (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix deduplication of typedef with base definitions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs (Jerome Marchand) [RHEL-139985]
  - bpf: Remove static qualifier from local subprog pointer (Jerome Marchand) [RHEL-139985]
  - bpf: Fix ld_{abs,ind} failure path analysis in subprogs (Jerome Marchand) [RHEL-139985]
  - bpf: Propagate error from visit_tailcall_insn (Jerome Marchand) [RHEL-139985]
  - ftrace,bpf: Remove FTRACE_OPS_FL_JMP ftrace_ops flag (Jerome Marchand) [RHEL-139985]
  - ftrace: Fix address for jmp mode in t_show() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add regression test for bpf_d_path() (Jerome Marchand) [RHEL-139985]
  - bpf: Fix verifier assumptions of bpf_d_path's output buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test for truncated dmabuf_iter reads (Jerome Marchand) [RHEL-139985]
  - bpf: Fix truncated dmabuf iterator reads (Jerome Marchand) [RHEL-139985]
  - x86/unwind/orc: Support reliable unwinding through BPF stack frames (Jerome Marchand) [RHEL-139985]
  - bpf: Add bpf_has_frame_pointer() (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix -Wdiscarded-qualifiers under C23 (Jerome Marchand) [RHEL-139985]
  - bpftool: Fix build warnings due to MS extensions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add -fms-extensions to bpf build flags (Jerome Marchand) [RHEL-139985]
  - bpf: optimize bpf_map_update_elem() for map-in-map types (Jerome Marchand) [RHEL-139985]
  - bpf: make kprobe_multi_link_prog_run always_inline (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add success stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Precede non-head waiter queueing with AA check (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Disable spinning for trylock fallback (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Use trylock fallback when per-CPU rqnode is busy (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Perform AA checks immediately (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Enclose lock/unlock within lock entry acquisitions (Jerome Marchand) [RHEL-139985]
  - bpf: Remove runqslower tool (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Remove usage of lsm/file_alloc_security in selftest (Jerome Marchand) [RHEL-139985]
  - bpf: Disable file_alloc_security hook (Jerome Marchand) [RHEL-139985]
  - bpf: check for insn arrays in check_ptr_alignment (Jerome Marchand) [RHEL-139985]
  - bpf: force BPF_F_RDONLY_PROG on insn array creation (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Make CS length configurable for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add lock wait time stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Relax CPU requirements for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - bpf: Introduce internal bpf_map_check_op_flags helper function (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix some incorrect @param descriptions in the comment of libbpf.h (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Call bpf_get_numa_node_id() in trigger_count() (Jerome Marchand) [RHEL-139985]
  - docs: bpf: map_array: Specify BPF_MAP_TYPE_PERCPU_ARRAY value size limit (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix htab_update/reenter_update selftest failure (Jerome Marchand) [RHEL-139985]
  - bpf: implement "jmp" mode for trampoline (Jerome Marchand) [RHEL-139985]
  - bpf: specify the old and new poke_type for bpf_arch_text_poke (Jerome Marchand) [RHEL-139985]
  - bpf,x86: adjust the "jmp" mode for bpf trampoline (Jerome Marchand) [RHEL-139985]
  - bpf: fix the usage of BPF_TRAMP_F_SKIP_FRAME (Jerome Marchand) [RHEL-139985]
  - x86/ftrace: Implement DYNAMIC_FTRACE_WITH_JMP (Jerome Marchand) [RHEL-139985]
  - ftrace: Introduce FTRACE_OPS_FL_JMP (Jerome Marchand) [RHEL-139985]
  - bpf: cleanup aux->used_maps after jit (Jerome Marchand) [RHEL-139985]
  - selftests: bpf: Add tests for unbalanced rcu_read_lock (Jerome Marchand) [RHEL-139985]
  - bpf: support nested rcu critical sections (Jerome Marchand) [RHEL-139985]
  - bpf: test the correct stack liveness of tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: correct stack liveness for tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: test the proper verification of tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: properly verify tail call behavior (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Improve reliability of test_perf_branches_no_hw() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms (Jerome Marchand) [RHEL-139985]
  - bpf: Document cfi_stubs and owner fields in struct bpf_struct_ops (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names (Jerome Marchand) [RHEL-139985]
  - bpf: don't skip other information if xlated_prog_insns is skipped (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: Move desc->imm setup to sort_kfunc_descs_by_imm_off() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Align kfuncs renamed in bpf tree (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add BTF dedup tests for recursive typedef definitions (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix BTF dedup to support recursive typedef definitions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix failure paths in send_signal test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Convert glob_match() to bpf arena (Jerome Marchand) [RHEL-139985]
  - bpf: Handle return value of ftrace_set_filter_ip in register_fentry (Jerome Marchand) [RHEL-139985]
  - bpf: Add missing checks to avoid verbose verifier log (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: retry bpf_map_update_elem() when E2BIG is returned (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test to verify freeing the special fields in pcpu maps (Jerome Marchand) [RHEL-139985]
  - bpf: Free special fields when update [lru_,]percpu_hash maps (Jerome Marchand) [RHEL-139985]
  - bpf: Adjust return value for queue destruction in rqspinlock (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add C-level selftests for indirect jumps (Jerome Marchand) [RHEL-139985]
  - libbpf: support llvm-generated indirect jumps (Jerome Marchand) [RHEL-139985]
  - bpf: disasm: add support for BPF_JMP|BPF_JA|BPF_X (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: test instructions arrays with blinding (Jerome Marchand) [RHEL-139985]
  - bpf: support instructions arrays with constants blinding (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add selftests for new insn_array map (Jerome Marchand) [RHEL-139985]
  - libbpf: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
  - bpftool: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
  - bpf, x86: add new map type: instructions array (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Test parsing of (multi-)split BTF (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix parsing of multi-split BTF (Jerome Marchand) [RHEL-139985]
  - docs/bpf: Add missing BPF k/uprobe program types to docs (Jerome Marchand) [RHEL-139985]
  - libbpf: Update the comment to remove the reference to the deprecated interface bpf_program__load(). (Jerome Marchand) [RHEL-139985]
  - libbpf: Complete the missing @param and @return tags in btf.h (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
  - bpf: Skip bounds adjustment for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add ABBCCA case for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Disable queue destruction for deadlocks (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix intermittent failures in file_reader test (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix the incorrect reference to the memlock_rlim variable in the comment. (Jerome Marchand) [RHEL-139985]
  - libbpf: Optimize the redundant code in the bpf_object__init_user_btf_maps() function. (Jerome Marchand) [RHEL-139985]
  - bpf: Fix stackmap overflow check in __bpf_get_stackid() (Jerome Marchand) [RHEL-139985]
  - bpf: Refactor stack map trace depth calculation into helper function (Jerome Marchand) [RHEL-139985]
  - bpftool: Fix missing closing parethesis for BTF_KIND_UNKN (Jerome Marchand) [RHEL-139985]
  - selftests/bpf/benchs: Add overwrite mode benchmark for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add overwrite mode test for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - bpf: Add overwrite mode for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add file dynptr tests (Jerome Marchand) [RHEL-139985]
  - bpf: dispatch to sleepable file dynptr (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: refactor kfunc specialization (Jerome Marchand) [RHEL-139985]
  - bpf: add kfuncs and helpers support for file dynptrs (Jerome Marchand) [RHEL-139985]
  - bpf: add plumbing for file-backed dynptr (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: centralize const dynptr check in unmark_stack_slots_dynptr() (Jerome Marchand) [RHEL-139985]
  - bpf: widen dynptr size/offset to 64 bit (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: remove unnecessary kfunc prototypes (Jerome Marchand) [RHEL-139985]
  - libbpf: fix formatting of bpf_object__append_subprog_code (Jerome Marchand) [RHEL-139985]
  - bpf: make bpf_insn_successors to return a pointer (Jerome Marchand) [RHEL-139985]
  - bpf: generalize and export map_get_next_key for arrays (Jerome Marchand) [RHEL-139985]
  - bpf: save the start of functions in bpf_prog_aux (Jerome Marchand) [RHEL-139985]
  - bpf: fix the return value of push_stack (Jerome Marchand) [RHEL-139985]
  - bpf: Clarify get_outer_instance() handling in propagate_to_outer_instance() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix list_del() in arena list (Jerome Marchand) [RHEL-139985]
  - samples/bpf: Fix spelling typos in samples/bpf (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix selftest verif_scale_strobemeta failure with llvm22 (Jerome Marchand) [RHEL-139985]
  - bpf: mark vma->{vm_mm,vm_file} as __safe_trusted_or_null (Jerome Marchand) [RHEL-139985]
  - bpf: mark mm->owner as __safe_rcu_or_null (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Silence unused-but-set build warnings (Jerome Marchand) [RHEL-139985]
  - bpf: Consistently use bpf_rcu_lock_held() everywhere (Jerome Marchand) [RHEL-139985]
  - bpf: Extract internal structs validation logic into helpers (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add more bpf_wq tests (Jerome Marchand) [RHEL-139985]
  - bpf: Fix handling maps with no BTF and non-constant offsets for the bpf_wq (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Test bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
  - bpf: add bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add tests for async cb context (Jerome Marchand) [RHEL-139985]
  - bpf: Refactor storage_get_func_atomic to generic non_sleepable flag (Jerome Marchand) [RHEL-139985]
  - bpf: Fix sleepable context for async callbacks (Jerome Marchand) [RHEL-139985]
  - bpf: Cleanup unused func args in rqspinlock implementation (Jerome Marchand) [RHEL-139985]
  - bpf: Add dynptr type for skb metadata (Jerome Marchand) [RHEL-139985]
  - cpufreq/amd-pstate: Add comment explaining nominal_perf usage for performance policy (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Add static asserts for EPP indices (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Fix some whitespace issues (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Adjust return values in amd_pstate_update_status() (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Make amd_pstate_get_mode_string() never return NULL (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Drop NULL value from amd_pstate_mode_string (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Use sysfs_match_string() for epp (Steve Best) [RHEL-127643]
  - efi/cper: Fix cper_bits_to_str buffer handling and return value (Thomas Huth) [RHEL-164371]
  - efi: Wipe INITRD config table from memory after consumption (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Fix EDID support in mixed-mode (Thomas Huth) [RHEL-164371]
  - docs: efi: add CPER functions to driver-api (Thomas Huth) [RHEL-164371]
  - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs (Thomas Huth) [RHEL-164371]
  - efi/cper: Add a new helper function to print bitmasks (Thomas Huth) [RHEL-164371]
  - efi/cper: Adjust infopfx size to accept an extra space (Thomas Huth) [RHEL-164371]
  - efi/libstub: x86: Store EDID in boot_params (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Add support for reading EDID (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Initialize screen_info in helper function (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Find GOP handle instead of GOP data (Thomas Huth) [RHEL-164371]
  - efi: Fix trailing whitespace in header file (Thomas Huth) [RHEL-164371]
  - efi/memattr: Convert efi_memattr_init() return type to void (Thomas Huth) [RHEL-164371]
  - efi: stmm: fix kernel-doc "bad line" warnings (Thomas Huth) [RHEL-164371]
  - efi/riscv: Remove the useless failure return message print (Thomas Huth) [RHEL-164371]
  - efistub/x86: Add fallback for SMBIOS record lookup (Thomas Huth) [RHEL-164371]
  - kthread: Warn if mm_struct lacks user_ns in kthread_use_mm() (Thomas Huth) [RHEL-164371]
  - arm64/efi: Don't fail check current_in_efi() if preemptible (Thomas Huth) [RHEL-164371]
  - arm64: efi: Fix NULL pointer dereference by initializing user_ns (Thomas Huth) [RHEL-164371]
  - arm64/efi: Call EFI runtime services without disabling preemption (Thomas Huth) [RHEL-164371]
  - arm64/efi: Move uaccess en/disable out of efi_set_pgd() (Thomas Huth) [RHEL-164371]
  - arm64/efi: Drop efi_rt_lock spinlock from EFI arch wrapper (Thomas Huth) [RHEL-164371]
  - arm64/fpsimd: Permit kernel mode NEON with IRQs off (Thomas Huth) [RHEL-164371]
  - arm64/fpsimd: Don't warn when EFI execution context is preemptible (Thomas Huth) [RHEL-164371]
  - efi/runtime-wrappers: Keep track of the efi_runtime_lock owner (Thomas Huth) [RHEL-164371]
  - efi: Add missing static initializer for efi_mm::cpus_allowed_lock (Thomas Huth) [RHEL-164371]
  - efi/libstub: Fix page table access in 5-level to 4-level paging transition (Thomas Huth) [RHEL-164371]
  - platform/x86/amd/pmf: Added a module parameter to disable the Smart PC function (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Introduce new interface to export NPU metrics (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Use devm_mutex_init() for mutex initialization (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Refactor repetitive BIOS output handling (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Replace magic table id with METRICS_TABLE_ID (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Rename IPU metrics fields to NPU for consistency (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Remove redundant ternary operators (Steve Best) [RHEL-127641]
  - hwmon: (k10temp) Add AMD Steam Deck APU ID (Steve Best) [RHEL-127650]
  - hwmon: (k10temp) Add device ID for Strix Halo (Steve Best) [RHEL-127650]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-231.el10]
changelog:
  - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-175521]
  - KVM: arm64: Invert KVM_PGTABLE_WALK_HANDLE_FAULT to fix pKVM walkers (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Fix page leak in user_mem_abort() on atomic fault (Sebastian Ott) [RHEL-151899]
  - kselftest/arm64: Add HWCAP test for FEAT_LS64 (Sebastian Ott) [RHEL-151899]
  - arm64: Add support for FEAT_{LS64, LS64_V} (Sebastian Ott) [RHEL-151899]
  - docs: arm64: Document EL3 requirements for FEAT_PMUv3 (Sebastian Ott) [RHEL-151899]
  - docs: arm64: Document EL3 requirements for cpu debug architecture (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Enable FEAT_{LS64, LS64_V} in the supported guest (Sebastian Ott) [RHEL-151899]
  - arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1 (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Handle DABT caused by LS64* instructions on unsupported memory (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Add documentation for KVM_EXIT_ARM_LDST64B (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Add exit to userspace on {LD,ST}64B* outside of memslots (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Verify that reads to inaccessible guest_memfd VMAs SIGBUS (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Verify that faulting in private guest_memfd memory fails (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add wrapper macro to handle and assert on expected SIGBUS (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Isolate the guest_memfd Copy-on-Write negative testcase (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add wrappers for mmap() and munmap() to assert success (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add test coverage for guest_memfd without GUEST_MEMFD_FLAG_MMAP (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Create a new guest_memfd for each testcase (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Stash the host page size in a global in the guest_memfd test (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Allow mmap() on guest_memfd for x86 VMs with private memory (Sebastian Ott) [RHEL-151899]
  - KVM: Explicitly mark KVM_GUEST_MEMFD as depending on KVM_GENERIC_MMU_NOTIFIER (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Invalidate SHARED GPAs if gmem supports INIT_SHARED (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Add INIT_SHARED flag, reject user page faults if not set (Sebastian Ott) [RHEL-151899]
  - KVM: Rework KVM_CAP_GUEST_MEMFD_MMAP into KVM_CAP_GUEST_MEMFD_FLAGS (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: nv: Forward FEAT_XNX permissions to the shadow stage-2 (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add guest_memfd testcase to fault-in on !mmap()'d memory (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: guest_memfd mmap() test when mmap is supported (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Do not use hardcoded page sizes in guest_memfd test (Sebastian Ott) [RHEL-151899]
  - KVM: Allow and advertise support for host mmap() on guest_memfd files (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Enable support for guest_memfd backed memory (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: nv: Handle VNCR_EL2-triggered faults backed by guest_memfd (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Handle guest_memfd-backed guest page faults (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Refactor user_mem_abort() (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Handle guest page faults for guest_memfd with shared memory (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Extend guest_memfd's max mapping level to shared mappings (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Enforce guest_memfd's max order when recovering hugepages (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Hoist guest_memfd max level/order helpers "up" in mmu.c (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Rename .private_max_mapping_level() to .gmem_max_mapping_level() (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Track guest_memfd mmap support in memslot (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Add plumbing to host to map guest_memfd pages (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Enable KVM_GUEST_MEMFD for all 64-bit builds (Sebastian Ott) [RHEL-151899]
  - KVM: Fix comment that refers to kvm uapi header path (Sebastian Ott) [RHEL-151899]
  - KVM: Fix comments that refer to slots_lock (Sebastian Ott) [RHEL-151899]
  - KVM: Rename kvm_slot_can_be_private() to kvm_slot_has_gmem() (Sebastian Ott) [RHEL-151899]
  - KVM: Rename CONFIG_KVM_GENERIC_PRIVATE_MEM to CONFIG_HAVE_KVM_ARCH_GMEM_POPULATE (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Select TDX's KVM_GENERIC_xxx dependencies iff CONFIG_KVM_INTEL_TDX=y (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Select KVM_GENERIC_PRIVATE_MEM directly from KVM_SW_PROTECTED_VM (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Have all vendor neutral sub-configs depend on KVM_X86, not just KVM (Sebastian Ott) [RHEL-151899]
  - KVM: Rename CONFIG_KVM_PRIVATE_MEM to CONFIG_KVM_GUEST_MEMFD (Sebastian Ott) [RHEL-151899]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-232.el10]
changelog:
  - PCI: Fix alignment calculation for resource size larger than align (Myron Stowe) [RHEL-151449]
  - PCI: Fix premature removal from realloc_head list during resource assignment (Myron Stowe) [RHEL-151449]
  - PCI: Prevent shrinking bridge window from its required size (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: Document PCIe TLP Header decoder for AER messages (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Fix pci_pwrctrl_is_required() device node leak (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Do not power off on pwrctrl device removal (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Create pwrctrl devices only for PCI device nodes (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Ensure that remote endpoint node parent has supply requirement (Myron Stowe) [RHEL-151449]
  - sparc/PCI: Initialize msi_addr_mask for OF-created PCI devices (Myron Stowe) [RHEL-151449]
  - powerpc/pci: Initialize msi_addr_mask for OF-created PCI devices (Myron Stowe) [RHEL-151449]
  - ALSA: hda/intel: Make MSI address limit based on the device DMA limit (Myron Stowe) [RHEL-151449]
  - drm/radeon: Make MSI address limit based on the device DMA limit (Myron Stowe) [RHEL-151449]
  - PCI/MSI: Check the device specific address mask in msi_verify_entries() (Myron Stowe) [RHEL-151449]
  - PCI/MSI: Convert the boolean no_64bit_msi flag to a DMA address mask (Myron Stowe) [RHEL-151449]
  - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: pci-epf-test: Select configfs (Myron Stowe) [RHEL-151449]
  - PCI: Account fully optional bridge windows correctly (Myron Stowe) [RHEL-151449]
  - PCI: Remove useless WARN_ON() from devres (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Add missing struct p2pdma_provider documentation (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: Fix typos in msi-howto.rst (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Add missing NULL check for alloc_workqueue() (Myron Stowe) [RHEL-151449]
  - PCI: Add WQ_PERCPU to alloc_workqueue() users (Myron Stowe) [RHEL-151449]
  - PCI: Disable ACS SV for IDT 0x8090 switch (Myron Stowe) [RHEL-151449]
  - PCI: Disable ACS SV for IDT 0x80b5 switch (Myron Stowe) [RHEL-151449]
  - PCI: Cache ACS Capabilities register (Myron Stowe) [RHEL-151449]
  - PCI: Enable ACS after configuring IOMMU for OF platforms (Myron Stowe) [RHEL-151449]
  - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] (Myron Stowe) [RHEL-151449]
  - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur (Myron Stowe) [RHEL-151449]
  - PCI: Use device_lock_assert() to verify device lock is held (Myron Stowe) [RHEL-151449]
  - PCI: Use lockdep_assert_held(pci_bus_sem) to verify lock is held (Myron Stowe) [RHEL-151449]
  - PCI: Fix pci_slot_lock () device locking (Myron Stowe) [RHEL-151449]
  - PCI: Fix pci_slot_trylock() error handling (Myron Stowe) [RHEL-151449]
  - PCI: Mark Nvidia GB10 to avoid bus reset (Myron Stowe) [RHEL-151449]
  - PCI: Mark ASM1164 SATA controller to avoid bus reset (Myron Stowe) [RHEL-151449]
  - Documentation: tracing: Add PCI tracepoint documentation (Myron Stowe) [RHEL-151449]
  - PCI: Move CardBus bridge scanning to setup-cardbus.c (Myron Stowe) [RHEL-151449]
  - PCI: Add pbus_validate_busn() for Bus Number validation (Myron Stowe) [RHEL-151449]
  - PCI: Add dword #defines for Bus Number + Secondary Latency Timer (Myron Stowe) [RHEL-151449]
  - PCI: Use scnprintf() instead of sprintf() (Myron Stowe) [RHEL-151449]
  - PCI: Handle CardBus-specific params in setup-cardbus.c (Myron Stowe) [RHEL-151449]
  - PCI: Separate CardBus setup & build it only with CONFIG_CARDBUS (Myron Stowe) [RHEL-151449]
  - PCI: Add 'pci' prefix to struct pci_dev_resource handling functions (Myron Stowe) [RHEL-151449]
  - PCI: Use resource_assigned() in setup-bus.c algorithm (Myron Stowe) [RHEL-151449]
  - resource: Mark res given to resource_assigned() as const (Myron Stowe) [RHEL-151449]
  - PCI: Add pbus_mem_size_optional() to handle optional sizes (Myron Stowe) [RHEL-151449]
  - PCI: Check invalid align earlier in pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - PCI: Log reset and restore of resources (Myron Stowe) [RHEL-151449]
  - PCI: Add pci_resource_is_bridge_win() (Myron Stowe) [RHEL-151449]
  - PCI: Fetch dev_res to local var in __assign_resources_sorted() (Myron Stowe) [RHEL-151449]
  - PCI: Use res_to_dev_res() in reassign_resources_sorted() (Myron Stowe) [RHEL-151449]
  - PCI: Pass bridge window resource to pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - PCI: Push realloc check into pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - resource: Increase MAX_IORES_LEVEL to 8 (Myron Stowe) [RHEL-151449]
  - PCI: Use resource_set_range() that correctly sets ->end (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Create pwrctrl device if graph port is found (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add PCIe M.2 connector support (Myron Stowe) [RHEL-151449]
  - PCI: Drop the assert_perst() callback (Myron Stowe) [RHEL-151449]
  - PCI: qcom: Drop the assert_perst() callbacks (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Switch to pwrctrl create, power on/off, destroy APIs (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add APIs to power on/off pwrctrl devices (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add APIs to create, destroy pwrctrl devices (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add 'struct pci_pwrctrl::power_{on/off}' callbacks (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: pwrseq: Factor out power on/off code to helpers (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: slot: Factor out power on/off code to helpers (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: slot: Rename private struct and pointers for consistency (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: pwrseq: Rename private struct and pointers for consistency (Myron Stowe) [RHEL-151449]
  - PCI/PTM: Fix pcie_ptm_create_debugfs() memory leak (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Use bus-type functions (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Don't check for valid device and driver in bus callbacks (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Move pcie_port_bus_type to pcie source file (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Don't check for the driver's and device's bus (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Drop empty shutdown callback (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Fix potential resource leak (Myron Stowe) [RHEL-151449]
  - PCI/PM: Prevent runtime suspend until devices are fully initialized (Myron Stowe) [RHEL-151449]
  - PCI/PM: Avoid redundant delays on D3hot->D3cold (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Reset page reference count when page mapping fails (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails (Myron Stowe) [RHEL-151449]
  - PCI/PME: Replace RMW of Root Status register with direct write (Myron Stowe) [RHEL-151449]
  - PCI/ACPI: Restrict program_hpx_type2() to AER bits (Myron Stowe) [RHEL-151449]
  - PCI: Initialize RCB from pci_configure_device() (Myron Stowe) [RHEL-151449]
  - PCI: Check parent for NULL in of_pci_bus_release_domain_nr() (Myron Stowe) [RHEL-151449]
  - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken (Myron Stowe) [RHEL-151449]
  - PCI: Do not attempt to set ExtTag for VFs (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Avoid creating sub-groups asynchronously (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors (Myron Stowe) [RHEL-151449]
  - PCI/bwctrl: Disable BW controller on Intel P45 using a quirk (Myron Stowe) [RHEL-151449]
  - PCI: trace: Add RAS tracepoint to monitor link speed changes (Myron Stowe) [RHEL-151449]
  - PCI: trace: Add generic RAS tracepoint for hotplug event (Myron Stowe) [RHEL-151449]
  - PCI/AER: Clear stale errors on reporting agents upon probe (Myron Stowe) [RHEL-151449]
  - resource: Introduce resource_assigned() for discerning active resources (Myron Stowe) [RHEL-151449]
  - PCI: Test for bit underflow in pcie_set_readrq() (Myron Stowe) [RHEL-151449]
  - docs: powerpc: add htm.rst to toctree (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Enable third attention indicator state (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Fix surprise plug detection and recovery (Myron Stowe) [RHEL-151449]
  - powerpc/eeh: Export eeh_unfreeze_pe() (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Work around switches with broken presence detection (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Clean up allocated IRQs on unplug (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variant of DEFINE_RES() (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variants of DEFINE_RES_*_NAMED() (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variant of DEFINE_RES_NAMED_DESC() (Myron Stowe) [RHEL-151449]
  - resource: split DEFINE_RES_NAMED_DESC() out of DEFINE_RES_NAMED() (Myron Stowe) [RHEL-151449]
  - xfs: fix remote xattr valuelblk check (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: fix the xattr scrub to detect freemap/entries array collisions (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: strengthen attr leaf block freemap checking (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: refactor attr3 leaf table size computation (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171476] {CVE-2026-31613}
  - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-167108] {CVE-2025-40237}
  - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-167108]
  - scsi: ses: Fix devices attaching to different hosts (Tomas Henzl) [RHEL-153020]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-233.el10]
changelog:
  - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-130557]
  - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163346] {CVE-2025-38653}
  - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163346] {CVE-2025-38653}
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163346] {CVE-2025-38653}
  - rxrpc: Fix recvmsg() unconditional requeue (CKI Backport Bot) [RHEL-147235] {CVE-2026-23066}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-239.el10]
changelog:
  - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-183464]
  - io_uring: Fix KASAN UAF in io_kbuf_recycle_legacy (Jeff Moyer) [RHEL-183200]
  - crypto: krb5 - filter out async aead implementations at alloc (Ilya Dryomov) [RHEL-182119]
  - crypto: krb5enc - fix async decrypt skipping hash verification (Ilya Dryomov) [RHEL-182119]
  - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (Ilya Dryomov) [RHEL-182119]
  - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (Ilya Dryomov) [RHEL-182119]
  - driver core: generalize driver_override in struct device (Mircea Dragan) [RHEL-113464]
  - PCI: Initialize temporary device in new_id_store() (Mircea Dragan) [RHEL-113464]
  - s390/ap: use generic driver_override infrastructure (Mircea Dragan) [RHEL-113464]
  - s390/ap: Restrict driver_override versus apmask and aqmask use (Mircea Dragan) [RHEL-113464]
  - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Mircea Dragan) [RHEL-113464]
  - s390/ap: Support driver_override for AP queue devices (Mircea Dragan) [RHEL-113464]
  - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Mircea Dragan) [RHEL-113464]
  - redhat/configs: set NXP storage driver to built-in for boot speed (Ed Chong) [RHEL-181039]
  - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180316] {CVE-2026-43260}
  - objtool: Fix Clang jump table detection (Yannick Cote) [RHEL-152189]
  - objtool/klp: fix mkstemp() failure with long paths (Yannick Cote) [RHEL-152189]
  - objtool/klp: fix data alignment in __clone_symbol() (Yannick Cote) [RHEL-152189]
  - objtool: Fix another stack overflow in validate_branch() (Yannick Cote) [RHEL-152189]
  - objtool: Handle Clang RSP musical chairs (Yannick Cote) [RHEL-152189]
  - objtool: Fix ERROR_INSN() error message (Yannick Cote) [RHEL-152189]
  - objtool: Fix data alignment in elf_add_data() (Yannick Cote) [RHEL-152189]
  - objtool: Use HOSTCFLAGS for HAVE_XXHASH test (Yannick Cote) [RHEL-152189]
  - objtool/klp: Avoid NULL pointer dereference when printing code symbol name (Yannick Cote) [RHEL-152189]
  - objtool/klp: Disable unsupported pr_debug() usage (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix detection of corrupt static branch/call entries (Yannick Cote) [RHEL-152189]
  - kbuild: Leave objtool binary around with 'make clean' (Yannick Cote) [RHEL-152189]
  - kbuild: Add objtool to top-level clean target (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix symbol correlation for orphaned local symbols (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix bug table handling for __WARN_printf() (Yannick Cote) [RHEL-152189]
  - objtool: Replace custom macros in elf.c with shared ones (Yannick Cote) [RHEL-152189]
  - objtool: Print bfd_vma as unsigned long long on ia32-x86_64 cross build (Yannick Cote) [RHEL-152189]
  - objtool: Fix libopcodes linking with static libraries (Yannick Cote) [RHEL-152189]
  - kbuild: prefer ${NM} in check-function-names.sh (Yannick Cote) [RHEL-152189]
  - objtool: fix build failure due to missing libopcodes check (Yannick Cote) [RHEL-152189]
  - objtool: fix compilation failure with the x32 toolchain (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool: Add more robust signal error handling, detect and warn about stack overflows (Yannick Cote) [RHEL-152189]
  - objtool: Fix stack overflow in validate_branch() (Yannick Cote) [RHEL-152189]
  - objtool: Fix segfault on unknown alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Build with disassembly can fail when including bdf.h (Yannick Cote) [RHEL-152189]
  - objtool: Trim trailing NOPs in alternative (Yannick Cote) [RHEL-152189]
  - objtool: Add wide output for disassembly (Yannick Cote) [RHEL-152189]
  - objtool: Compact output for alternatives with one instruction (Yannick Cote) [RHEL-152189]
  - objtool: Improve naming of group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Add Function to get the name of a CPU feature (Yannick Cote) [RHEL-152189]
  - objtool: Provide access to feature and flags of group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Fix address references in alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble jump table alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble exception table alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Print addresses with alternative instructions (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Print headers for alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Preserve alternatives order (Yannick Cote) [RHEL-152189]
  - objtool: Add the --disas=<function-pattern> action (Yannick Cote) [RHEL-152189]
  - objtool: Do not validate IBT for .return_sites and .call_sites (Yannick Cote) [RHEL-152189]
  - objtool: Improve tracing of alternative instructions (Yannick Cote) [RHEL-152189]
  - objtool: Add functions to better name alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Identify the different types of alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Improve register reporting during function validation (Yannick Cote) [RHEL-152189]
  - objtool: Trace instruction state changes during function validation (Yannick Cote) [RHEL-152189]
  - objtool: Add option to trace function validation (Yannick Cote) [RHEL-152189]
  - objtool: Record symbol name max length (Yannick Cote) [RHEL-152189]
  - objtool: Extract code to validate instruction from the validate branch loop (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble instruction on warning or backtrace (Yannick Cote) [RHEL-152189]
  - objtool: Store instruction disassembly result (Yannick Cote) [RHEL-152189]
  - objtool: Print symbol during disassembly (Yannick Cote) [RHEL-152189]
  - tool build: Remove annoying newline in build output (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble code with libopcodes instead of running objdump (Yannick Cote) [RHEL-152189]
  - objtool: Create disassembly context (Yannick Cote) [RHEL-152189]
  - objtool: Move disassembly functions to a separated file (Yannick Cote) [RHEL-152189]
  - objtool: Remove second pass of .cold function correlation (Yannick Cote) [RHEL-152189]
  - objtool: Skip non-canonical aliased symbols in add_jump_table_alts() (Yannick Cote) [RHEL-152189]
  - objtool: Return canonical symbol when aliases exist in symbol finding helpers (Yannick Cote) [RHEL-152189]
  - objtool: Don't alias undefined symbols (Yannick Cote) [RHEL-152189]
  - objtool: Fix .cold function detection for duplicate symbols (Yannick Cote) [RHEL-152189]
  - objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189]
  - objtool/x86: Fix NOP decode (Yannick Cote) [RHEL-152189]
  - objtool/x86: Add UDB support (Yannick Cote) [RHEL-152189]
  - objtool/LoongArch: Mark special atomic instruction as INSN_BUG type (Yannick Cote) [RHEL-152189]
  - objtool/LoongArch: Mark types based on break immediate code (Yannick Cote) [RHEL-152189]
  - livepatch/klp-build: Fix inconsistent kernel version (Yannick Cote) [RHEL-152193]
  - livepatch: Free klp_{object,func}_ext data after initialization (Yannick Cote) [RHEL-152193]
  - livepatch: Fix having __klp_objects relics in non-livepatch modules (Yannick Cote) [RHEL-152193]
  - livepatch/klp-build: Require Clang assembler >= 20 (Yannick Cote) [RHEL-152193]
  - livepatch/klp-build: Fix klp-build vs CONFIG_MODULE_SRCVERSION_ALL (Yannick Cote) [RHEL-152193]
  - selftests: livepatch: use canonical ftrace path (Yannick Cote) [RHEL-152193]
  - livepatch: Match old_sympos 0 and 1 in klp_find_func() (Yannick Cote) [RHEL-152193]
  - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: fix OOB read in compat_mtw_from_user (Florian Westphal) [RHEL-168848]
  - netfilter: xt_cpu: prefer raw_smp_processor_id (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-168848]
  - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-168848]
  - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-168848]
  - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: annotate "pos" for concurrent readers/writers (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Fix data race between add and dump in all hash types (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Fix data race between add and list header in all hash types (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-168848]
  - netfilter: nft_inner: release local_lock before re-enabling softirqs (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: stop hash:* range iteration at end (Florian Westphal) [RHEL-168848]
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: fix a potential dump-destroy race (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-168848]
  - netfilter: bridge: eb_tables: close module init race (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: close dangling table module init race (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: close dangling table module init race (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: move to two-stage removal scheme (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add and use xtables_unregister_table_exit (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: unregister the templates first (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: allocate hook ops while under mutex (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: allow initial table replace without emitting audit log message (Florian Westphal) [RHEL-168848]
  - ipvs: do not leak dest after get from dest trash (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: use skb_pull_rcsum() to pop vlan/pppoe header (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: fix inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: fix inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: ensure sufficient headroom in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: fix L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: skip L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_socket: skip socket lookup for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-168848]
  - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-168848]
  - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-168848]
  - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-168848]
  - netfilter: skip recording stale or retransmitted INIT (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-168848]
  - netfilter: reject zero shift in nft_bitwise (Florian Westphal) [RHEL-168848]
  - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-168848]
  - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-168848]
  - netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-168848]
  - ipvs: fix MTU check for GSO packets in tunnel mode (Florian Westphal) [RHEL-168848]
  - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-168848]
  - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_tproxy.sh: adjust to socat changes (Florian Westphal) [RHEL-168848]
  - netfilter: require Ethernet MAC header before using eth_hdr() (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: check ttl/hl before forwarding (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove UDP-Lite conntrack support (Florian Westphal) [RHEL-168848]
  - netfilter: xt_socket: enable defrag after all other checks (Florian Westphal) [RHEL-168848]
  - netfilter: xt_HL: add pr_fmt and checkentry validation (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink: prefer skb_mac_header helpers (Florian Westphal) [RHEL-168848]
  - netfilter: x_physdev: reject empty or not-nul terminated device names (Florian Westphal) [RHEL-168848]
  - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-168848]
  - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-168848]
  - ipvs: fix NULL deref in ip_vs_add_service error path (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: Correct indentation when H323_TRACE defined (Florian Westphal) [RHEL-168848]
  - netfilter: nft_meta: add double-tagged vlan and pppoe support (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add netlink policy based cap on registers (Florian Westphal) [RHEL-168848]
  - netfilter: add more netlink-based policy range checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: remove unreliable debug code in decode_octstr (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: remove net variable shadowing (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Fix typo in enum description (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: drop logically empty buckets in mtype_del (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: revisit array resize logic (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-168848]
  - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-168848]
  - netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_time: use unsigned int for monthday bit shift (Florian Westphal) [RHEL-168848]
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-168848]
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-168848]
  - netfilter: nf_flow_table_ip: reset mac header before vlan push (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: guard option walkers against 1-byte tail reads (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Fix for duplicate device in netdev hooks (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: remove locking in nfqnl_get_sk_secctx (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: remove register tracking infrastructure (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: drop obsolete EXPORT_SYMBOLs (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: don't disable bh when acquiring tree lock (Florian Westphal) [RHEL-168848]
  - ipvs: do not keep dest_dst after dest is removed (Florian Westphal) [RHEL-168848]
  - ipvs: do not keep dest_dst if dev is going down (Florian Westphal) [RHEL-168848]
  - ipvs: skip ipv6 extension headers for csum checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: revert commit_mutex usage in reset path (Florian Westphal) [RHEL-168848]
  - netfilter: nft_quota: use atomic64_xchg for reset (Florian Westphal) [RHEL-168848]
  - netfilter: nft_counter: serialize reset with spinlock (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: validate element belonging to interval (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval (Florian Westphal) [RHEL-168848]
  - netfilter: nft_counter: fix reset of counters on 32bit archs (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: add IPV6_TUNNEL to config (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: dedicated slab for flow entry (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_queue.sh: add udp fraglist gro test case (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: don't gc elements on insert (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-168848]
  - netfilter: xt_time: use is_leap_year() helper (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add IP6IP6 flowtable selftest (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IP6IP6 tx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IP6IP6 rx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: Introduce tunnel metadata info in nf_flowtable_ctx struct (Florian Westphal) [RHEL-168848]
  - netfilter: Add ctx pointer in nf_flow_skb_encap_protocol/nf_flow_ip4_tunnel_proto signature (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: remove seqcount_rwlock_t (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: use binary search array in get command (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: translate rbtree to array for binary search (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add .abort_skip_removal flag for set types (Florian Westphal) [RHEL-168848]
  - netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: fix tracking of connections from localhost (Florian Westphal) [RHEL-168848]
  - netfilter: nft_compat: add more restrictions on netlink attributes (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-168848]
  - netfilter: don't include xt and nftables.h in unrelated subsystems (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack: enable icmp clash support (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: increase the connection clean up limit to 64 (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack: Add allow_clash to generic protocol handler (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: reset table validation state on abort (Florian Westphal) [RHEL-168848]
  - netfilter: replace -EEXIST with -EBUSY (Florian Westphal) [RHEL-168848]
  - netfilter: nft_synproxy: avoid possible data-race on update operation (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: fix range overlap detection (Florian Westphal) [RHEL-168848]
  - audit: add audit_log_nf_skb helper function (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: prefer xfail in case race wasn't triggered (Florian Westphal) [RHEL-168848]
  - netfilter: always set route tuple out ifindex (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: fix leaked ct in error paths (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: improve UAPI kernel-doc comments (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_srh: fix UAPI kernel-doc comments format (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add the capability to send IPv6 TCP traffic (Florian Westphal) [RHEL-168848]
  - netfilter: nft_connlimit: add support to object update operation (Florian Westphal) [RHEL-168848]
  - netfilter: nft_connlimit: update the count if add was skipped (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: rework API to use sk_buff directly (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add IPIP flowtable selftest (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IPIP tx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IPIP rx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: use tuple address to calculate next hop (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: remove hw_ifidx (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: consolidate xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: move path discovery infrastructure to its own file (Florian Westphal) [RHEL-168848]
  - netfilter: fix typo in nf_conntrack_l4proto.h comment (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: disable 0 value for conntrack_max setting (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: query conntrack state to check for port clash resolution (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_fib.sh: fix spurious test failures (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-168848]
  - netfilter: nf_reject: don't reply to icmp error messages (Florian Westphal) [RHEL-168848]
  - netfilter: nft_meta_bridge: introduce NFT_META_BRI_IIFHWADDR support (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: fix udpclash tool hang (Florian Westphal) [RHEL-168848]
  - netfilter: nft_payload: extend offset to 65535 bytes (Florian Westphal) [RHEL-168848]
  - netfilter: nf_reject: remove unneeded exports (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: remove redundant test for avx feature bit (Florian Westphal) [RHEL-168848]
  - netfilter: nft_payload: Use csum_replace4() instead of opencoding (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: Use vmalloc_array() to improve code (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: use avx2 algorithm for insertions too (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: remove refcounting in dying list dumping (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Remove unused nft_reduce_is_readonly() (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: Remove unused functions xt_{in|out}name() (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: tone-down conntrack clash test (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: conntrack_resize.sh: also use udpclash tool (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: add conntrack clash resolution test case (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Reintroduce shortened deletion notifications (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Drop dead code from fill_*_info routines (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove DCCP protocol support (Florian Westphal) [RHEL-168848]
  - netfilter: nf_dup_netdev: Move the recursion counter struct netdev_xmit (Florian Westphal) [RHEL-168848]
  - netfilter: nf_dup{4, 6}: Move duplication check to task_struct (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: Remove redundant NFCT_ALIGN call (Florian Westphal) [RHEL-168848]
  - netfilter: xt_cgroup: Make it independent from net_cls (Florian Westphal) [RHEL-168848]
  - netfilter: xt_IDLETIMER: convert timeouts to secs_to_jiffies() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPOLINE (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: Use strscpy() instead of strscpy_pad() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_hashlimit: replace vmalloc calls with kvmalloc (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: cleanup timeout definitions (Florian Westphal) [RHEL-168848]
  - netfilter: bitwise: add support for doing AND, OR and XOR directly (Florian Westphal) [RHEL-168848]
  - netfilter: bitwise: rename some boolean operation functions (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: replace deprecated strncpy with strscpy_pad (Florian Westphal) [RHEL-168848]
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175537] {CVE-2026-31474}
  - dmaengine: dw-edma: Add non-LL mode (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add AMD MDB Endpoint Support (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Add device_{pause,resume}() callbacks (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Add device_tx_status() callback (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Use rz_lmdesc_setup() to invalidate descriptors (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop unnecessary local_irq_save() call (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop goto instruction and label (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop read of CHCTRL register (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: add RZ/{T2H,N2H} support (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: make register_dma_req() chip-specific (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: make error interrupt optional (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add virtual IRQ for interrupt-emulation doorbells (Eder Zulian) [RHEL-172442]
  - dmaengine: dw_edma: correct kernel-doc warnings in <linux/dma/edma.h> (Eder Zulian) [RHEL-172442]
  - New configs in drivers/dma (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add interrupt-emulation hooks (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Protect the driver specific lists (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix leaking event log memory (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix freeing the allocated ida too late (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix memory leak when a wq is reset (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix not releasing workqueue on .release() (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Wait for submitted operations on .device_synchronize() (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Flush all pending descriptors (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Flush kernel workqueues on Function Level Reset (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix possible invalid memory access after FLR (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix crash when the event log is disabled (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix lockdep warnings when calling idxd_device_config() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: fix MSI data programming for multi-IRQ case (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: adm: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: bcm2835-dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Add Max SGL Size Support for DSA3.0 (Eder Zulian) [RHEL-154485 RHEL-172442]
  - dmaengine: idxd: Expose DSA3.0 capabilities through sysfs (Eder Zulian) [RHEL-154485 RHEL-172442]
  - dmaengine: sh: rz-dmac: Make channel irq local (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: uapi: use UAPI types (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: Discard pm_runtime_put() return value (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: Remove redundant pm_runtime_mark_last_busy() calls (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: k3-udma: enable compile testing (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: use lock guards (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: order includes alphabetically (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Fix confusing cleanup.h syntax (Eder Zulian) [RHEL-172442]
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() (Eder Zulian) [RHEL-172442]
  - dmaengine: tegra-adma: Fix use-after-free (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: k3-udma: fix device leak on udma lookup (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: clean up dra7x route allocation error paths (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: fix device leak on probe failure (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Eder Zulian) [RHEL-172442]
  - dmaengine: dw: dmamux: fix OF node leak on route allocation failure (Eder Zulian) [RHEL-172442]
  - dmaengine: tegra210-adma: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: dw: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: bcm2835: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: gpi: Add GPI Block event interrupt support (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: drain ATS translations when disabling WQ (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: Kconfig: Drop ARCH_R7S72100/ARCH_RZG2L dependency (Eder Zulian) [RHEL-172442]
  - dmaengine: rcar-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442]
  - dmaengine: rcar-dmac: Remove dummy Runtime PM callback (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: usb-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Set status for callback_result (Eder Zulian) [RHEL-172442]
  - dmaengine: Fix dma_async_tx_descriptor->tx_submit documentation (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: setup_xref error handling (Eder Zulian) [RHEL-172442]
  - dmaengine: Replace zero-length array with flexible-array (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Replace memset(0) + strscpy() with strscpy_pad() (Eder Zulian) [RHEL-172442]
  - ice: dpll: fix misplaced header macros (Michal Schmidt) [RHEL-137412]
  - ice: dpll: fix rclk pin state get for E810 (Michal Schmidt) [RHEL-137412]
  - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Michal Schmidt) [RHEL-137412]
  - ice: fix locking in ice_dcb_rebuild() (Michal Schmidt) [RHEL-137412]
  - ice: fix setting RSS VSI hash for E830 (Michal Schmidt) [RHEL-137412]
  - ice: add dpll peer notification for paired SMA and U.FL pins (Michal Schmidt) [RHEL-137412]
  - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Michal Schmidt) [RHEL-137412]
  - ice: fix missing dpll notifications for SW pins (Michal Schmidt) [RHEL-137412]
  - ice: fix SMA and U.FL pin state changes affecting paired pin (Michal Schmidt) [RHEL-137412]
  - ice: fix missing SMA pin initialization in DPLL subsystem (Michal Schmidt) [RHEL-137412]
  - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Michal Schmidt) [RHEL-137412]
  - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Michal Schmidt) [RHEL-137412]
  - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Michal Schmidt) [RHEL-137412]
  - ice: fix ready bitmap check for non-E822 devices (Michal Schmidt) [RHEL-137412]
  - ice: perform PHY soft reset for E825C ports at initialization (Michal Schmidt) [RHEL-137412]
  - ice: fix timestamp interrupt configuration for E825C (Michal Schmidt) [RHEL-137412]
  - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Michal Schmidt) [RHEL-137412]
  - ice: fix race condition in TX timestamp ring cleanup (Michal Schmidt) [RHEL-137412]
  - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Michal Schmidt) [RHEL-137412]
  - ice: fix PHY config on media change with link-down-on-close (Michal Schmidt) [RHEL-137412]
  - ice: Fix memory leak in ice_set_ringparam() (Michal Schmidt) [RHEL-137412]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [ice] (Michal Schmidt) [RHEL-137412]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [ice] (Michal Schmidt) [RHEL-137412]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [ice] (Michal Schmidt) [RHEL-137412]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [ice] (Michal Schmidt) [RHEL-137412]
  - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-137412]
  - ice: fix double free in ice_sf_eth_activate() error path (Michal Schmidt) [RHEL-137412]
  - ice: update PCS latency settings for E825 10G/25Gb modes (Michal Schmidt) [RHEL-137412]
  - ice: fix 'adjust' timer programming for E830 devices (Michal Schmidt) [RHEL-137412]
  - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Michal Schmidt) [RHEL-137412]
  - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Michal Schmidt) [RHEL-137412]
  - ice: Make name member of struct ice_cgu_pin_desc const (Michal Schmidt) [RHEL-137412]
  - ice: fix PTP timestamping broken by SyncE code on E825C (Michal Schmidt) [RHEL-137412]
  - ice: ptp: don't WARN when controlling PF is unavailable (Michal Schmidt) [RHEL-137412]
  - ice: use ice_update_eth_stats() for representor stats (Michal Schmidt) [RHEL-137412]
  - ice: fix inverted ready check for VF representors (Michal Schmidt) [RHEL-137412]
  - drivers: net: ice: fix devlink parameters get without irdma (Michal Schmidt) [RHEL-137412]
  - ice: fix rxq info registering in mbuf packets (Michal Schmidt) [RHEL-137412]
  - ice: fix retry for AQ command 0x06EE (Michal Schmidt) [RHEL-137412]
  - ice: reintroduce retry mechanism for indirect AQ (Michal Schmidt) [RHEL-137412]
  - ice: fix adding AQ LLDP filter for VF (Michal Schmidt) [RHEL-137412]
  - ice: recap the VSI and QoS info after rebuild (Michal Schmidt) [RHEL-137412]
  - ice: fix missing TX timestamps interrupts on E825 devices (Michal Schmidt) [RHEL-137412]
  - ice: stop counting UDP csum mismatch as rx_errors (Michal Schmidt) [RHEL-137412]
  - ice: reshuffle and group Rx and Tx queue fields by cachelines (Michal Schmidt) [RHEL-137412]
  - ice: convert all ring stats to u64_stats_t (Michal Schmidt) [RHEL-137412]
  - ice: shorten ring stat names and add accessors (Michal Schmidt) [RHEL-137412]
  - ice: use u64_stats API to access pkts/bytes in dim sample (Michal Schmidt) [RHEL-137412]
  - ice: remove ice_q_stats struct and use struct_group (Michal Schmidt) [RHEL-137412]
  - ice: pass pointer to ice_fetch_u64_stats_per_ring (Michal Schmidt) [RHEL-137412]
  - ice: unify PHY FW loading status handler for E800 devices (Michal Schmidt) [RHEL-137412]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Waiman Long) [RHEL-171746]
  - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171457] {CVE-2026-31636}
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171437] {CVE-2026-31607}
  - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171420] {CVE-2026-31641}
  - vxlan: validate ND option lengths in vxlan_na_create (Guillaume Nault) [RHEL-152728]
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-152728]
  - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Guillaume Nault) [RHEL-152728]
  - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Guillaume Nault) [RHEL-152728]
  - ipv4: ip_gre: make ipgre_header() robust (Guillaume Nault) [RHEL-152728]
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Guillaume Nault) [RHEL-152728]
  - ipv4: ip_tunnel: spread netdev_lockdep_set_classes() (Guillaume Nault) [RHEL-152728]
  - arp: do not assume dev_hard_header() does not change skb->head (Guillaume Nault) [RHEL-152728]
  - erspan: Initialize options_len before referencing options. (Guillaume Nault) [RHEL-152728]
  - ip6_gre: make ip6gre_header() robust (Guillaume Nault) [RHEL-152728]
  - selftest: packetdrill: add tcp_timestamping_tcp_tx_timestamp_bug.pkt (Paolo Abeni) [RHEL-152718]
  - tcp: secure_seq: add back ports to TS offset (Paolo Abeni) [RHEL-152718]
  - net/tcp-md5: Fix MAC comparison to be constant-time (Paolo Abeni) [RHEL-152718]
  - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-152718]
  - tcp: tcp_tx_timestamp() must look at the rtx queue (Paolo Abeni) [RHEL-152718]
  - tcp: fix tcp_tso_should_defer() vs large RTT (Paolo Abeni) [RHEL-152718]
  - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() (Paolo Abeni) [RHEL-152718]
  - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (Paolo Abeni) [RHEL-152718]
  - wireguard: send: append trailer after expanding head (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit (Toke Høiland-Jørgensen) [RHEL-152735] {CVE-2026-31579}
  - wireguard: allowedips: remove redundant space (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: allowedips: Use kfree_rcu() instead of call_rcu() (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: netlink: generate netlink code (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: generate header with ynl-gen (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: move flag enums (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: move enum wg_cmd (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: add YNL specification (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: lower .maxattr for WG_CMD_GET_DEVICE (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: convert to split ops (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: use WG_KEY_LEN in policies (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: validate nested arrays in policy (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: enable strict genetlink validation (CKI Backport Bot) [RHEL-152735]
  - wireguard: queueing: always return valid online CPU in wg_cpumask_choose_online() (CKI Backport Bot) [RHEL-152735]
  - wireguard: queueing: simplify wg_cpumask_next_online() (CKI Backport Bot) [RHEL-152735]
  - wireguard: peer: Replace sockaddr with sockaddr_inet (CKI Backport Bot) [RHEL-152735]
  - ipv6: Add sockaddr_inet unified address structure (CKI Backport Bot) [RHEL-152735]
  - clocksource/drivers/arm_arch_timer_mmio: Prevent driver unbind (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Get rid of acpi_arch_timer_mem_init() (Mark Langsdorf) [RHEL-156420]
  - clocksource/drivers/arm_arch_timer_mmio: Switch over to standalone driver (Mark Langsdorf) [RHEL-156420]
  - clocksource/drivers/arm_arch_timer: Add standalone MMIO driver (Mark Langsdorf) [RHEL-156420]
  - ACPI: tools: pfrut: fix memory leak and resource leak in pfrut.c (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Correctly number platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Generate platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420]
  - ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Move Lenovo Legion S7 15ACH6 quirk to the right section (Mark Langsdorf) [RHEL-156420]
  - ACPI: RIMT: Add dependency between iommu and devices (Mark Langsdorf) [RHEL-156420]
  - genirq: Fix percpu_devid irq affinity documentation (Mark Langsdorf) [RHEL-156420]
  - drm/amdgpu: Fix ISP segfault issue in kernel v7.0 (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update the format of Arg3 of _DSM (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update the _CPC definition to match ACPI 6.6 (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Save NVS memory on Lenovo G70-35 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (Mark Langsdorf) [RHEL-156420]
  - ACPI: driver: Drop driver_data pointer clearing from two drivers (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Clear driver_data pointer on remove (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Tweak acpi_button_remove() (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Tweak system wakeup handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant checks from acpi_battery_remove() (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Call device_init_wakeup() earlier during probe (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant check from acpi_battery_notify() (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: fix incorrect charging status when current is zero (Mark Langsdorf) [RHEL-156420]
  - hwmon: (acpi_power_meter) Replace deprecated strcpy() with strscpy() (Mark Langsdorf) [RHEL-156420]
  - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use async schedule function in acpi_scan_clear_dep_fn() (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Rework the handling of acpi_processor_ffh_lpi_probe() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_dev() to void (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_states() to void (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Adjust messages regarding postponed ACPI PM (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: s2idle: Remove dead code in lps0_device_attach() (Mark Langsdorf) [RHEL-156420]
  - x86/acpi: Add acpi=spcr to use SPCR-provided default console (Mark Langsdorf) [RHEL-156420]
  - ACPICA: actbl3.h: ACPI 6.6: SRAT: New flag in Memory Affinity Structure (Mark Langsdorf) [RHEL-156420]
  - ACPICA: actbl2.h: ACPI 6.6: RAS2: Update Parameter Block structure (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPI 6.6: Add _VDM (Voltage Domain) object (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix asltests using the Fatal() opcode (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Add support for the Microsoft display mux _OSI string (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPICA: replace ACPI_FREE() with acpi_ut_delete_object_desc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Clean up after recent changes (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for backlight device objects (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Add debug log for states with invalid entry methods (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (Mark Langsdorf) [RHEL-156420]
  - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Align acpi_device_get_match_data() with driver match order (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Improve ghes_notify_sea() status check (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Extract helper functions for error status handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Improve ghes_notify_nmi() status check (Mark Langsdorf) [RHEL-156420]
  - APEI/GHES: ensure that won't go past CPER allocated record (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Add module parameter for LPS0 constraints checking (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Add missing checks to acpi_s2idle_begin_lps0() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Do not expose global variable acpi_idle_driver (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Rearrange declarations in header file (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Redefine two functions as void (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Update cpuidle driver check in __acpi_processor_start() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Remove unused empty stubs of some functions (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Optimize ACPI idle driver registration (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: make read-only array non_mmio_desc static const (Mark Langsdorf) [RHEL-156420]
  - ACPI: acpi_watchdog: use LIST_HEAD for stack-allocated list (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: IRQ: Fix INTx GSIs signedness (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Drop outdated comment regarding removed function (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use resource_type() for resource type checking (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Fix typo under sizeof() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Adjust acpi_osc_handshake() parameter list (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Add device cid attribute for exposing _CID lists (Mark Langsdorf) [RHEL-156420]
  - ACPI: SBS: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: SMBUS HC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Register a platform device for ECDT EC (Mark Langsdorf) [RHEL-156420]
  - ACPI: HED: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Reduce code duplication related to cleanup (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Rework system suspend and resume handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for thermal zones (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Do not mark button ACPI devices as wakeup-capable (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Do not bind ACPI drivers to fixed event buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: tiny-power-button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Adjust event notification routines (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Reduce code duplication related to fixed event devices (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for fixed event buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: NFIT: core: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework the handling of \_SB._OSC USB4 features (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Adjust feature mask creation for \_SB._OSC (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework the handling of \_SB._OSC platform features (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rename label and use ACPI_FREE() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Split _OSC error processing out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Split _OSC evaluation out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework printing debug messages on _OSC errors (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Fix handling of _OSC errors in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - compiler_types: introduce at_least parameter decoration pseudo keyword (Mark Langsdorf) [RHEL-156420]
  - wifi: iwlwifi: trans: rename at_least variable to min_mode (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Register wakeup sources under physical devices (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: PM: Rework root bus notification setup (Mark Langsdorf) [RHEL-156420]
  - ACPI: PNP: Drop acpi_nonpnp_device_ids[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: PNP: Drop PNP0C01 and PNP0C02 from acpi_pnp_device_ids[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCC: Fix race condition by removing static qualifier (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Mark Langsdorf) [RHEL-156420]
  - x86/acpi/boot: Correct acpi_is_processor_usable() check again (Mark Langsdorf) [RHEL-156420]
  - acpi: platform_profile - Add max-power profile option (Mark Langsdorf) [RHEL-156420]
  - vmcoreinfo: make hwerr_data visible for debugging (Mark Langsdorf) [RHEL-156420]
  - vmcoreinfo: track and log recoverable hardware errors (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420]
  - ACPI: LPSS: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: use min() instead of min_t() (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: Fix EINJV2 initialization and injection (Mark Langsdorf) [RHEL-156420]
  - acpi/hmat: Fix lockdep warning for hmem_register_resource() (Mark Langsdorf) [RHEL-156420]
  - acpi/hmat: Return when generic target is updated (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: MRRM: Fix memory leaks and improve error handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: DPTF: Use ACPI_FREE() for ACPI buffer deallocation (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Drop redundant C-state count checks (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: replace use of system_wq with system_percpu_wq (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156420]
  - ACPI: SBS: Fix present test in acpi_battery_read() (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Fix typo in a comment (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add support for Microsoft fan extensions (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add hwmon notification support (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add basic notification support (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Check for table version when using precise baudrate (Mark Langsdorf) [RHEL-156420]
  - ACPI: MRRM: Check revision of MRRM table (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant locking (Mark Langsdorf) [RHEL-156420]
  - ACPI: irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156420]
  - ACPI: PRM: Add acpi_prm_handler_available() (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Workaround for 64-bit firmware bug (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Use platform device for devres-related actions (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Use ACPI handle when retrieving _FST (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Call input_free_device() on failing input device registration (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Make acpi_get_next_subnode() static (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Rework acpi_graph_get_next_endpoint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix argument order in __acpi_node_get_property_reference() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Only retrieve constraints when needed (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Staticise LPS0 callback functions (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Drop acpi_get_lps0_constraint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: RIMT: Fix unused function warnings when CONFIG_IOMMU_API is disabled (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Return present device nodes only on fwnode interface (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Do not use CPUFREQ_ETERNAL as an error value (Mark Langsdorf) [RHEL-156420]
  - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay (Mark Langsdorf) [RHEL-156420]
  - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: Remove redundant rcu_read_lock/unlock() under spinlock (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Add synchronization between interface updates (Mark Langsdorf) [RHEL-156420]
  - ACPI: support BGRT table on RISC-V (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add RPMI System MSI to GSI mapping (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add support to update gsi range (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Create interrupt controller list in sorted order (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Update honor list for RPMI System MSI (Mark Langsdorf) [RHEL-156420]
  - ACPI: Add support for nargs_prop in acpi_fwnode_get_reference_args() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Refactor acpi_fwnode_get_reference_args() to support nargs_prop (Mark Langsdorf) [RHEL-156420]
  - ACPI: debug: fix signedness issues in read/write helpers (Mark Langsdorf) [RHEL-156420]
  - x86/acpi/cstate: Remove open coded check for cpu_feature_enabled() (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Support Precise Baud Rate field (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update dsmethod.c to get rid of unused variable warning (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Adjust failure handling in acpi_nondev_subnode_extract() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Do not pass NULL handles to acpi_attach_data() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Add code comments explaining what is going on (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Disregard references in data-only subnode lists (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix buffer properties extraction for subnodes (Mark Langsdorf) [RHEL-156420]
  - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Add support for DBG2 RISC-V SBI port subtype (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: Allow more types of addresses except MMIO (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: Remove redundant assignments in erst_dbg_{ioctl|write}() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix largest possible resource descriptor index (Mark Langsdorf) [RHEL-156420]
  - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPI_TYPE_ANY does not include the package type (Mark Langsdorf) [RHEL-156420]
  - ACPICA: acpidump: fix return values in ap_is_valid_checksum() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Print error messages for too few or too many arguments (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Modify variable definition position (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Allow to skip Global Lock initialization (Mark Langsdorf) [RHEL-156420]
  - ACPICA: iASL: Fix printing CDAT table header (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: thermal: Release policy references using __free() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Add support for RISC-V in acpi_iommu_configure_id() (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add support for RIMT (Mark Langsdorf) [RHEL-156420]
  - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Fold two simple functions into their only caller (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add fan speed reporting for fans with only _FST (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Get rid of a dummy local variable (Mark Langsdorf) [RHEL-156420]
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Mark Langsdorf) [RHEL-156420]
  - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Eliminate static variable flat_state_cnt (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Add module import namespace (Mark Langsdorf) [RHEL-156420]
  - ACPI: Use str_low_high() helper in two places (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: force native for Lenovo 82K8 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add HP EliteBook 855 G7 WWAN modem power resource quirk (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add power resource init function (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Mark Langsdorf) [RHEL-156420]
  - irqdomain: Add firmware info reporting interface (Mark Langsdorf) [RHEL-156420]
  - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: Avoid division by zero (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Jared Kangas) [RHEL-156761]
  - iio: buffer: Fix wait_queue not being removed (Jared Kangas) [RHEL-156761]
  - iio: buffer: buffer_impl.h: fix kernel-doc warnings (Jared Kangas) [RHEL-156761]
  - iio: core: Add cleanup.h support for iio_device_claim_*() (Jared Kangas) [RHEL-156761]
  - iio: core: Refactor iio_device_claim_direct() implementation (Jared Kangas) [RHEL-156761]
  - iio: core: Add and export __iio_dev_mode_lock() (Jared Kangas) [RHEL-156761]
  - iio: core: Constify struct configfs_item_operations and configfs_group_operations (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: Fix coding style complains (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: Use the cleanup.h API (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Fix coding style complains (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Turn iio_dma_buffer_init() void (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Use the cleanup.h API (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Use lockdep for locking annotations (Jared Kangas) [RHEL-156761]
  - iio: core: add separate lockdep class for info_exist_lock (Jared Kangas) [RHEL-156761]
  - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Jared Kangas) [RHEL-156761]
  - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Jared Kangas) [RHEL-156761]
  - iio: buffer: use dma_buf_unmap_attachment_unlocked() helper (Jared Kangas) [RHEL-156761]
  - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Jared Kangas) [RHEL-156761]
  - iio: core: Clean up device correctly on iio_device_alloc() failure (Jared Kangas) [RHEL-156761]
  - iio: core: add missing mutex_destroy in iio_dev_release() (Jared Kangas) [RHEL-156761]
  - iio: backend: fix kernel-doc to avoid warnings and ensure consistency (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: enable .get_dma_dev() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: support getting the DMA channel (Jared Kangas) [RHEL-156761]
  - iio: buffer: support getting dma channel from the buffer (Jared Kangas) [RHEL-156761]
  - iio: buffer: document that buffer callback must be context safe (Jared Kangas) [RHEL-156761]
  - iio: buffer: document store_to() callback may be called in any context (Jared Kangas) [RHEL-156761]
  - iio: buffer: document iio_push_to_buffers() calling context (Jared Kangas) [RHEL-156761]
  - iio: buffer: iio_push_to_buffers_with_ts_unaligned() might_sleep() (Jared Kangas) [RHEL-156761]
  - iio: buffer: document iio_push_to_buffers_with_ts_unaligned() may sleep (Jared Kangas) [RHEL-156761]
  - iio: add IIO_ALTCURRENT channel type (Jared Kangas) [RHEL-156761]
  - iio: core: switch info_mask fields to unsigned long to match find_bit helpers (Jared Kangas) [RHEL-156761]
  - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Jared Kangas) [RHEL-156761]
  - iio: buffer: buffer-cb: drop double initialization of demux list (Jared Kangas) [RHEL-156761]
  - iio: fix iio_push_to_buffers_with_ts() typo (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-lptimer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-timer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: adc: stm32-dfsdm: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: core: add ADC delay calibration definition (Jared Kangas) [RHEL-156761]
  - iio: buffer: Fix checkpatch.pl warning (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for number of lanes (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data alignment (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for filter config (Jared Kangas) [RHEL-156761]
  - iio: fix potential out-of-bound write (Jared Kangas) [RHEL-156761]
  - iio: backend: fix out-of-bound write (Jared Kangas) [RHEL-156761]
  - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Jared Kangas) [RHEL-156761]
  - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data source get (Jared Kangas) [RHEL-156761]
  - iio: Adjust internals of handling of direct mode claiming to suit new API. (Jared Kangas) [RHEL-156761]
  - iio: core: Add support for writing 64 bit attrs (Jared Kangas) [RHEL-156761]
  - MAINTAINERS: Add IIO ADC helpers (Jared Kangas) [RHEL-156761]
  - iio: adc: add helpers for parsing ADC nodes (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Fix docstrings (Jared Kangas) [RHEL-156761]
  - iio: core: make use of simple_write_to_buffer() (Jared Kangas) [RHEL-156761]
  - iio: backend: make sure to NULL terminate stack buffer (Jared Kangas) [RHEL-156761]
  - iio: backend: add API for oversampling (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data size set (Jared Kangas) [RHEL-156761]
  - iio: backend: add API for interface get (Jared Kangas) [RHEL-156761]
  - iio: core: Rework claim and release of direct mode to work with sparse. (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: add devm_iio_dmaengine_buffer_setup_with_handle() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: split requesting DMA channel from allocating buffer (Jared Kangas) [RHEL-156761]
  - iio: gts-helper: export iio_gts_get_total_gain() (Jared Kangas) [RHEL-156761]
  - iio: introduce the FAULT event type (Jared Kangas) [RHEL-156761]
  - iio: gts-helper: add helpers to ease searches of gain_sel and new_gain (Jared Kangas) [RHEL-156761]
  - iio: gts: Simplify available scale table build (Jared Kangas) [RHEL-156761]
  - iio: consumers: ensure read buffers for labels and ext_info are page aligned (Jared Kangas) [RHEL-156761]
  - iio: core: fix doc reference to iio_push_to_buffers_with_ts_unaligned (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-timer-trigger: Add check for clk_enable() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: document iio_dmaengine_buffer_setup_ext (Jared Kangas) [RHEL-156761]
  - iio: Move __private marking before struct element priv in struct iio_dev (Jared Kangas) [RHEL-156761]
  - iio: events: make IIO_EVENT_CODE macro private (Jared Kangas) [RHEL-156761]
  - iio: Mark iio_dev::priv member with __private (Jared Kangas) [RHEL-156761]
  - iio: Add channel type for attention (Jared Kangas) [RHEL-156761]
  - iio: gts: fix infinite loop for gain_to_scaletables() (Jared Kangas) [RHEL-156761]
  - iio: gts: Fix uninitialized symbol 'ret' (Jared Kangas) [RHEL-156761]
  - iio: backend: extend features (Jared Kangas) [RHEL-156761]
  - iio: events.h: add event identifier macros for differential channel (Jared Kangas) [RHEL-156761]
  - iio: backend: fix wrong pointer passed to IS_ERR() (Jared Kangas) [RHEL-156761]
  - iio: Convert unsigned to unsigned int (Jared Kangas) [RHEL-156761]
  - iio: adc: Convert to IIO_MAP() (Jared Kangas) [RHEL-156761]
  - iio: adc: Constify struct iio_map (Jared Kangas) [RHEL-156761]
  - netdev: add io_uring memory provider info (Davide Caratti) [RHEL-141853]
  - net: add helpers for setting a memory provider on an rx queue (Davide Caratti) [RHEL-141853]
  - net: page_pool: add memory provider helpers (Davide Caratti) [RHEL-141853]
  - net: prepare for non devmem TCP memory providers (Davide Caratti) [RHEL-141853]
  - net: page_pool: add a mp hook to unregister_netdevice* (Davide Caratti) [RHEL-141853]
  - net: page_pool: add callback for mp info printing (Davide Caratti) [RHEL-141853]
  - net: page_pool: create hooks for custom memory providers (Davide Caratti) [RHEL-141853]
  - net: generalise net_iov chunk owners (Davide Caratti) [RHEL-141853]
  - net: prefix devmem specific helpers (Davide Caratti) [RHEL-141853]
  - net: page_pool: don't cast mp param to devmem (Davide Caratti) [RHEL-141853]
  - selftests: drv-net-hw: inject pp_alloc_fail errors in the right place (Davide Caratti) [RHEL-141853]
  - net: page_pool: rename page_pool_is_last_ref() (Davide Caratti) [RHEL-141853]
  - net: page_pool: do not count normal frag allocation in stats (Davide Caratti) [RHEL-141853]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-240.el10]
changelog:
  - s390/syscalls: Add spectre boundary for syscall dispatch table (Ramesh Chhetri) [RHEL-183314]
  - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179565] {CVE-2026-45998}
  - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179565] {CVE-2026-45998}
  - x86/mce, EDAC/mce_amd: Add new SMCA bank types (Steve Best) [RHEL-100951]
  - x86/mce, EDAC/mce_amd: Update CS bank type naming (Steve Best) [RHEL-100951]
  - x86/mce, EDAC/mce_amd: Reorder SMCA bank type enums (Steve Best) [RHEL-100951]
  - tools/power turbostat: v2026.04.21 (Steve Best) [RHEL-172176]
  - tools/power turbostat: Process HT siblings in CPU order (Steve Best) [RHEL-172176]
  - tools/power turbostat: Show module_id column (Steve Best) [RHEL-172176]
  - tools/power turbostat: Print core_id and apic_id in hex (Steve Best) [RHEL-172176]
  - tools/power turbostat: Cleanup print helper functions (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix --cpu-set 1 regression on HT systems (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix --cpu-set 0 regression on HT systems (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix unrecognized option '-P' (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix AMD RAPL regression on big systems (Steve Best) [RHEL-172176]
  - vfio: replace vfio->device_class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Clean up DMABUFs before disabling function (Cédric Le Goater) [RHEL-149504]
  - vfio: remove dead notifier code (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Require vfio_device_ops.name (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Rename vfio_config_do_rw() to vfio_pci_config_rw_single() and export it (Cédric Le Goater) [RHEL-149504]
  - vfio: unhide vdev->debug_root (Cédric Le Goater) [RHEL-149504]
  - drivers/vfio_pci_core: Change PXD_ORDER check from switch case to if/else block (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Fix double free in dma-buf feature (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Support DMR and GNR-D DSA devices (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Build tests on aarch64 (Cédric Le Goater) [RHEL-149504]
  - vfio/mlx5: Add REINIT support to VFIO_MIG_GET_PRECOPY_INFO (Cédric Le Goater) [RHEL-149504]
  - vfio/mlx5: consider inflight SAVE during PRE_COPY (Cédric Le Goater) [RHEL-149504]
  - net/mlx5: Add IFC bits for migration state (Cédric Le Goater) [RHEL-149504]
  - vfio: Adapt drivers to use the core helper vfio_check_precopy_ioctl (Cédric Le Goater) [RHEL-149504]
  - vfio: Add support for VFIO_DEVICE_FEATURE_MIG_PRECOPY_INFOv2 (Cédric Le Goater) [RHEL-149504]
  - vfio: Define uAPI for re-init initial bytes during the PRE_COPY phase (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Fix VLA initialisation in vfio_pci_irq_set() (Cédric Le Goater) [RHEL-149504]
  - vfio: uapi: fix comment typo (Cédric Le Goater) [RHEL-149504]
  - vfio: mdev: replace mtty_dev->vd_class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio: replace vfio->class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: fix crash in vfio_dma_mapping_mmio_test (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: only build tests on arm64 and x86_64 (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Lock upstream bridge for vfio_pci_core_disable() (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Drop IOMMU mapping size assertions for VFIO_TYPE1_IOMMU (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Add vfio_dma_mapping_mmio_test (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Align BAR mmaps for efficient IOMMU mapping (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Centralize IOMMU mode name definitions (Cédric Le Goater) [RHEL-149504]
  - vfio/mdev: update outdated comment (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Drop <uapi/linux/types.h> includes (Cédric Le Goater) [RHEL-149504]
  - platform/x86/intel/vsec: Add Nova Lake PUNIT support (Steve Best) [RHEL-95636]
  - platform/x86/intel/vsec: Add support for Wildcat Lake (Steve Best) [RHEL-95636]
  - platform/x86/intel/pmt/discovery: use valid device pointer in dev_err_probe (Steve Best) [RHEL-133094]
  - platform/x86/intel/pmt: Fix kobject memory leak on init failure (Steve Best) [RHEL-133094]
  - platform/x86: intel/pmt: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-133094]
  - nvmet-fcloop: Check remoteport port_state before calling done callback (Aristeu Rozanski) [RHEL-74463]
  - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free (Aristeu Rozanski) [RHEL-146153]
  - Disable TPM as hwrng source on aarch64 (Štěpán Horáček) [RHEL-69440]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-241.el10]
changelog:
  - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185115]
  - s390: Revert support for DCACHE_WORD_ACCESS (Rafael Aquini) [RHEL-184095]
  - redhat/configs: Add CONFIG_DIBS configuration option (Mircea Dragan) [RHEL-136142]
  - net/smc: fix missing sk_err when TCP handshake fails (Mircea Dragan) [RHEL-136142]
  - net/smc: avoid early lgr access in smc_clc_wait_msg (Mircea Dragan) [RHEL-136142]
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Mircea Dragan) [RHEL-136142]
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Mircea Dragan) [RHEL-136142]
  - dibs: change dibs_class to a const struct (Mircea Dragan) [RHEL-136142]
  - Revert 'net/smc: Introduce TCP ULP support' (Mircea Dragan) [RHEL-136142]
  - dibs: Remove KMSG_COMPONENT macro (Mircea Dragan) [RHEL-136142]
  - net/smc: fix mismatch between CLC header and proposal (Mircea Dragan) [RHEL-136142]
  - net/smc: handle -ENOMEM from smc_wr_alloc_link_mem gracefully (Mircea Dragan) [RHEL-136142]
  - net/smc: make wr buffer count configurable (Mircea Dragan) [RHEL-136142]
  - dibs: Use subsys_initcall() (Mircea Dragan) [RHEL-136142]
  - dibs: Remove reset of static vars in dibs_init() (Mircea Dragan) [RHEL-136142]
  - smc: rename smc_find_ism_store_rc to reflect broader usage (Mircea Dragan) [RHEL-136142]
  - net/smc: fix general protection fault in __smc_diag_dump (Mircea Dragan) [RHEL-136142]
  - dibs: Check correct variable in dibs_init() (Mircea Dragan) [RHEL-136142]
  - dibs: Move event handling to dibs layer (Mircea Dragan) [RHEL-136142]
  - dibs: Move data path to dibs layer (Mircea Dragan) [RHEL-136142]
  - dibs: Move query_remote_gid() to dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Move vlan support to dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Local gid for dibs devices (Mircea Dragan) [RHEL-136142]
  - dibs: Create class dibs (Mircea Dragan) [RHEL-136142]
  - dibs: Move struct device to dibs_dev (Mircea Dragan) [RHEL-136142]
  - dibs: Define dibs_client_ops and dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Define dibs loopback (Mircea Dragan) [RHEL-136142]
  - dibs: Register ism as dibs device (Mircea Dragan) [RHEL-136142]
  - dibs: Register smc as dibs_client (Mircea Dragan) [RHEL-136142]
  - dibs: Create drivers/dibs (Mircea Dragan) [RHEL-136142]
  - net/smc: Decouple sf and attached send_buf in smc_loopback (Mircea Dragan) [RHEL-136142]
  - net/smc: Remove error handling of unregister_dmb() (Mircea Dragan) [RHEL-136142]
  - net/smc: fix warning in smc_rx_splice() when calling get_page() (Mircea Dragan) [RHEL-136142]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk(). (Mircea Dragan) [RHEL-136142]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). (Mircea Dragan) [RHEL-136142]
  - net/smc: Remove unused argument from 2 SMC functions (Mircea Dragan) [RHEL-136142]
  - net/smc: Improve log message for devices w/o pnetid (Mircea Dragan) [RHEL-136142]
  - net/smc: Replace use of strncpy on NUL-terminated string with strscpy (Mircea Dragan) [RHEL-136142]
  - net: Introduce netif_xmit_timeout_ms() helper (CKI Backport Bot) [RHEL-180966]
  - queue_api: add subqueue variant netif_subqueue_sent (CKI Backport Bot) [RHEL-180966]
  - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180107] {CVE-2026-46135}
  - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179772] {CVE-2026-43330}
  - Add epoch support for rv and rv-debuginfo packages (John Kacur) [RHEL-163488]
  - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (CKI Backport Bot) [RHEL-170798] {CVE-2026-23401}
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (CKI Backport Bot) [RHEL-170798] {CVE-2026-23401}
  - dm vdo: use GFP_NOIO for blkdev_issue_zeroout on format path (Benjamin Marzinski) [RHEL-113137]
  - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169623]
  - dm cache: fix missing return in invalidate_committed's error path (Benjamin Marzinski) [RHEL-92782]
  - dm vdo: save the formatted metadata to disk (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add formatting logic and initialization (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add synchronous metadata I/O submission helper (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block structure (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block encoding (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add upfront validation for logical size (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add formatting parameters to table line (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add super block initialization to encodings.c (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block initialization to encodings.c (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add __counted_by attribute to a number of structures (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: remove redundant TYPE argument from vdo_allocate macro (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: update vdo_allocate_extended to take a field name, no types (Benjamin Marzinski) [RHEL-113137]
  - dm vdo slab-depot: validate old zone count on load (Benjamin Marzinski) [RHEL-113137]
  - dm vdo indexer: validate saved zone count (Benjamin Marzinski) [RHEL-113137]
  - dm cache metadata: fix memory leak on metadata abort retry (Benjamin Marzinski) [RHEL-155190]
  - dm cache: prevent entering passthrough mode after unclean shutdown (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix dirty mapping checking in passthrough mode switching (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix concurrent write failure in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache policy smq: fix missing locks in invalidating cache blocks (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix write hang in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix write path cache coherency in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix null-deref with concurrent writes in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-168103] {CVE-2024-56603}
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-166731] {CVE-2025-39766}
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-166731] {CVE-2025-39766}
  - dm-verity-fec: fix corrected block count stat (Benjamin Marzinski) [RHEL-154975]
  - dm-mpath: don't stop probing paths at presuspend (Benjamin Marzinski) [RHEL-148451]
  - dm mpath: make pg_init_delay_msecs settable (Benjamin Marzinski) [RHEL-154975]
  - dm: use bio_clone_blkg_association (Benjamin Marzinski) [RHEL-154975]
  - dm-unstripe: fix mapping bug when there are multiple targets in a table (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: fix recalculation in bitmap mode (Benjamin Marzinski) [RHEL-144458]
  - dm: clear cloned request bio pointer when last clone bio completes (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: fix a typo in the code for write/discard race (Benjamin Marzinski) [RHEL-154975]
  - dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-154975]
  - dm: replace -EEXIST with -EBUSY (Benjamin Marzinski) [RHEL-154975]
  - dm: remove fake timeout to avoid leak request (Benjamin Marzinski) [RHEL-154975]
  - dm pcache: fix segment info indexing (Benjamin Marzinski) [RHEL-154975]
  - dm pcache: fix cache info indexing (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: advance slot index before writing slot (Benjamin Marzinski) [RHEL-154975]
  - dm raid: add documentation for takeover/reshape raid1 -> raid5 table line examples (Benjamin Marzinski) [RHEL-154975]
  - dm: ignore discard return value (Benjamin Marzinski) [RHEL-154975]
  - MAINTAINERS: add Benjamin Marzinski as a device mapper maintainer (Benjamin Marzinski) [RHEL-154975]
  - dm-mpath: Simplify the setup_scsi_dh code (Benjamin Marzinski) [RHEL-154975]
  - dm vdo: fix kerneldoc warnings (Benjamin Marzinski) [RHEL-154975]
  - dm-bufio: align write boundary on physical block size (Benjamin Marzinski) [RHEL-154975]
  - dm-crypt: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-136802]
  - dm: test for REQ_ATOMIC in dm_accept_partial_bio() (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: remove useless mempool (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: disable recursive forward error correction (Benjamin Marzinski) [RHEL-127492] {CVE-2025-71161}
  - dm-ebs: Mark full buffer dirty even on partial write (Benjamin Marzinski) [RHEL-154975]
  - dm mpath: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-154975]
  - dm verity fec: Expose corrected block count via status (Benjamin Marzinski) [RHEL-154975]
  - dm: Don't warn if IMA_DISABLE_HTABLE is not enabled (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: remove log message with shash driver name (Benjamin Marzinski) [RHEL-154975]
  - dm: sysfs: use sysfs_emit() in dm-sysfs.c (Benjamin Marzinski) [RHEL-154975]
  - dm: remove useless md->nr_zones variable (Benjamin Marzinski) [RHEL-154975]
  - dm-crypt: use folio_nr_pages() instead of shift operation (Benjamin Marzinski) [RHEL-136802]
  - dm: fix failure when empty flush's bi_sector points beyond the device end (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: zero cache_info before default init (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: reuse meta_addr in pcache_meta_find_latest (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: allow built-in build and rename flush helper (Benjamin Marzinski) [RHEL-154975]
  - dm raid: use proper md_ro_state enumerators (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: prefer synchronous hash interface (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: enable asynchronous hash interface (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: rename internal_hash (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: add the "offset" argument (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: allocate the recalculate buffer with kmalloc (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: introduce integrity_kmap and integrity_kunmap (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: replace bvec_kmap_local with kmap_local_page (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: use internal variable for digestsize (Benjamin Marzinski) [RHEL-136802]
  - dm vdo: Update code to use mem_is_zero (Benjamin Marzinski) [RHEL-154975]
  - dm: optimize REQ_PREFLUSH with data when using the linear target (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: use int type to store negative error codes (Benjamin Marzinski) [RHEL-154975]
  - dm: fix "writen"->"written" (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: cleanup: fix coding style report by checkpatch.pl (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: remove ctrl_lock for pcache_cache_segment (Benjamin Marzinski) [RHEL-154975]
  - redhat/configs: Add CONFIG_DM_PCACHE (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: add persistent cache target in device-mapper (Benjamin Marzinski) [RHEL-154975]
  - dm error: mark as DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-154975]
  - dm-vdo: Promote dm-vdo title to title heading (Benjamin Marzinski) [RHEL-154975]
  - docs: device-mapper: fixed spelling mistakes in documentation (Benjamin Marzinski) [RHEL-154975]
  - dm bufio: remove redundant __GFP_NOWARN (Benjamin Marzinski) [RHEL-154975]
  - dm-ima: drop a useless argument (Benjamin Marzinski) [RHEL-154975]
  - dm: use vmalloc_array() to simplify code (Benjamin Marzinski) [RHEL-154975]
  - dm-ima: more strlen() drops (Benjamin Marzinski) [RHEL-154975]
  - docs: device-mapper: fix typos in delay.rst and vdo-design.rst (Benjamin Marzinski) [RHEL-154975]
  - RDMA/bnxt_re: fix dma_free_coherent() pointer (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to use correct page size for PDE table (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats() (Sreekanth Reddy) [RHEL-135357] {CVE-2025-71092}
  - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Pass correct flag for dma mr creation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix the inline size for GenP7 devices (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix wrong check for CQ coalesc support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add a debugfs entry for CQE coalescing tuning (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix a potential memory leak in destroy_gsi_sqp (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: improve clarity in ALLOC_PAGE handler (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Remove non-statistics counters from hw_counters (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add debugfs info entry for device and resource information (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix incorrect errno used in function comments (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Avoid GID level QoS update from the driver (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Update sysfs entries with appropriate data (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Call strscpy() with correct size argument (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Remove unnecessary condition checks (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Use firmware provided message timeout value (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Initialize fw with roce_mirror support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for flow create/destroy (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for mirror vnic (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for unique GID (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Refactor stats context memory allocation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Refactor hw context memory allocation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add data structures for RoCE mirror support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Enhance a log message when bnxt_re_register_netdev fails (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Delete always true SGID table check (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Report udp source port for flow_label in bnxt_re_query_qp (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: RoCE related hardware counters update (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Optimize bnxt_qplib_get_dev_attr function (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: RoCE Driver Dynamic Debug for HWRM's (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Show srq_limit in fill_res_srq_entry hook (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to initialize the PBL array (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix a possible memory leak in the driver (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to remove workload check in SRQ limit path (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to do SRQ armena by default (Sreekanth Reddy) [RHEL-135357]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-242.el10]
changelog:
  - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179758] {CVE-2026-43414}
  - sched/fair: Fix wakeup_preempt_fair() for not waking up task (Phil Auld) [RHEL-174703]
  - sched/fair: Fix overflow in vruntime_eligible() (Phil Auld) [RHEL-174703]
  - sched/fair: Clear rel_deadline when initializing forked entities (Phil Auld) [RHEL-174703]
  - sched/fair: Fix wakeup_preempt_fair() vs delayed dequeue (Phil Auld) [RHEL-174703]
  - sched/deadline: Use revised wakeup rule for dl_server (Phil Auld) [RHEL-174703]
  - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() (Phil Auld) [RHEL-174703]
  - sched/debug: Fix avg_vruntime() usage (Phil Auld) [RHEL-174703]
  - sched/fair: Fix zero_vruntime tracking fix (Phil Auld) [RHEL-174703] {CVE-2026-43323}
  - NFS: write_completion: dereference loop-local req, not hdr->req (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Report whether fh_key was actually updated (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: prevent out-of-bounds read in __cache_seq_start() (Olga Kornievskaia) [RHEL-171581]
  - xfs: fix overlapping extents returned for pNFS LAYOUTGET (Olga Kornievskaia) [RHEL-171581]
  - xfs: fix use of uninitialized imap in xfs_fs_map_blocks error path (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Fix infinite loop in layout state revocation (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: start cache request seqno at 1 to fix netlink GET_REQS (Olga Kornievskaia) [RHEL-171581]
  - nfsd: update mtime/ctime on COPY in presence of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: update mtime/ctime on CLONE in presense of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix file change detection in CB_GETATTR (Olga Kornievskaia) [RHEL-171581]
  - net/handshake: Add new parameter 'HANDSHAKE_A_ACCEPT_KEYRING' (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix RCU dereference of cl_xprt in nfs_compare_super_address (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove redundant __private attribute from nfs_page_class (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.2: fix CLONE/COPY attrs in presence of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix writeback in presence of errors (Olga Kornievskaia) [RHEL-171581]
  - nfs: use memcpy_and_pad in decode_fh (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.1: Apply session size limits on clone path (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: retry GETATTR if GET_DIR_DELEGATION failed (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix RENAME attr in presence of directory delegations (Olga Kornievskaia) [RHEL-171581]
  - pnfs/flexfiles: validate ds_versions_cnt is non-zero (Olga Kornievskaia) [RHEL-171581]
  - NFS/blocklayout: print each device used for SCSI layouts (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Post receive buffers after RPC completion (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Scale receive batch size with credit window (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Replace rpcrdma_mr_seg with xdr_buf cursor (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Decouple frwr_wp_create from frwr_map (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Avoid 250 ms delay on backlog wakeup (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Close sendctx get/put race that can block a transport (Olga Kornievskaia) [RHEL-171581]
  - nfs: update inode ctime after removexattr operation (Olga Kornievskaia) [RHEL-171581]
  - nfs: fix utimensat() for atime with delegated timestamps (Olga Kornievskaia) [RHEL-171581]
  - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-171581]
  - NFSv4/pnfs: If the server is down, retry the layout returns on reboot (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix comment typo in nfsxdr (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix comment typo in nfs3xdr (Olga Kornievskaia) [RHEL-171581]
  - NFSD: convert callback RPC program to per-net namespace (Olga Kornievskaia) [RHEL-171581]
  - NFSD: use per-operation statidx for callback procedures (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Use contiguous pages for RDMA Read sink buffers (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Add svc_rqst_page_release() helper (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: xdr.h: fix all kernel-doc warnings (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Factor out WR chain linking into helper (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Add Write chunk WRs to the RPC's Send WR chain (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Clean up use of rdma->sc_pd->device (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Clean up use of rdma->sc_pd->device in Receive paths (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Add fair queuing for Send Queue access (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Optimize rq_respages allocation in svc_alloc_arg (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Track consumed rq_pages entries (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Handle NULL entries in svc_rqst_release_pages (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Allocate a separate Reply page array (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Tighten bounds checking in svc_rqst_replace_page (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Sign filehandles (Olga Kornievskaia) [RHEL-171581]
  - NFSD/export: Add sign_fh export option (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a key for signing filehandles (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use dynamic allocation for oversized NFSv4.0 replay cache (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split cache_detail queue into request and reader lists (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: convert queue_wait from global to per-cache-detail waitqueue (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: convert queue_lock from global spinlock to per-cache-detail lock (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Add XPT flags missing from SVC_XPRT_FLAG_LIST (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove dead code from fs/lockd/xdr4.c (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove C macros that are no longer used (Olga Kornievskaia) [RHEL-171581]
  - lockd: Add LOCKD_SHARE_SVID constant for DOS sharing mode (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 FREE_ALL procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 NM_LOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNSHARE procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 SHARE procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Prepare share helpers for xdrgen conversion (Olga Kornievskaia) [RHEL-171581]
  - lockd: Hoist file_lock init out of nlm4svc_decode_shareargs() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Convert server-side undefined procedures to xdrgen (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 SM_NOTIFY procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Refactor nlm4svc_callback() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 NULL procedure (Olga Kornievskaia) [RHEL-171581]
  - Documentation: Add the RPC language description of NLM version 4 (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Enforce timeout on layout recall and integrate lease manager fencing (Olga Kornievskaia) [RHEL-171581]
  - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Fix compilation error (`make W=1`) when dprintk() is no-op (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Kill RPC_IFDEBUG() (Olga Kornievskaia) [RHEL-171581]
  - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate svc_version definitions to XDR layer (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move nlm4svc_set_file_lock_range() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Make linux/lockd/nlm.h an internal header (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move xdr.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove lockd/debug.h (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate include/linux/lockd/lockd.h (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move share.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move xdr4.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - NFS: Use nlmclnt_shutdown_rpc_clnt() to safely shut down NLM (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate nlmsvc_unlock API declarations (Olga Kornievskaia) [RHEL-171581]
  - lockd: Have nlm_fopen() return errno values (Olga Kornievskaia) [RHEL-171581]
  - lockd: Introduce nlm__int__deadlock (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate and rename nlm_drop_reply (Olga Kornievskaia) [RHEL-171581]
  - lockd: Simplify cast_status() in svcproc.c (Olga Kornievskaia) [RHEL-171581]
  - nfsd: remove NFSD_V4_DELEG_TIMESTAMPS Kconfig option (Olga Kornievskaia) [RHEL-171581]
  - nfsd: add a runtime switch for disabling delegated timestamps (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Replace KUnit tests for memcmp() with KUNIT_EXPECT_MEMEQ_MSG() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Track SCSI Persistent Registration Fencing per Client with xarray (Olga Kornievskaia) [RHEL-171581]
  - sunrpc/cache: improve RCU safety in cache_list walking. (Olga Kornievskaia) [RHEL-171581]
  - nfsd/sunrpc: move rq_cachetype into struct nfsd_thread_local_info (Olga Kornievskaia) [RHEL-171581]
  - nfsd/sunrpc: add svc_rqst->rq_private pointer and remove rq_lease_breaker (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: fix cache_request leak in cache_release (Olga Kornievskaia) [RHEL-171581] {CVE-2026-31400}
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (Olga Kornievskaia) [RHEL-171581] {CVE-2026-31403}
  - nfsd: switch purge_old() to use start_removing_noperm() (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix NFS KConfig typos (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Decrement re_receiving on the early exit paths (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43469}
  - nfsd: report the requested maximum number of threads instead of number running (Olga Kornievskaia) [RHEL-171581]
  - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43470}
  - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43394}
  - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). (Olga Kornievskaia) [RHEL-171581] {CVE-2026-23297}
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (Olga Kornievskaia) [RHEL-171581]
  - nfs: nfs4proc: Convert comma to semicolon (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Change list definition method (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: rpc_debug and others are defined even if CONFIG_SUNRPC_DEBUG unset (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: limit lease period in nfs4_set_lease_period() (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: pass lease period in seconds to nfs4_set_lease_period() (Olga Kornievskaia) [RHEL-171581]
  - fs/nfs: Fix readdir slow-start regression (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix delayed delegation return handling (Olga Kornievskaia) [RHEL-171581]
  - NFS: simplify error handling in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: fold nfs_abort_delegation_return into nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove the delegation == NULL check in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: use bool for the issync argument to nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: return void from ->return_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: return void from nfs4_inode_make_writeable (Olga Kornievskaia) [RHEL-171581]
  - NFS: Merge CONFIG_NFS_V4_1 with CONFIG_NFS_V4 (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add a way to disable NFS v4.0 via KConfig (Olga Kornievskaia) [RHEL-171581]
  - redhat/configs: Add NFS_V4_0 (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move sequence slot operations into minorversion operations (Olga Kornievskaia) [RHEL-171581]
  - NFS: Pass a struct nfs_client to nfs4_init_sequence() (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move NFS v4.0 pathdown recovery into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_init_client into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_shutdown_client into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Make the various NFS v4.0 operations static again (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move the NFS v4.0 minor version ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_mig_recovery_ops to nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_state_renewal_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_nograce_recovery_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_reboot_recovery_ops into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_call_sync_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - exportfs: clarify the documentation of open()/permission() expotrfs ops (Olga Kornievskaia) [RHEL-171581]
  - nfsd: do not allow exporting of special kernel filesystems (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add POSIX ACL file attributes to SUPPATTR bitmasks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add POSIX draft ACL support to the NFSv4 SETATTR operation (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add support for POSIX draft ACLs for file creation (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add support for XDR decoding POSIX draft ACLs (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Refactor nfsd_setattr()'s ACL error reporting (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Do not allow NFSv4 (N)VERIFY to check POSIX ACL attributes (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_posix_access_acl (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_posix_default_acl (Olga Kornievskaia) [RHEL-171581]
  - lsm,nfs: fix memory leak of lsm_context (Olga Kornievskaia) [RHEL-171581]
  - lsm: lsm_context in security_dentry_init_security (Olga Kornievskaia) [RHEL-171581]
  - lsm: use lsm_context in security_inode_getsecctx (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_acl_trueform_scope (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_acl_trueform (Olga Kornievskaia) [RHEL-171581]
  - Add RPC language definition of NFSv4 POSIX ACL extension (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a Kconfig setting to enable support for NFSv4 POSIX ACLs (Olga Kornievskaia) [RHEL-171581]
  - redhat/configs: Add NFSD_V4_POSIX_ACLS (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Implement pass-through lines in specifications (Olga Kornievskaia) [RHEL-171581]
  - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-171581]
  - nfsd: add controls to set the minimum number of threads per pool (Olga Kornievskaia) [RHEL-171581]
  - nfsd: adjust number of running nfsd threads based on activity (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: allow svc_recv() to return -ETIMEDOUT and -EBUSY (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split new thread creation into a separate function (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: introduce the concept of a minimum number of threads per pool (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: track the max number of requested threads in a pool (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: remove special handling of NULL pool from svc_start/stop_kthreads() (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split svc_set_num_threads() into two functions (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: use bvec-based RDMA read/write API (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Add enum value validation to generated decoders (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Emit a max_arg_sz macro (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Extend error reporting to AST transformation phase (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Improve parse error reporting (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Remove inclusion of nlm4.h header (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix return error code for nfsd_map_name_to_[ug]id (Olga Kornievskaia) [RHEL-171581]
  - nfsd: never defer requests during idmap lookup (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Initialize data pointer for zero-length items (Olga Kornievskaia) [RHEL-171581]
  - NFSD: fix setting FMODE_NOCMTIME in nfs4_open_delegation (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Implement short (16-bit) integer types (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use workqueue enable/disable APIs for v4_end_grace sync (Olga Kornievskaia) [RHEL-171581]
  - NFS: NFSERR_INVAL is not defined by NFSv2 (Olga Kornievskaia) [RHEL-171581]
  - nfsd: prefix notification in nfsd4_finalize_deleg_timestamps() with "nfsd: " (Olga Kornievskaia) [RHEL-171581]
  - locks: ensure vfs_test_lock() never returns FILE_LOCK_DEFERRED (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Generate "if" instead of "switch" for boolean union enumerators (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add instructions on how to deal with xdrgen files (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Clean up nfsd4_check_open_attributes() (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: switch nfs_local_do_read and nfs_local_do_write to return void (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: remove -EAGAIN handling in nfs_local_doio() (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: Cleanup the nfs_local_pgio_done() parameters (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: Handle short writes by retrying (Olga Kornievskaia) [RHEL-171581]
  - NFS: make nfs_mark_return_unreferenced_delegations less aggressive (Olga Kornievskaia) [RHEL-171581]
  - NFS: return delegations from the end of a LRU when over the watermark (Olga Kornievskaia) [RHEL-171581]
  - NFS: add a separate delegation return list (Olga Kornievskaia) [RHEL-171581]
  - NFS: reformat nfs_mark_delegation_revoked (Olga Kornievskaia) [RHEL-171581]
  - NFS: use a local RCU critical section in nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: use refcount_inc_not_zero nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: don't consume a delegation reference in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: take a delegation reference in nfs4_get_valid_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: simplify the detached delegation check in update_open_stateid (Olga Kornievskaia) [RHEL-171581]
  - NFS: move the deleg_cur check out of nfs_detach_delegation_locked (Olga Kornievskaia) [RHEL-171581]
  - NFS: return bool from nfs_detach_delegation{,_locked} (Olga Kornievskaia) [RHEL-171581]
  - NFS: move delegation lookup into can_open_delegated (Olga Kornievskaia) [RHEL-171581]
  - NFS: rewrite nfs_delegations_present in terms of nr_active_delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_free_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: open code nfs_delegation_need_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove NFS_DELEGATION_INODE_FREEING (Olga Kornievskaia) [RHEL-171581]
  - NFS: drop the _locked postfix from nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: assert rcu_read_lock is held in nfs_start_delegation_return_locked (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_inode_detach_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove the NULL inode check in nfs4_inode_return_delegation_on_close (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_client_mark_return_all_delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_client_mark_return_unused_delegation_types (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove __nfs_client_for_each_server (Olga Kornievskaia) [RHEL-171581]
  - exportfs: Mark struct export_operations functions at kernel-doc (Olga Kornievskaia) [RHEL-171581]
  - exportfs: Fix kernel-doc output for get_name() (Olga Kornievskaia) [RHEL-171581]
  - docs: exportfs: Use source code struct documentation (Olga Kornievskaia) [RHEL-171581]
  - NFS: Don't immediately return directory delegations when disabled (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.x: Directory delegations don't require any state recovery (Olga Kornievskaia) [RHEL-171581]
  - nfs: unify security_inode_listsecurity() calls (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Don't free slots prematurely if requesting a directory delegation (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Fix nfs_clear_verifier_delegated() for delegated directories (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix directory delegation verifier checks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: net ref data still needs to be freed even if net hasn't startup (Olga Kornievskaia) [RHEL-171581]
  - nfsd: provide locking for v4_end_grace (Olga Kornievskaia) [RHEL-171581] {CVE-2026-22980}
  - NFSD: Remove NFSERR_EAGAIN (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use ATTR_DELEG in nfsd4_finalize_deleg_timestamps() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: NFSv4 file creation neglects setting ACL (Olga Kornievskaia) [RHEL-171581] {CVE-2025-68803}
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Handle NFS4ERR_NOTSUPP errors for directory delegations (Olga Kornievskaia) [RHEL-171581]
  - NFSD: nfsd-io-modes: Separate lists (Olga Kornievskaia) [RHEL-171581]
  - NFSD: nfsd-io-modes: Wrap shell snippets in literal code blocks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add toctree entry for NFSD IO modes docs (Olga Kornievskaia) [RHEL-171581]
  - NFSD: add Documentation/filesystems/nfs/nfsd-io-modes.rst (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Implement NFSD_IO_DIRECT for NFS WRITE (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix up the automount fs_context to use the correct cred (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add trace point for SCSI fencing operation. (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add a module option to disable directory delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: Shortcut lookup revalidations if we have a directory delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: Request a directory delegation during RENAME (Olga Kornievskaia) [RHEL-171581]
  - NFS: Request a directory delegation on ACCESS, CREATE, and UNLINK (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add support for sending GDD_GETATTR (Olga Kornievskaia) [RHEL-171581]
  - nfsd: Use MD5 library instead of crypto_shash (Olga Kornievskaia) [RHEL-171581]
  - nfsd: stop pretending that we cache the SEQUENCE reply. (Olga Kornievskaia) [RHEL-171581]
  - NFS: nfsd-maintainer-entry-profile: Inline function name prefixes (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a subsystem policy document (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: allocate a separate bvec array for socket sends (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Improve "fragment too large" warning (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Implement NFSD_IO_DIRECT for NFS READ (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Relocate the xdr_reserve_space_vec() call site (Olga Kornievskaia) [RHEL-171581]
  - NFSD: pass nfsd_file to nfsd_iter_read() (Olga Kornievskaia) [RHEL-171581]
  - NFSD/blocklayout: Support multiple extents per LAYOUTGET (Olga Kornievskaia) [RHEL-171581]
  - NFSD/blocklayout: Introduce layout content structure (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Increase the server's default RPC/RDMA credit grant (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Update comment documenting unsupported fattr4 attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: delete unreachable confusing code in nfs4_open_delegation() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add array bounds-checking in nfsd_iter_read() (Olga Kornievskaia) [RHEL-171581]
  - nfsd: switch the default for NFSD_LEGACY_CLIENT_TRACKING to "n" (Olga Kornievskaia) [RHEL-171581]
  - nfsd: change nfs4_client_to_reclaim() to allocate data (Olga Kornievskaia) [RHEL-171581]
  - nfsd: move name lookup out of nfsd4_list_rec_dir() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Define actions for the new time_deleg FATTR4 attributes (Olga Kornievskaia) [RHEL-171581] {CVE-2025-40326}
  - NFSD: Allow layoutcommit during grace period (Olga Kornievskaia) [RHEL-171581]
  - fs: lift the FMODE_NOCMTIME check into file_update_time_flags (Olga Kornievskaia) [RHEL-171581]
  - fs: refactor file timestamp update logic (Olga Kornievskaia) [RHEL-171581]
  - nfsd: freeze c/mtime updates with outstanding WRITE_ATTRS delegation (Olga Kornievskaia) [RHEL-171581]
  - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172775] {CVE-2026-43056}
  - bonding: 3ad: Add support for 1600G speed (Kamal Heib) [RHEL-165176]
  - net: ethtool: Add support for 1600Gbps speed (Kamal Heib) [RHEL-165176]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-243.el10]
changelog:
  - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-178260]
  - nvme: make nvme_add_ns{_head}_cdev return void (Utkarsh Singh) [RHEL-186079]
  - nvme: fix crash and memory leak during invalid cdev teardown (Utkarsh Singh) [RHEL-186079]
  - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-185104]
  - KVM: s390: Increase permitted SE header size to 1 MiB (Ramesh Chhetri) [RHEL-185661]
  - net/sched: fix pedit partial COW leading to page cache corruption (CKI Backport Bot) [RHEL-177381] {CVE-2026-46331}
  - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-176465] {CVE-2026-31739}
  - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-176465]
  - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180700] {CVE-2026-31530}
  - s390/uv: Fix comment of uv_find_secret() function (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Fix memory leak with CCA cards used as accelerator (Mircea Dragan) [RHEL-136440]
  - crypto: s390/paes - Refuse clear key material by default (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Support new xflag PKEY_XFLAG_NOCLEARKEY (Mircea Dragan) [RHEL-136440]
  - crypto: skcipher - Add new helper function crypto_skcipher_tested (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Select crypto engine in Kconfig when PAES is chosen (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Extend protected key conversion retry loop (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Rework protected key AES for true asynch support (Mircea Dragan) [RHEL-136440]
  - s390/cpacf: Rework cpacf_pcc() to return condition code (Mircea Dragan) [RHEL-136440]
  - s390/pkey/crypto: Introduce xflags param for pkey in-kernel API (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Provide and pass xflags within pkey and zcrypt layers (Mircea Dragan) [RHEL-136440]
  - s390/uv: Remove uv_get_secret_metadata function (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Use preallocated memory for retrieve of UV secret metadata (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework EP11 pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework CCA pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 misc functions to use cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Locate ep11_domain_query_info onto the stack instead of kmalloc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Propagate xflags argument with cca_get_info() (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca misc functions kmallocs to use the cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove CCA and EP11 card and domain info caches (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove unused functions from cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for ep11 misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework zcrypt function zcrypt_device_status_mask_ext (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for ep11 misc functions (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for cca misc functions (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: New xflag parameter (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Avoid alloc and copy of ep11 targets if kernelspace cprb (Mircea Dragan) [RHEL-136440]
  - s390/ap: Introduce ap message buffer pool (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: Rework AP message buffer allocation (Mircea Dragan) [RHEL-136440]
  - s390/ap: Move response_type struct into ap_msg struct (Mircea Dragan) [RHEL-136440]
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179311] {CVE-2026-46090}
  - KVM: s390: vsie: Allow non-zarch guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add KVM capability for ESA mode guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add capability that forwards operation exceptions (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Accommodate ESA prefix pages (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Disable some bits when in ESA mode (Mircea Dragan) [RHEL-136477]
  - KVM: s390: only deliver service interrupt with payload (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: retry SIE when unable to get vsie_page (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Check alignment of BSCA header (Mircea Dragan) [RHEL-136477]
  - rhashtable: Fix rhashtable_try_insert test (Herton R. Krzesinski) [RHEL-115002]
  - rhashtable: Fix potential deadlock by moving schedule_work outside lock (Herton R. Krzesinski) [RHEL-115002]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-244.el10]
changelog:
  - x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184788]
  - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-186142]
  - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180777]
  - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180777]
  - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180777]
  - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180777] {CVE-2025-38614}
  - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180777]
  - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180777]
  - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180777]
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180777] {CVE-2026-46242}
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180777]
  - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180777]
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173837] {CVE-2026-43074}
  - epoll: annotate racy check (Ian Kent) [RHEL-180777]
  - ima: Add code comments to explain IMA iint cache atomic_flags (Bruno Meneguele) [RHEL-104343]
  - evm: fix security.evm for a file with IMA signature (Bruno Meneguele) [RHEL-104343]
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183963] {CVE-2026-46316}
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181905] {CVE-2026-46259}
  - mei: late_bind: fix struct intel_lb_component_ops kernel-doc (Steve Best) [RHEL-177639]
  - misc/mei: INTEL_MEI should depend on X86 or DRM_XE (Steve Best) [RHEL-177639]
  - mei: me: reduce the scope on unexpected reset (Steve Best) [RHEL-177639]
  - mei: trace: treat reg parameter as string (Steve Best) [RHEL-177639]
  - misc/mei: gsc_proxy: add dependency on Xe driver (Steve Best) [RHEL-177639]
  - misc/mei: Allow building standalone for compile testing (Steve Best) [RHEL-177639]
  - misc/mei: Decouple ME interfaces from GPU drivers (Steve Best) [RHEL-177639]
  - misc/mei: Allow building Intel ME interface on non-x86 (Steve Best) [RHEL-177639]
  - mei: Fix error handling in mei_register (Steve Best) [RHEL-177639]
  - mei: gsc: add dependency on Xe driver (Steve Best) [RHEL-177639]
  - mei: Remove redundant pm_runtime_mark_last_busy() calls (Steve Best) [RHEL-177639]
  - mei: fix error flow in probe (Steve Best) [RHEL-177639]
  - mei: txe: fix initialization order (Steve Best) [RHEL-177639]
  - mei: late_bind: Fix -Wincompatible-function-pointer-types-strict (Steve Best) [RHEL-177639]
  - redhat/configs: disable CONFIG_INTEL_MEI_LB (Steve Best) [RHEL-177639]
  - mei: late_bind: add late binding component driver [partial] (Steve Best) [RHEL-177639]
  - mei: bus: add mei_cldev_mtu interface (Steve Best) [RHEL-177639]
  - mei: gsc: demote unexpected reset print (Steve Best) [RHEL-177639]
  - mei: bus: demote error on connect (Steve Best) [RHEL-177639]
  - mei: retry connect if interrupted by link reset (Steve Best) [RHEL-177639]
  - mei: make a local copy of client uuid in connect (Steve Best) [RHEL-177639]
  - mei: me: trigger link reset if hw ready is unexpected (Steve Best) [RHEL-177639]
  - mei: gsc: fix remove operations order (Steve Best) [RHEL-177639]
  - mei: hook mei_device on class device (Steve Best) [RHEL-177639]
  - RDMA/irdma: Add support for GEN4 hardware (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Provide scratch buffers to firmware for internal use (Michal Schmidt) [RHEL-186151]
  - RDMA: Don't use %pK through printk (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Harden depth calculation functions (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Return EINVAL for invalid arp index error (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix deadlock during netdev reset with active connections (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Clean up unnecessary dereference of event->cm_node (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Update ibqp state to error if QP is already in error state (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Initialize free_qp completion before using it (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix double free related to rereg_user_mr (Michal Schmidt) [RHEL-186151]
  - RDMA: Complete k[z|m|c]alloc-to-k[z|m]alloc_obj conversion [irdma] (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (Michal Schmidt) [RHEL-186151]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [irdma] (Michal Schmidt) [RHEL-186151]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [irdma] (Michal Schmidt) [RHEL-186151]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [irdma] (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Use kvzalloc for paged memory DMA address array (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Use CQ ID for CEQE context (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Add enum defs for reserved CQs/QPs (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove fixed 1 ms delay during AH wait loop (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove redundant dma_wmb() before writel() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Simplify bool conversion (Michal Schmidt) [RHEL-186151]
  - rtla: Fix parsing of multi-character short options (Tomas Glozar) [RHEL-151369]
  - tracing: Fix potential deadlock in cpu hotplug with osnoise (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Convert links to RST format (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Document SIGINT behavior (Tomas Glozar) [RHEL-151369]
  - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-151369 RHEL-151475]
  - rtla/utils: Fix loop condition in PID validation (Tomas Glozar) [RHEL-151369]
  - rtla/utils: Fix resource leak in set_comm_sched_attr() (Tomas Glozar) [RHEL-151369]
  - rtla/trace: Fix I/O handling in save_trace_to_file() (Tomas Glozar) [RHEL-151369]
  - rtla/trace: Fix write loop in trace_event_save_hist() (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Simplify RTLA_NO_BPF environment variable check (Tomas Glozar) [RHEL-151369]
  - rtla: Use str_has_prefix() for option prefix check (Tomas Glozar) [RHEL-151369]
  - rtla: Enforce exact match for time unit suffixes (Tomas Glozar) [RHEL-151369]
  - rtla: Use str_has_prefix() for prefix checks (Tomas Glozar) [RHEL-151369]
  - rtla: Add str_has_prefix() helper function (Tomas Glozar) [RHEL-151369]
  - rtla: Handle pthread_create() failure properly (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Add bounds check for softirq vector (Tomas Glozar) [RHEL-151369]
  - rtla: Simplify code by caching string lengths (Tomas Glozar) [RHEL-151369]
  - rtla: Replace magic number with MAX_PATH (Tomas Glozar) [RHEL-151369]
  - rtla: Introduce common_threshold_handler() helper (Tomas Glozar) [RHEL-151369]
  - rtla/actions: Simplify argument parsing (Tomas Glozar) [RHEL-151369]
  - rtla: Use strdup() to simplify code (Tomas Glozar) [RHEL-151369]
  - rtla: Exit on memory allocation failures during initialization (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus from for_each_monitored_cpu (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus members (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus arguments (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate nr_cpus usage across all tools (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Document --stack-format option (Tomas Glozar) [RHEL-136812 RHEL-151369]
  - rtla/timerlat: Add --stack-format option (Tomas Glozar) [RHEL-136812 RHEL-151369]
  - tools/rtla: Add unit tests for utils.c (Tomas Glozar) [RHEL-151369]
  - tools/build: Add feature test for libcheck (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Generate optstring from long options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Add hwnoise to main page (Tomas Glozar) [RHEL-151369]
  - rtla: Fix build without libbpf header (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Include defaults for tracer options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Mention default cgroup state (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Mention default priority (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Correct tracer name for common options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in rtla-timerlat-top.rst (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: rename common_xxx.rst files to common_xxx.txt (Tomas Glozar) [RHEL-151369]
  - rtla: Fix parse_cpu_set() bug introduced by strtoi() (Tomas Glozar) [RHEL-151369]
  - rtla: Fix parse_cpu_set() return value documentation (Tomas Glozar) [RHEL-151369]
  - rtla: Ensure null termination after read operations in utils.c (Tomas Glozar) [RHEL-151369]
  - rtla: Make stop_tracing variable volatile (Tomas Glozar) [RHEL-151369]
  - rtla: Add generated output files to gitignore (Tomas Glozar) [RHEL-151369]
  - rtla: Fix NULL pointer dereference in actions_parse (Tomas Glozar) [RHEL-151369]
  - rtla: Remove unused headers (Tomas Glozar) [RHEL-151369]
  - rtla: Remove redundant memset after calloc (Tomas Glozar) [RHEL-151369]
  - rtla: Use standard exit codes for result enum (Tomas Glozar) [RHEL-151369]
  - rtla: Replace atoi() with a robust strtoi() (Tomas Glozar) [RHEL-151369]
  - rtla: Introduce for_each_action() helper (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Deduplicate cgroup path opening code (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -H/--house-keeping option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -P/--priority option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -e/--event option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -d/--duration option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -D/--debug option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -C/--cgroup option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -c/--cpus option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add common_parse_options() (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add common_usage() (Tomas Glozar) [RHEL-151369]
  - rtla: Set stop threshold after all instances are enabled (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unused function declarations (Tomas Glozar) [RHEL-151369]
  - tracing: Fix multiple typos in trace_osnoise.c (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-147742 RHEL-151369]
  - rtla/tests: Don't rely on matching ^1ALL (Tomas Glozar) [RHEL-151369]
  - rtla: Fix -a overriding -t argument (Tomas Glozar) [RHEL-151369]
  - rtla: Fix -C/--cgroup interface (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace osnoise_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace osnoise_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace timerlat_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace timerlat_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add fatal() and replace error handling pattern (Tomas Glozar) [RHEL-151369]
  - rtla/tests: Fix osnoise test calling timerlat (Tomas Glozar) [RHEL-151369]
  - rtla/tests: Extend action tests to 5s (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Fix --on-threshold always triggering (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Fix unassigned nr_cpus (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unused optional option_index (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add for_each_monitored_cpu() helper (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add remaining support for osnoise actions (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Add test engine support for unexpected output (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Fix -A option name in test comment (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Consolidate code between osnoise/timerlat and hist/top (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Create common_apply_config() (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Move top/hist params into common struct (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Consolidate common parameters into shared structure (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tracing: Replace opencoded cpumask_next_wrap() in move_to_next_cpu() (Tomas Glozar) [RHEL-151369]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-245.el10]
changelog:
  - riscv: entry: Split ret_from_fork() into user and kernel (Jennifer Berringer) [RHEL-188766]
  - riscv: entry: Convert ret_from_fork() to C (Jennifer Berringer) [RHEL-188766]
  - ACPICA: actbl2: Add definitions for RIMT (Jennifer Berringer) [RHEL-187991]
  - soc/tegra: Use ARM SMCCC to get chip ID, revision, and platform info (Steve Dunnagan) [RHEL-143339]
  - dma-debug: suppress cacheline overlap warning when arch has no DMA alignment requirement (Jerry Snitselaar) [RHEL-182720]
  - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (Steve Best) [RHEL-182291]
  - redhat/configs: riscv: Enable ARCH_SPACEMIT (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Clear interrupt move state during CPU offlining (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-aplic: Prevent crash when MSI domain is missing (Jennifer Berringer) [RHEL-174301] {CVE-2024-56682}
  - irqchip/riscv-imsic: Adjust the number of available guest irq files (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Add a CPU pm notifier to restore the IMSIC on exit (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Inline imsic_vector_from_local_id() (Jennifer Berringer) [RHEL-174301]
  - irqchip/irq-riscv-imsic-early: Export imsic_acpi_get_fwnode() (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Don't dereference before NULL pointer check (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Add kernel parameter to disable IPIs (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Convert to msi_create_parent_irq_domain() helper (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Start local sync timer on correct CPU (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Avoid interrupt translation in interrupt handler (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Implement irq_force_complete_move() for IMSIC (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv: Ensure ordering of memory writes and IPI writes (Jennifer Berringer) [RHEL-174301]
  - serial: 8250_of: manage bus clock in suspend/resume (Jennifer Berringer) [RHEL-174301]
  - serial: 8250_of: add support for an optional bus clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: mark top_dclk as CLK_IS_CRITICAL (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc() (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: k3: Decouple composite reset lines (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: return -ENOTSUPP for unsupported pin configurations (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: Add SpacemiT K3 reset driver (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: Extract common K1 reset code (Jennifer Berringer) [RHEL-174301]
  - reset: Create subdirectory for SpacemiT drivers (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: fix auxiliary device id (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: Add K3 reset support and IDs (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: support I/O power domain configuration (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: add the clock tree (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: extract common header (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: add plla type clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: add inverted enable gate clock (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: k3: add clock support (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: add platform SoC prefix to reset name (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: extract common ccu functions (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: prepare common ccu header (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: k3: adjust drive strength and schmitter trigger (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: k3: add initial pin support (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Hide common clock driver from user controller (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Respect Kconfig setting when building modules (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Set clk_hw_onecell_data::num before using flex array (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix comment typo (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix i2s clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: introduce pre-div for ddn clock (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: introduce i2s pre-clock to fix i2s clock (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: fix typo in PRI_TDI pin name (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_ddn: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix sspax_clk (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: CLK_SSPA_I2S_BCLK for SSPA (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: remove extra line in debug output (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: add support for SpacemiT CCU resets (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: mark K1 pll1_d8 as critical (Jennifer Berringer) [RHEL-174301] {CVE-2025-38633}
  - clk: spacemit: define three reset-only CCUs (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: set up reset auxiliary devices (Jennifer Berringer) [RHEL-174301]
  - soc: spacemit: create a header for clock/reset registers (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: define spacemit,k1-ccu resets (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: add clock support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k1: Add TWSI8 bus and function clocks (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Add clock support for SpacemiT K1 SoC (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: Add spacemit,k1-pll (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: Add spacemit,k1-syscon (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: PINCTRL_SPACEMIT_K1 should not default to y unconditionally (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: destroy mutex at driver detach (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: enable config option (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: fix double free of map (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: add support for SpacemiT K1 SoC (Jennifer Berringer) [RHEL-174301]
  - reset: amlogic: move drivers to a dedicated directory (Jennifer Berringer) [RHEL-174301]
  - reset: amlogic: convert driver to regmap (Jennifer Berringer) [RHEL-174301]
  - dts: riscv: spacemit: k3: add P1 PMIC regulator tree (Jennifer Berringer) [RHEL-174301]
  - dts: riscv: spacemit: k3: Add i2c nodes (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable PCIe ports on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable USB 3 ports on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable QSPI and add SPI NOR on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add i2c aliases on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add 24c04 eeprom on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add LEDs for Milk-V Jupiter board (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add ethernet device for K3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: drop incorrect pinctrl for combo PHY (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: reorder phy nodes for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add full resource to UART (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add GPIO support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add pinctrl support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add clock tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add 'linux,pci-domain' to PCIe nodes for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: adapt regulator node name to preferred form (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Update PMIC supply properties for BPI-F3 and Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: pcie: fix missing power regulator (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Disable ETH PHY sleep mode for OrangePi (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: pinctrl: update register and IO power (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add K3 Pico-ITX board support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add initial support for K3 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k1: Add "b" ISA extension (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable USB3.0 on BananaPi-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add DWC3 USB 3.0 controller node for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add USB2 PHY node for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: sdhci: add reset support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add reset property (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: PCIe and PHY-related updates (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add a PCIe regulator (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Define the P1 PMIC regulators for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Define fixed regulators for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable i2c8 adapter for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define all missing I2C controller nodes (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: reorder i2c2 node (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add OrangePi R2S board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable K1 SoC QSPI on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add MusePi Pro board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add Ethernet and PDMA to OrangePi RV2 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add i2c aliases on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add 24c02 eeprom on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable the i2c2 adapter on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define regulator constraints (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define fixed regulators (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable the i2c8 adapter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add UART pinctrl combinations (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: uart: remove sec_uart1 device node (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable PDMA on Banana Pi F3 and Milkv Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add PDMA node for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add UART resets for Soc K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add OrangePi RV2 board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Move eMMC under storage-bus for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Move UARTs under dma-bus for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add DMA translation buses for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add pwm14_1 pinctrl setting (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add PWM support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add reset support for the K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable eMMC for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add gpio LED for system heartbeat (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add gpio support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Acquire clocks for UART (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Acquire clocks for pinctrl (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add clock tree for SpacemiT K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Milk-V Jupiter board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: move aliases to board dts (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add pinctrl property to uart0 in BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add Banana Pi BPI-F3 board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: add initial SpacemiT K1 SoC device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: add SpacemiT SoC family Kconfig support (Jennifer Berringer) [RHEL-174301]
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179911] {CVE-2026-46209}
  - platform/x86: intel-hid: disable wakeup_mode during hibernation (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Add Dell 16 Plus 2-in-1 to dmi_vgbs_allow_list (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (Steve Best) [RHEL-176441]
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (Steve Best) [RHEL-176441]
  - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() (Steve Best) [RHEL-176441]
  - platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable (Steve Best) [RHEL-176441]
  - platform/x86: intel_telemetry: Fix PSS event register mask (Steve Best) [RHEL-176441]
  - platform/x86: intel_telemetry: Fix swapped arrays in PSS output (Steve Best) [RHEL-176441]
  - platform/x86: intel: punit_ipc: fix memory corruption (Steve Best) [RHEL-176441]
  - New configs in drivers/platform (Steve Best) [RHEL-176441]
  - platform/x86/intel: Introduce Intel Elkhart Lake PSE I/O (Steve Best) [RHEL-176441]
  - platform/x86/amd: hfi: Remove redundant assignment to .owner (Steve Best) [RHEL-176387]
  - platform/x86/amd: hfi: Remove unused cpumask from cpuinfo struct (Steve Best) [RHEL-176387]
  - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Expose all package CPUs in PMU cpumask (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Remove incorrect CPU check in PMU context (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Add PL4 support for Ice Lake (Steve Best) [RHEL-130025]
  - powercap: Replace sprintf() with sysfs_emit() in sysfs show functions (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Fix possible recursive lock warning (Steve Best) [RHEL-130025]
  - powercap: fix sscanf() error return value handling (Steve Best) [RHEL-130025]
  - powercap: fix race condition in register_control_type() (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Enable MSR-based RAPL PMU support (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Prepare read_raw() interface for atomic-context callers (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (Steve Best) [RHEL-130025]
  - powercap: idle_inject: use us_to_ktime() where appropriate (Steve Best) [RHEL-130025]
  - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting (Jennifer Berringer) [RHEL-174305] {CVE-2026-23287}
  - irqchip/sifive-plic: Handle number of hardware interrupts correctly (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Fix call to __plic_toggle() in M-Mode code path (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Add support for UltraRISC DP1000 PLIC (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Cache the interrupt enable state (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Respect mask state when setting affinity (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Use for_each_present_cpu() instead of for_each_cpu() (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Make use of __assign_bit() (Jennifer Berringer) [RHEL-174305]
  - cache: sifive_ccache: Optimize cache flushes (Jennifer Berringer) [RHEL-174305]
  - PCI: starfive: Use regulator APIs to control the 3v3 power supply of PCIe slots (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Append JH-7110 SoC compatible to VisionFive 2 Lite eMMC board (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Append JH-7110 SoC compatible to VisionFive 2 Lite board (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Orange Pi RV (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add VisionFive 2 Lite eMMC board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add VisionFive 2 Lite board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add common board dtsi for VisionFive 2 Lite variants (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: Move out some nodes to the board dts (Jennifer Berringer) [RHEL-174305]
  - dts: starfive: jh7110-common: split out mmc0 reset pins from common into boards (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Milk-V Mars CM Lite system-on-module (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Milk-V Mars CM system-on-module (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add common board dtsi for Milk-V Mars CM variants (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop mmc post-power-on-delay-ms (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop no-mmc property from mmc1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: bootph-pre-ram hinting needed by boot loader (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: add DMC memory controller (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop no-sdio property from mmc1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add status power led node (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-milkv-mars sort properties (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: bootph-pre-ram hinting needed by boot loader (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add eeprom node to i2c5 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: qspi flash setting read-delay 2 cycles max 100MHz (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add CPU BUS PERH QSPI clocks to syscrg (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: use macros for MMC0 pins (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: fml13v01: enable USB 3.0 port (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-pine64-star64: enable USB 3.0 port (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: pciephy0 USB 3.0 configuration registers (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: fml13v01: enable pcie1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: remove non-existent dac from jh7110 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Unify regulator naming scheme (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-milkv-mars: enable usb0 host function (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-pine64-star64: enable usb0 host function (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add DeepComputing FML13V01 board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: move usb0 config to board dts (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: revised device node (Jennifer Berringer) [RHEL-174305]
  - redhat/configs: enable CONFIG_GPIO_NOVALAKE for x86 on RHEL (Steve Best) [RHEL-117349]
  - gpio: Add Intel Nova Lake ACPI GPIO events driver (Steve Best) [RHEL-117349]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-246.el10]
changelog:
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189498] {CVE-2026-43112}
  - objtool/x86: Reorder ORC register numbering (Yannick Cote) [RHEL-152190]
  - objtool: Support Clang RAX DRAP sequence (Yannick Cote) [RHEL-152190]
  - objtool/klp: Correlate locals to globals (Yannick Cote) [RHEL-152190]
  - objtool/klp: Match symbols based on demangled_name for global variables (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove .llvm suffix in demangle_name() (Yannick Cote) [RHEL-152190]
  - objtool/klp: Also demangle global objects (Yannick Cote) [RHEL-152190]
  - objtool/klp: Use sym->demangled_name for symbol_name hash (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove trailing '_' in demangle_name() (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove redundant strcmp() in correlate_symbols() (Yannick Cote) [RHEL-152190]
  - objtool: Use section/symbol type helpers (Yannick Cote) [RHEL-152190]
  - redhat/configs: disable CONFIG_INET_PSP on RHEL for now (Ivan Vecera) [RHEL-185448]
  - psp: strip variable-length PSP header in psp_dev_rcv() (Ivan Vecera) [RHEL-185448]
  - net: psp: require admin permission for dev-set and key-rotate (Ivan Vecera) [RHEL-185448]
  - net: psp: check for device unregister when creating assoc (Ivan Vecera) [RHEL-185448]
  - psp: add missing device stats to get-stats reply attributes (Ivan Vecera) [RHEL-185448]
  - psp: use sk->sk_hash in psp_write_headers() (Ivan Vecera) [RHEL-185448]
  - net: psp: select CONFIG_SKB_EXTENSIONS (Ivan Vecera) [RHEL-185448]
  - psp: Expand PSP acronym in INET_PSP help description (Ivan Vecera) [RHEL-185448]
  - psp: clarify checksum behavior of psp_dev_rcv() (Ivan Vecera) [RHEL-185448]
  - psp: don't use flags for checking sk_state (Ivan Vecera) [RHEL-185448]
  - psp: fix preemptive inet_twsk() cast in psp_sk_get_assoc_rcu() (Ivan Vecera) [RHEL-185448]
  - psp: make struct sock argument const in psp_sk_get_assoc_rcu() (Ivan Vecera) [RHEL-185448]
  - psp: add stats from psp spec to driver facing api (Ivan Vecera) [RHEL-185448]
  - psp: report basic stats from the core (Ivan Vecera) [RHEL-185448]
  - net: psp: don't assume reply skbs will have a socket (Ivan Vecera) [RHEL-185448]
  - psp: do not use sk_dst_get() in psp_dev_get_for_sock() (Ivan Vecera) [RHEL-185448]
  - psp: rename our psp_dev_destroy() (Ivan Vecera) [RHEL-185448]
  - psp: provide decapsulation and receive helper for drivers (Ivan Vecera) [RHEL-185448]
  - psp: provide encapsulation helper for drivers (Ivan Vecera) [RHEL-185448]
  - psp: track generations of device key (Ivan Vecera) [RHEL-185448]
  - net: psp: update the TCP MSS to reflect PSP packet overhead (Ivan Vecera) [RHEL-185448]
  - net: psp: add socket security association code (Ivan Vecera) [RHEL-185448]
  - net: tcp: allow tcp_timewait_sock to validate skbs before handing to device (Ivan Vecera) [RHEL-185448]
  - net: move sk_validate_xmit_skb() to net/core/dev.c (Ivan Vecera) [RHEL-185448]
  - psp: add op for rotation of device key (Ivan Vecera) [RHEL-185448]
  - tcp: add datapath logic for PSP with inline key exchange (Ivan Vecera) [RHEL-185448]
  - net: modify core data structures for PSP datapath support (Ivan Vecera) [RHEL-185448]
  - psp: base PSP device support (Ivan Vecera) [RHEL-185448]
  - psp: add documentation (Ivan Vecera) [RHEL-185448]
  - scsi: target: iscsi: Validate CHAP_R length before base64 decode (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: tcm_loop: Fix NULL ptr dereference (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: reject invalid size Extended CDB AHS (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Maurizio Lombardi) [RHEL-163760] {CVE-2026-46149}
  - scsi: target: tcm_loop: Drain commands in target_reset handler (Maurizio Lombardi) [RHEL-163760] {CVE-2026-43054}
  - scsi: target: Fix recursive locking in __configfs_open_file() (Maurizio Lombardi) [RHEL-163760] {CVE-2026-23292}
  - scsi: target: Reset t_task_cdb pointer in error case (Maurizio Lombardi) [RHEL-163760] {CVE-2025-68782}
  - scsi: target: Do not write NUL characters into ASCII configfs output (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Maurizio Lombardi) [RHEL-163760] {CVE-2025-68229}
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Maurizio Lombardi) [RHEL-163760] {CVE-2025-39998}
  - scsi: target: iscsi: fix typos and formatting in lio_target messages (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Use int type to store negative value (Maurizio Lombardi) [RHEL-163760]
  - arm64/simd: Add scoped guard API for kernel mode SIMD (CKI Backport Bot) [RHEL-180976]
  - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171143] {CVE-2026-31684}
  - exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case (Oleg Nesterov) [RHEL-95059]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-17
changelog:
  - Support storing of __crc_* symbols in sections other than .rodata.
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-19
changelog:
  - Capture local __crc_* symbols for "Provides: kernel()".
  - Add support for XZ compression for the symvers file.
  - Fix "Provides: kernel()" generation when both __kcrctab and __kcrctab_gpl
    are present.
  - Fix regression for "Provides:" generation in cases when modversions are stored
    in a section that is over 64K in size.
  - Speedup and cleanup changes in find-provides.ksyms and find-requires.ksyms.
  - Fix regex usage in kmod.attr. (Denys Vlasenko)
  - Implement modalias "Provides:" grouping. (Denys Vlasenko)
  - Speedup and cleanup changes in modalias.prov and kmod.attr. (Denys Vlasenko)


author: Denys Vlasenko <dvlasenk@redhat.com> - 1.0-28
changelog:
  - find-requires.ksyms: remove /tmp/{find-requires.ksyms,mod_req}.* temporary files
  - macros.kmp: do not run `rpm -qa`
    Resolves: RHEL-113056


author: keycloak-httpd-client-install fails to build with Python 3.12 - 1.1.14
changelog:
  - Resolves: rhbz#2155009 - keycloak-httpd-client-install fails to build with
    Python 3.12: ModuleNotFoundError: No module named 'distutils'


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Marek Safarik <msafarik@redhat.com> - 7.12.1-16
changelog:
  - Added manpages for keylime services and the tenant
  - Added support for ECC attestation
  - Fixed man page RST formatting for rst2man compatibility


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Julien Rische <jrische@redhat.com> - 1.21.3-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145356
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-145358
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145397


author: Julien Rische <jrische@redhat.com> - 1.21.3-11
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171587 RHEL-171595


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Mike FABIAN <mfabian@redhat.com> - 0.0.62-1
changelog:
  - Update to 0.0.62
  - Get translation changes from CLDR
  - Add more translations from CLDR
  - Add Norwegian keyboard layout to keyboards.xml
    (Resolves: https://github.com/mike-fabian/langtable/issues/16)
  - Add Hang script to Southern Aymara


author: Mike FABIAN <mfabian@redhat.com> - 0.0.63-1
changelog:
  - Update to 0.0.63
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Japanese: prefer anthy over kkc
    (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
  - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
    (Resolves: https://github.com/mike-fabian/langtable/issues/18)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.64-1
changelog:
  - Update to 0.0.64
  - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
    (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.65-1
changelog:
  - Update to 0.0.65
  - Add wuu, tok, glk, gbm, ssy
  - Remove aa_ER.UTF-8@saaho
  - Add kv_RU.UTF-8, chr_RU.UTF-8
  - Add EU, EZ
  - Improve README and Makefile (Resolves: https://github.com/mike-
    fabian/langtable/issues/19)
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 2.015-16
changelog:
  - Convert to new fonts packaging guidelines
  - Migrate to SPDX license expression
  - Drop very very old obsoletes for google-lato-fonts
  - Add gating CI tests in Fedora


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-20
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113472 - "cannot seek on data source" in TLS lftp sessions


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.9-1
changelog:
  - Rebase to libguestfs 1.59.9
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-13
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161334)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.0-1
changelog:
  - Rebase to 0.12.0
    Resolves: RHEL-133421, RHEL-70825, RHEL-130042
  - Add a Requires for crypto-policies instead of a Recommends
    Resolves: RHEL-139045


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-9
changelog:
  - backport documentation change for CVE-2023-52355 (RHEL-179103)
  - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.1-1
changelog:
  - Version 2.11.1 (RHEL-150897)
  - udiskslinuxnvmecontroller: Fix sanitize job start (RHEL-69113)
  - udiskslinuxpartitiontable: Fix missing job completion (RHEL-124987)
  - udiskslinuxdevice: multipath handling fixes (RHEL-128598)
  - lvm2: Prevent a segfault on discarded probe output (RHEL-138293)
  - udisksmodulemanager: Silence console warnings when requested module is not available (RHEL-144145)
  - tests: Make sure to load sr_mod for cdrom tests (RHEL-153132)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-74200, RHEL-80679, RHEL-104216, RHEL-104427, RHEL-113843
      RHEL-118671, RHEL-122751, RHEL-126854, RHEL-126945, RHEL-128105
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-104238)


author: Jiri Denemark <jdenemar@redhat.com> - 12.2.0-1
changelog:
  - Rebased to libvirt-12.2.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-147660
      RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832, RHEL-154252
      RHEL-154292, RHEL-154549, RHEL-156689, RHEL-156800, RHEL-156804
      RHEL-159134


author: Jiri Denemark <jdenemar@redhat.com> - 12.4.0-1
changelog:
  - Rebased to libvirt-12.4.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-145937
      RHEL-147660, RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832
      RHEL-154252, RHEL-154292, RHEL-154549, RHEL-155804, RHEL-155809
      RHEL-156689, RHEL-156800, RHEL-156804, RHEL-159134, RHEL-164023
      RHEL-169588, RHEL-170773, RHEL-170993, RHEL-174300, RHEL-176438


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-1
changelog:
  - Rebased to libvirt-12.5.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-180448, RHEL-181350, RHEL-185108, RHEL-186015, RHEL-187057


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Michal Ruprich <mruprich@redhat.com> - 2.1.148-4
changelog:
  - DoS or arbitrary code execution via maliciously crafted LYB binary blob
  - Resolves: RHEL-177026 - CVE-2026-44673


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-6
changelog:
  - add support for dropping root privileges (disabled by default) (RHEL-12183)
  - create linuxptp user and /run/ptp directory


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-9
changelog:
  - fix phc2sys service to allow clocks specified by interface (RHEL-165199)
  - fix high CPU usage by ptp4l when link is down (RHEL-173418)
  - fix phc2sys to not get stuck in static mode (RHEL-187951)


author: Brian C. Lane <bcl@redhat.com> 40.5.4-1
changelog:
  - tito: Add tito to container's test-packages (bcl)
    Related: RHEL-31830
  - creator: Fix pylint error in run_creator (bcl)
    Related: RHEL-31830
  - livemedia-creator: Check for BIOS vs. UEFI qemu support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Enable s390x virt support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Make use of virtio devices more generic (bcl)
    Related: RHEL-31830
  - Set requirement on lorax-templates-rhel for prefixdevname change (bcl)
    Related: RHEL-30010


author: Brian C. Lane <bcl@redhat.com> 40.5.5-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-35396
  - docs: Update livemedia-creator documentation for RHEL 10 (bcl)
    Related: RHEL-31853
  - livemedia-creator: The --make-tar option requires tar (bcl)
    Related: RHEL-31853
  - docs: Update example kickstarts for RHEL/CentOS (bcl)
    Resolves: RHEL-31853
  - lorax: Change default rootfs size to 3GiB (bcl)
    Resolves: RHEL-32504


author: Brian C. Lane <bcl@redhat.com> 40.5.6-1
changelog:
  - New lorax documentation - 40.5.6 (bcl)
    Related: RHEL-48606
  - ltmpl: Remove * from docstring (bcl)
    Related: RHEL-48606
  - docs: Update intersphinx and add _static dir (bcl)
    Related: RHEL-48606
  - docs: Document --rootfs-type options (bcl)
    Related: RHEL-48606
  - erofs: Use dedupe and all-fragments options (bcl)
    Related: RHEL-48606
  - imgutils: mkfs.erofs options should come first (bcl)
    Related: RHEL-48606
  - Accept but ignore the old --squashfs-only argument (awilliam)
    Related: RHEL-48606
  - Add compression.erofs section to lorax.conf (bcl)
    Resolves: RHEL-48606
  - Add erofs and erofs-ext4 support to --rootfs-type (bcl)
    Related: RHEL-48606
  - Replace squashfs_only with rootfs_type (bcl)
    Related: RHEL-48606
  - imgutils: Add mkerofs function and test (bcl)
    Related: RHEL-48606
  - runtime-postinstall: Make sure blacklist_exceptions has been removed (jstodola)
    Resolves: RHEL-53721


author: Brian C. Lane <bcl@redhat.com> 40.5.7-1
changelog:
  - templates: Sync template changes from lorax-templates-rhel (bcl)
    Resolves: RHEL-54713
  - tests: Add a test to make sure redhat-release-eula isn't included (bcl)
    Related: RHEL-54381


author: Brian C. Lane <bcl@redhat.com> 40.5.8-1
changelog:
  - tests: Fix mkksiso unit test (bcl)
    Related: RHEL-61778
  - pylint: Print astroid version (bcl)
    Related: RHEL-61778
  - Extend help for --updates and --ks parameters (jkonecny)
    Related: RHEL-61778
  - Fix --updates the updates image wasn't loaded (jkonecny)
    Resolves: RHEL-61778
  - Implement --replace also for S390 (sebastian.stark)
    Related: RHEL-61778
  - mkksiso: option --replace to replace arbitrary text in boot config.  (sebastian.stark)
    Related: RHEL-61778
  - livemedia: Add isomd5sum (bcl)
    Resolves: RHEL-58896


author: Brian C. Lane <bcl@redhat.com> 40.5.9-1
changelog:
  - tests: Swap nomodeset for inst.text in mkksiso test data (bcl)
    Related: RHEL-66603
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: RHEL-66603
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.10-1
changelog:
  - erofs: Change the erofs compression default to zstd (bcl)
    Related: RHEL-48606
  - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl)
    Related: RHEL-66603
  - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl)
    Related: RHEL-66603
  - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.11-1
changelog:
  - erofs: Make smaller lzma erofs images by default (bcl)
    Related: RHEL-48606
  - Revert "erofs: Change the erofs compression default to zstd" (bcl)
    Related: RHEL-48606


author: Brian C. Lane <bcl@redhat.com> 40.5.12-1
changelog:
  - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl)
    Resolves: RHEL-83202
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl)
    Resolves: RHEL-83519


author: Brian C. Lane <bcl@redhat.com> 40.5.14-1
changelog:
  - New lorax documentation - 40.5.14 (bcl)
    Related: RHEL-130954
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-126547
    Resolves: RHEL-130954
  - livemedia.ks: Increase size of root partition in example live kickstart (bcl)
    Resolves: RHEL-142732
  - executils: decoding after deserialization (oleg.sviridov)
    Resolves: RHEL-121650


author: Brian C. Lane <bcl@redhat.com> 40.5.15-1
changelog:
  - executils: Ignore utf-8 decode errors (bcl)
    Resolves: RHEL-121650
  - executils: Remove binary_output flag (bcl)
    Related: RHEL-121650
  - logging: Set encoding=UTF-8 on FileHandler (bcl)
    Related: RHEL-121650
  - executils: Set encoding to UTF-8 for _run_program (bcl)
    Related: RHEL-121650


author: Brian C. Lane <bcl@redhat.com> - 10.0-55
changelog:
  - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl)
    Related: RHEL-67586
  - tests: Fix the repos used for the test (bcl)
    Related: RHEL-67586
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-67586


author: Brian C. Lane <bcl@redhat.com> - 10.1-1
changelog:
  - Bump release version to 10.1 (bcl)
    Related: RHEL-91929
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91929


author: Brian C. Lane <bcl@redhat.com> - 10.1-3
changelog:
  - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk)
    Resolves: RHEL-102872
  - runtime-postinstall: allow pipewire to run as root (awilliam)
    Resolves: RHEL-102419
  - runtime-cleanup: Do not clean up rpm binaries (bcl)
    Resolves: RHEL-101695


author: Brian C. Lane <bcl@redhat.com> - 10.2-1
changelog:
  - Do not remove SELinux from the runtime (ppolawsk)
    Resolves: RHEL-126547
  - Bump release version to 10.2 (bcl)
    Related: RHEL-126547


author: Brian C. Lane <bcl@redhat.com> - 10.3-1
changelog:
  - Bump release version to 10.3 (bcl)
    Related: RHEL-163726
  - Add templates and subpackage for 64k flavor aarch64 kernel (bcl)
    Resolves: RHEL-163726


author: Brian C. Lane <bcl@redhat.com> - 10.0-50
changelog:
  - runtime-cleanup: Fix gshadow typo (bcl)
    Resolves: RHEL-35396
  - runtime-install: Add redhat-release-eula (bcl)
    Related: RHEL-35396
  - kernel: Keep nvram module (bcl)
    Resolves: RHEL-36443
  - kernel: Keep hid-multitouch module (bcl)
    Resolves: RHEL-49546


author: Brian C. Lane <bcl@redhat.com> - 10.0-53
changelog:
  - runtime-cleanup: fonttosfnt no longer installed (bcl)
    Resolves: RHEL-54717
  - Use the same page args in all the per-arch templates (bcl)
    Resolves: RHEL-54535
  - Remove manual /root/lorax-packages.log creation (bcl)
    Resolves: RHEL-54534
  - Remove libuser.conf (bcl)
    Resolves: RHEL-54533


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Koichiro Iwao <meta@almalinux.org> - 25.2.7-3.alma.3
changelog:
  - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in
    AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32)


author: Jocelyn Falempe <jfalempe@redhat.com> - 26.1.1-1
changelog:
  - update to 26.1.1
  - remove patches that are in upstream
  - remove vdpau
  - update version of dependencies
  - update rust libwrap filename


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57014 - Rebase qemu-ga to 9.1.0
  - RHEL-32297 - guest agent public ssh injection api support for Windows
  - RHEL-36718 - The version of mingw-qemu-ga-win doesn't match inside query and via command 'guest-info'
  - Set version to 109.1.0


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.0.0-1
changelog:
  - RHEL-83547 - Rebase mingw-qemu-ga-win to QEMU 10.0.0 
  - RHEL-96980 - mingw-qga: Drop mingw-pixman build deps
  - RHEL-98947 - [mingw-qemu-ga-win] MSI installer ignore VSS installation result 
  - RHEL-11824 - [QGA] VSS installation retry, if previously VSS service was not un-registered correctly


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.1.0-1
changelog:
  - RHEL-111001 Rebase mingw-qemu-ga-win to QEMU 10.1.0
  - RHEL-107458 [mingw-qemu-ga-win] QAPI error desc does not contain Windows error
  - RHEL-107446 QGA VSS wasn't removed if the QGA installation fail and quit
  - RHEL-107215 Fix don't daemonize before channel is initialized patch for Windows behavior


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.2.1-1
changelog:
  - RHEL-148234 Move CoInitialize/CoInitializeSecurity to main process thread 
  - RHEL-56925 Implement guest-network-get-route for Windows


author: Joe Orton <jorton@redhat.com> - 1.14.2-21
changelog:
  - restore plaintext password storage by default (per upstream)
  - restrict symbols exposed by DSOs built for httpd


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-3
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-4
changelog:
  - Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory
    Increase (CVE-2025-53020)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-5
changelog:
  - Resolves: RHEL-134484 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Josef Ridky <jridky@redhat.com> - 1:5.9.4-20
changelog:
  - revert default snmpd.conf change from -15 that restricted SNMP view
    to system MIB only, breaking third-party MIBs (RHEL-86820)


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-7
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
  - nfsrahead: zero-initialise device_info struct (RHEL-158528)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-6
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: pdancak <pdancak@redhat.com> - 2:1.26.3-7
changelog:
  - RHEL-159548 - CVE-2026-27654 nginx: NGINX: Denial of Service or file
    modification via buffer overflow in ngx_http_dav_module


author: pdancak <pdancak@redhat.com> - 2:1.26.3-8
changelog:
  - RHEL-159527 - CVE-2026-27784 nginx: NGINX: Denial of Service due to
    memory corruption via crafted MP4 file


author: pdancak <pdancak@redhat.com> - 2:1.26.3-9
changelog:
  - RHEL-159435 - CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: pdancak <pdancak@redhat.com> - 2:1.26.3-10
changelog:
  - RHEL-157876 CVE-2026-32647 nginx: NGINX: Denial of Service or Code
    Execution via specially crafted MP4 files


author: Jonathan Wright <jonathan@almalinux.org> - 2:1.26.3-10.alma.1
changelog:
  - AlmaLinux changes: Fix CVE-2026-42945 Buffer overrun in rewrite module
    via arguments in replacement strings


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-1417
  - alt-name: Remove alt-names when interface marked as absent. RHEL-126481
  - hsr: Automatically disable IP on hsr port. RHEL-100774
  - hsr: add support for configuring "interlink" property. RHEL-100766
  - Support referring alternative-name as port/parent/next-hop-interface.
    RHEL-126508
  - Support referring interface name using its alternative name. RHEL-126510


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.59-1
changelog:
  - Upgrade to 2.2.59
  - route: add support for lock-mtu option. RHEL-151844
  - iptunnel: introduce support for ipip/sit/ip6ip6/ipip6 tunnels. RHEL-79801
  - nm: Fix error when modify port list of down interface. RHEL-52334


author: Jan Vaclav <jvaclav@redhat.com> - 2.2.60-1
changelog:
  - Upgrade to 2.2.60
  - Add support for configuring ipip tunnel in nmstate RHEL-79801
  - Fix error when modify port list of down interface RHEL-52334
  - Add support for mtu-lock route option RHEL-151844
  - ipv4: Add new parameter prefix-route-metric RHEL-147209


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
changelog:
  - Update to version 22.22.2
  - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
  - disabled failing tests in nghttp2 due to newer version
  - patch for npm/braces CVE-2026-25547


author: Andrei Radchenko <aradchen@redhat.com> - 2023.10-11
changelog:
  - Add test case for symlinked dependencies bug fix
  - added test/symlinked scenario
  - verifies nodejs.req correctly generates requirements for symlinked deps
  - added mock 'external' packages to support this test


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Bob Relyea <rrelyea@redhat.com> - 3.124.0-1
changelog:
  - rebase to upstream NSS 3.124
  - backport ml-dsa support that is not upstream yet.
  - pick up in process patches upstream including eddsa


author: Bob Relyea <rrelyea@redhat.com> - 3.124.0-2
changelog:
  - rebase fixes
  - restore mlkem aliases
  - add mlkem key lengths to the mechanism info
  - fix crash if you try to encapsulate with an unimported
    public key
  - restore distrusted certs to certdata.txt even though we
    never reference them to make tests happy.


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Joseph Marrero <jmarrero@redhat.com> - 2.23.0-6
changelog:
  - Add RPM macros to configure %_passwd_path and %_group_path
  - Fixes user/group lookup for packages with non-root file ownership
  - See: https://github.com/rpm-software-management/rpm/pull/3672


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Jerry James <loganjerry@gmail.com> - 9-1
changelog:
  - Update OCaml native arches for OCaml 5.1
  - Remove the Python file and some macros (now in ocaml-rpm-macros)
  - Add %ocaml_pkg macro for common declarations


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Matthew Burket <mburket@redhat.com> - 1:1.4.3-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133978)
  - Add the ability to show rule details in output (RHEL-104651)


author: Matthew Burket <mburket@redhat.com> - 1:1.4.4-1
changelog:
  - Upgrade to the latest upstream release (RHEL-161763)
  - Fix Bash completion (RHEL-145121)
  - Add ability to list rules and variables in a profile by the "oscap info" command (RHEL-143569)


author: Packit <hello@packit.dev> - 0.2.5-1
changelog:
  - 0.2.5 (Jan Rodak)
  - Show referenced OVAL State (Jan Rodak)
  - Parse reference in filter (Jan Rodak)
  - Show OVAL Variables and referenced OVAL endpoints in report (Jan Rodak)
  - Remove UUID from headings (Jan Rodak)
  - Move function (Jan Rodak)
  - Display in report OVAL object that references to other OVAL Objects (Jan Rodak)
  - Resolve parsing of referenced OVAL Objects and OVAL Variables (Jan Rodak)
  - Add OVAL Variable structure and parser (Jan Rodak)
  - Rework OVAL Object and State (Jan Rodak)
  - Parse mapping between OVAL var and values and propagate them (Jan Rodak)
  - Remove namesapace for attributes (Jan Rodak)
  - Show OVAL states in report (Jan Rodak)
  - Parse attributes of elements in OVAL state and Parse all OVAL states in OVAL test (Jan Rodak)
  - Show OVAL objects in report (Jan Rodak)
  - Parse attributes of elements in OVAL object (Jan Rodak)
  - Removing the processing of collected objects (Jan Rodak)
  - Use an empty string instead of None when the text of the set-value element is empty (Jan Rodak)
  - Fix deprecation warning (Jan Rodak)
  - Remove product detection from the tmt plan (Jan Rodak)
  - Increase vm memory (Jan Rodak)
  - Add python3 dependency (Jan Rodak)
  - Adjust the build of content (Jan Rodak)
  - Automatic product detection to build content by CPE identifier (Jan Rodak)
  - Remove whitespaces (Jan Rodak)
  - Show explanation of score computation in report (Jan Rodak)
  - Add explanation of score computation (Jan Rodak)
  - Parse system attribute from score element (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.6-1
changelog:
  - 0.2.6 (Jan Rodak)
  - Extend the condition to account empty strings in href (Jan Černý)
  - Add comments for the pylint tool (Jan Černý)
  - Add special classes to table element (Jan Černý)
  - Account for missing reference href attribute (Jan Černý)
  - Add pragmas to avoid PEP8 warnings (Jan Černý)
  - Present references in a table (Jan Černý)
  - Collapse CPE tree when is true (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add titles (Jan Rodak)
  - Fix performace of generation of graphs (Jan Rodak)
  - Rearrange fields of rule detail and OVAL definition detail (Jan Rodak)
  - Fix bugs in html (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.7-1
changelog:
  - 0.2.7 (Jan Rodak)
  - Add tool tip to search bar (Jan Rodak)
  - Enable search by reference (Jan Rodak)
  - Add generation search infromation (Jan Rodak)
  - Use macro for generation of list items (Jan Rodak)
  - Create two-tier display of Evaluation Characteristics (Jan Rodak)
  - Add title (Jan Rodak)
  - Reduce complexity of function generate_referenced_endpoints (Jan Rodak)
  - Use default dict (Jan Rodak)
  - Fix JSON schema (Jan Rodak)
  - Use correct orthography of addresses types acronyms (Jan Rodak)
  - Add function to update known references (Jan Rodak)
  - Change the presentation of referenced endpoints (Jan Rodak)
  - Add new elements (Jan Rodak)
  - Add onclick function (Jan Rodak)
  - Add map of OVAL endpoints (Jan Rodak)
  - Add target addresses to report (Jan Rodak)
  - Add target addresses to model (Jan Rodak)
  - Fix width of pre element (Jan Rodak)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-21
changelog:
  - Implement obtaining Kerberos tickets on behalf of user on SSH authentication
    Resolves: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
changelog:
  - Remove recommendation of p11-kit
    Resolves: RHEL-139070
  - Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
    in sshd_config should count when defined multiple times
    Resolves: RHEL-150365
  - Fix mistracking of MaxStartups process exits in some situations
    Resolves: RHEL-121768
  - Fix GSSAPI authentication indicator issues found by AI
    Resolves: RHEL-154309
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155813


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
changelog:
  - Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
    Resolves: RHEL-88565
  - Fix duplicate audit log entry when destroying ed25519 private keys
    Resolves: RHEL-46782
  - Fix typo in GSSAPIProxyS4U2Services
    Related: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-25
changelog:
  - Fix static analysis issues
    Resolves: RHEL-163365
  - Ssh should refuse connection when mlkem kex is specified in FIPS
    Resolves: RHEL-155178
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164740
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166239
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166223
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166191
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166207


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-26
changelog:
  - Improve keytab detection when obtaining Kerberos tickets on behalf of user on SSH authentication
    Related: RHEL-92932
  - Add missing NULL check for server key generation in ML-KEM hybrids
    Resolves: RHEL-168106


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-122599
    Resolves: RHEL-141987
    Resolves: RHEL-142009
    Resolves: RHEL-142022
    Resolves: RHEL-142026
    Resolves: RHEL-142030
    Resolves: RHEL-142034
    Resolves: RHEL-142038
    Resolves: RHEL-142042
    Resolves: RHEL-142046
    Resolves: RHEL-142050
    Resolves: RHEL-142054


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.7-1
changelog:
  - Rebase to OpenSSL 3.5.7
    Resolves: RHEL-179698
    Resolves: RHEL-179694
    Resolves: RHEL-179690
    Resolves: RHEL-179686
    Resolves: RHEL-179673
    Resolves: RHEL-179659
    Resolves: RHEL-179624
    Resolves: RHEL-179554
    Resolves: RHEL-179549
    Resolves: RHEL-179546
    Resolves: RHEL-179541
    Resolves: RHEL-179538
    Resolves: RHEL-179279
    Resolves: RHEL-179271


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Fix reversion of previous dependency updates post golang update
    Resolves: RHEL-79109


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify pre-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-76915


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-84025


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Update addresses CVE-2025-29786
    Resolves: RHEL-84153


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-84160


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-9
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85035


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90009


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0 Add systemd-journal group to Requires Bump go-
    tpm-keyfiles Resolves: RHEL-119363


author: Kseniia Nivnia <knivnia@redhat.com> - 0.144.0-2
changelog:
  - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3
  - Addresses: CVE-2026-25679, CVE-2026-33186, CVE-2026-34986,
    CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810


author: Kseniia Nivnia <knivnia@redhat.com> - 0.152.1-1
changelog:
  - Update to v0.152.1
  - Addresses CVE-2026-39821, CVE-2026-42154, CVE-2026-33811, CVE-2026-42151,
    CVE-2026-27145, CVE-2026-25681, CVE-2026-27136


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.5.3-2
changelog:
  - We run tests with specially crafted OpenSSL configuration, not the system one
    Resolves: RHEL-25983


author: Lukas Tyrychtr <ltyrycht@redhat.com> - 46.1-2
changelog:
  - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Backport announcing error-message relation announcement in non-web contexts from 49
    Resolves: RHEL-132453


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Chris Lumens <clumens@redhat.com> - 3.0.1-4
changelog:
  - Fix promoting instances of a cloned resource
  - Handle large timeouts correctly in crm_resource --wait
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-120932
  - Resolves: RHEL-86148
  - Resolves: RHEL-114895


author: Chris Lumens <clumens@redhat.com> - 3.0.2-1
changelog:
  - Rebase on upstream 3.0.2-rc2
  - Don't hang waiting on certain pending monitor actions
  - Resolves: RHEL-78393


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-8
changelog:
  - Make sure redhat-package-notes spec is skipped if _package_note_flags is
    undefined (rbhz#2184553)


author: Sudip Shil <sshil@redhat.com> - 6.0-7
changelog:
  - Convert to new fonts packaging guidelines and SPDX license
  - Update the fonts package
  - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.018-1
changelog:
  - Update to 0.018
    - Fix version requirement for CPAN::Meta::Prereqs
    - Move issue tracker to GitHub


author: Paul Howarth <paul@city-fan.org> - 2.143-1
changelog:
  - Update to 2.143 (rhbz#2216187)
    - Fix regression with implicit minimum value and multiple requirements (GH#38)
  - Don't package perlcritic.rc


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.114-1
changelog:
  - Update to 0.114
    - Data::OptList now requires perl v5.12.0
    - Tests no longer add "-T" to shebang, so do not invoke taint mode


author: Packit <hello@packit.dev> - 6.93-1
changelog:
  - Release: v6.93 (Sullivan Beck)
  - Checkpoint: v6.93 (Sullivan Beck)
  - Remove Travis (Sullivan Beck)
  - Initial checkin of next release cycle: 6.93 (Sullivan Beck)


author: Paul Howarth <paul@city-fan.org> - 1.006000-1
changelog:
  - Update to 1.006000
    - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var
      module
    - Refactored the Perl 5.37.2+ lexical exporter support


author: Paul Howarth <paul@city-fan.org> - 1.006001-1
changelog:
  - Update to 1.006001
    Documentation
    - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual
    Packaging
    - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl


author: Paul Howarth <paul@city-fan.org> - 1.006002-1
changelog:
  - Update to 1.006002
    Documentation
    - Link to Exporter::Almighty in pod
    - Update copyright dates
    Packaging
    - Set homepage in metadata to https://exportertiny.github.io


author: Michal Josef Špaček <mspacek@redhat.com> - 6.01-34
changelog:
  - Package tests
  - Patch for remove warning in test
  - Simplify build and install phases
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 2.205-1
changelog:
  - Update to 2.205
    - Add perl 5.38 to CI matrix
    - Add on workflow_dispatch
    - Add some OO examples


author: Paul Howarth <paul@city-fan.org> - 4.09-1
changelog:
  - Update to 4.09
    - Updated backportPP with JSON::PP 4.11
    - Fix a test to pass under perl with core bool support


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 2:0.42.34-1
changelog:
  - 0.4234 bump
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Michal Josef Špaček <mspacek@redhat.com> - 6.0.1-42
changelog:
  - Add patch to add tests for other USM scenarios
  - Add patch to rewrite from Digest::SHA1 to Digest::SHA
  - Add patch to rewrite usage of HMAC with same dependencies
  - Add patch to split test files for better readability
  - Improve patch for switch from Socket6 to Socket
  - Package tests
  - Rename patch to better name with source dist version


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Michal Josef Špaček <mspacek@redhat.com> - 2.014-9
changelog:
  - Fix running of tests in perl-Net-Server-tests subpackage
    Resolves: RHEL-65278
  - Sync OpenSSL Engine patch with upstream


author: Paul Howarth <paul@city-fan.org> - 0.104003-1
changelog:
  - Update to 0.104003 (rhbz#2208530)
    - Add Artistic 1.0 Perl license and make Perl license use it
    - Remove extra "59" from LGPL-2.1
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.104004-1
changelog:
  - Update to 0.104004 (rhbz#2209461)
    - Rename Perl Artistic License to avoid confusion in detecting license


author: Paul Howarth <paul@city-fan.org> - 0.991-1
changelog:
  - Update to 0.991
    - Make the requirement for perl v5.12.0 explicit; previously, it was only
      implicit because of prerequisites


author: Paul Howarth <paul@city-fan.org> - 0.929-1
changelog:
  - Update to 0.929 (rhbz#2157199)
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Use %license
  - Fix permissions verbosely
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2255994)
    - Update docs to recommend YAML::PP
  - Package description updated as per upstream documentation


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 1:1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Alex Laurie <alex.r.laurie@gmail.com> - 24.004.60-13.alma.1
changelog:
  - Almalinux change: Add in the symlink for fedora-gdm-logo.png to
    watermark.png in the spinner theme directory to ensure the AlmaLinux
    watermark is displayed in plymouth.


author: Alex Laurie <alex.r.laurie@gmail.com> - 24.004.60-16.alma.1
changelog:
  - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm-
    logo.png to watermark.png in the spinner theme directory to ensure the
    AlmaLinux watermark is displayed in plymouth.


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Marek Kasik <mkasik@redhat.com> - 24.02.0-9
changelog:
  - Revert previous commit as it is incomplete yet
  - and other fixes need to go in
  - Reverts: RHEL-145379


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-138726


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-10
changelog:
  - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
    Resolves: RHEL-176547


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Than Ngo <than@redhat.com> - 1.3.11-4
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  - Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.12-7
changelog:
  - Add, multipath - drmgr support
  - Fix, SMT state is not honored when new CPUs are added dynamically
  Resolves: RHEL-62938


author: Than Ngo <than@redhat.com> - 2.7.10-1
changelog:
  - Update to 2.7.10
    * Aadd support for multiple platform dumps
    * Add support for light path diagnostics for rtas events
    * Enable correct display of model and system-id for IPS Power systems
    * Fix call home feature for nvmf devices
    * Fix crash in rtas_errd due to invalid -f option values
    * Fix build warnings with GCC-15
  Resolves: RHEL-65188


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Brian C. Lane <bcl@redhat.com> - 3.52.4-1
changelog:
  - timezone: Remove the --isUtc, --nontp, and --ntpserver arguments (bcl)
    Related: RHEL-34009
  - packages: Remove the old camel case arguments on RHEL10 (bcl)
    Resolves: RHEL-34009
  - nvdimm: Remove support for the nvdimm command on RHEL10 (bcl)
    Related: RHEL-34009


author: Brian C. Lane <bcl@redhat.com> - 3.52.6-1
changelog:
  - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl)
    Related: RHEL-61426
  - workflow: Use python 3.12.7 for testing (bcl)
    Related: RHEL-61426
  - options: adjust to behavior change in upstream _parse_optional (awilliam)
    Resolves: RHEL-61426


author: Brian C. Lane <bcl@redhat.com> - 3.52.7-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61435


author: Brian C. Lane <bcl@redhat.com> - 3.52.8-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61435
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76502


author: Brian C. Lane <bcl@redhat.com> - 3.52.9-1
changelog:
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-80086
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-80086


author: Brian C. Lane <bcl@redhat.com> - 3.52.10-1
changelog:
  - pylint: Ignore files in .git (bcl)
    Related: RHEL-96217
  - Add support for RDP (jkonecny)
    Resolves: RHEL-96217


author: Brian C. Lane <bcl@redhat.com> - 3.52.11-1
changelog:
  - Add support for new bootc kickstart command (ppolawsk)
    Resolves: RHEL-132612
    Related: RHEL-58215


author: Brian C. Lane <bcl@redhat.com> - 3.52.12-1
changelog:
  - rhsm: Add Flatpak registry option for RHEL10 (bciconel)
    Resolves: RHEL-132652
    Related: RHEL-132663


author: Brian C. Lane <bcl@redhat.com> - 3.52.13-1
changelog:
  - Add --type option to %certificate section (rvykydal)
    Resolves: RHEL-181666
  - Update the %certificate section documentation (rvykydal)
    Related: RHEL-181666


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Miro Hrončok <mhroncok@redhat.com> - 3.12-11
changelog:
  - %python_extras_subpkg: Add -v option to specify the required version(-release)
  - This is useful when the extras are built from a different specfile (e.g. in EPEL for a RHEL base package)
  - Resolves: RHEL-117448


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-10
changelog:
  - Don't assume %_smp_mflags only ever contains -jX, use -j%_smp_build_ncpus directly
  - Fixes: rhbz#2179149


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat
  Related: RHEL-167886, RHEL-168120


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-167886, RHEL-168120


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Vendula Poncova <vponcova@redhat.com> - 1.7-1
changelog:
  - CI: Use dnf instead of yum to install CentOS packages (vponcova)
  - Documentation: Improve the installation instruction (vponcova)
  - Remove untracked files from the git repository interactively (vponcova)
  - UnixFD: Document the support for Unix file descriptors (vponcova)
  - Documentation: Clean up examples in the documentation (vponcova)
  - Documentation: Simplify the README.md file (vponcova)
  - Documentation: Fix bullet point lists (vponcova)
  - Documentation: Simplify the hostname example (vponcova)
  - CI: Run tests for all supported Python version (vponcova)
  - UnixFD: Handle DBus signals with Unix file descriptors (vponcova)
  - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova)
  - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova)
  - UnixFD: Process results of client calls in the low-level library (vponcova)
  - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova)
  - CI: Always pull the latest container image (vponcova)
  - CI: Disable the unhashable-member warning (vponcova)
  - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova)
  - UnixFD: Move the unit tests to a new file (vponcova)
  - UnixFD: Manage the testing bus on set up and tear down (vponcova)
  - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova)
  - UnixFD: Create a new testing DBus interface (vponcova)
  - UnixFD: Fix the indentation in unit tests (vponcova)
  - Add unit tests for variants with variant types (vponcova)
  - Simplify the code for replacing values of the UnixFD type (vponcova)
  - Add classes for unpacking and unwrapping a variant (vponcova)
  - Don't use pylint from pip on Fedora Rawhide (vponcova)
  - UnixFD: Rename a parameter to server_arguments (vponcova)
  - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova)
  - Raise TimeoutError if a DBus call times out (vponcova)
  - Fix pylint tests in CentOS Stream 8 (vponcova)
  - Fix the ENV instruction in Dockerfiles (vponcova)
  - Fix pylint issues (vponcova)
  - run forked tests using subprocess, instead of multiprocessing (wdouglass)
  - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass)
  - Add test case for method call only returning fd (jlyda)
  - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda)
  - fix some lint discovered errors (wdouglass)
  - seperate unixfd functionality, to better support systems that don't have them (wdouglass)
  - Remove note in documentation about unsupported Unix file descriptors (wdouglass)
  - Add a test for UnixFD transfer (wdouglass)
  - Allow UnixFDs to be replaced and passed into Gio (wdouglass)
  - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo)
  - Extend the .coveragerc file (vponcova)
  - Disable builds for Fedora ELN on commits (vponcova)
  - Test Debian with Travis (vponcova)
  - Test Ubuntu with Travis (vponcova)
  - Test CentOS Stream 9 with Travis (vponcova)
  - Use CentOS Stream 8 for testing (vponcova)
  - add remove dbus object function on bus and update tests (matthewcaswell)
  - properly measure coverage across multiprocess test cases (wdouglass)
  - Move handle typing tests into a new class (and a new file) (wdouglass)
  - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass)
  - Add functions for generating/consuming fdlists with variants (wdouglass)
  - Provide a language argument for the code blocks (seahawk1986)
  - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass)
  - Allow to run tests in a container (vponcova)
  - Add C0209 to the ignore list for pylint (tjoslin)
  - Use the latest distro in Travis CI (vponcova)
  - Always update the container (vponcova)
  - Document limitations of the DBus specification generator (vponcova)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Evan Goode <egoode@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 (RHEL-38831)
  - Added pre-transaction plugin
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
    (RHEL-35577)


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: RHEL-113652
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: RHEL-113656


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Martin Kolman <mkolman@redhat.com> - 0.51-1
changelog:
  - SPDX compatible License: line (mkolman)
  - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com)
  - Improve formatting and data in setup.py (vslavik)


author: John Eckersberg <jeckersb@redhat.com> - 0.10.1-1
changelog:
  - New upstream release 0.10.1 (rhbz#2256342)
  - Remove patch for Python 3.13 compatibility (merged upstream in 0.10.0)
  - Add new depencency on furo
  - Include missing THANKS file (https://github.com/netaddr/netaddr/pull/345)


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Simon Pichugin <spichugi@redhat.com> - 0.6.3-1
changelog:
  - Update to 0.6.3
  - Added nesting depth limit to ASN.1 decoder (CVE-2026-30922)
  - Resolves: RHEL-170609


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <mhroncok@redhat.com> - 14-3
changelog:
  - Avoid needless pkg_resources import in pythonbundles.py
  - Ignore environment markers in pythonbundles.py


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Jiri Konecny <jkonecny@redhat.com> - 1.9.0-5
changelog:
  - Migrate to SPDX license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#Detailed_Description


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-168121, RHEL-167887


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-168121, RHEL-167887


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-176147


author: Python Maint <python-maint@redhat.com> - 1.1.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haïkel Guémar <hguemar@fedoraproject.org>
        Iryna Shcherbina <ishcherb@redhat.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumír Balhar <lbalhar@redhat.com>
        Michal Schorm <mschorm@redhat.com>
        Miro Hrončok <mhroncok@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-29
changelog:
  - Initial package
  Fedora contributions by:
      Dennis Gilmore <dennis@ausil.us>
      Bill Nottingham <notting@fedoraproject.org>
      Charalampos Stratakis <cstratak@redhat.com>
      Christian Heimes <cheimes@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jesse Keating <jkeating@fedoraproject.org>
      Miro Hrončok <miro@hroncok.cz>
      Orion Poplawski <orion@cora.nwra.com>
      Patrik Kopkan <pkopkan@redhat.com>
      Rob Crittenden <rcritten@redhat.com>
      Robert Kuska <rkuska@redhat.com>
      Slavek Kabrda <bkabrda@redhat.com>
      Stephen Gallagher <sgallagh@redhat.com>
      Thomas Spura <tomspur@fedoraproject.org>
      Tom Callaway <spot@fedoraproject.org>
      Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11^20251221git9d7c400-1
changelog:
  - Update to the latest and last upstream commit
  - The project won't have any new releases
  - Use modern pyproject macros
  Related: RHEL-120807


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37
  - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.6.3-2
changelog:
  - Security fix for CVE-2026-44431 and CVE-2026-44432
  - Resolves: RHEL-184903
  - Resolves: RHEL-185128


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-10
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142]
  - Resolves: RHEL-108142
    (QEMU crashes when stopping source VM during live migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-11
changelog:
  - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-126707]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028]
  - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853]
  - Resolves: RHEL-126707
    ([qemu, rhel-10] increase default TSEG size)
  - Resolves: RHEL-139028
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2])
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-12
changelog:
  - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118]
  - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118]
  - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118]
  - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118]
  - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118]
  - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785]
  - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785]
  - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785]
  - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785]
  - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785]
  - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785]
  - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785]
  - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785]
  - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-net-implement-tunnel-probing.patch [RHEL-143785]
  - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785]
  - Resolves: RHEL-79118
    ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10])
  - Resolves: RHEL-143785
    (backport support for GSO over UDP tunnel offload)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425]
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749]
  - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584]
  - Resolves: RHEL-147425
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-132749
    (Migrate SCSI PR state and preempt reservation upon live migration)
  - Resolves: RHEL-134989
    (Hotplugged interface device can not be shown in the guest)
  - Resolves: RHEL-146584
    ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-14
changelog:
  - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
  - Resolves: RHEL-153058
    (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
  - Resolves: RHEL-144004
    ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-15
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
  - Resolves: RHEL-155601
    (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-16
changelog:
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
  - Resolves: RHEL-158224
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-17
changelog:
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-114231]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-114231]
  - Resolves: RHEL-114231
    (Add stats-intervals support to --blockdev)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-18
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-158212]
  - kvm-hw-tpm-Factor-tpm_ppi_enabled-out.patch [RHEL-112608]
  - kvm-hw-tpm-Add-TPMIfClass-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Remove-CRBState-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Propagate-ppi_enabled-to-tpm_tis_reset-and-re.patch [RHEL-112608]
  - kvm-hw-tpm-Simplify-tpm_ppi_enabled.patch [RHEL-112608]
  - kvm-docs-specs-tpm-document-PPI-support-on-ARM64-virt.patch [RHEL-112608]
  - kvm-hw-acpi-tpm-parameterize-PPI-base-address-in-tpm_bui.patch [RHEL-112608]
  - kvm-hw-tpm-add-PPI-support-to-tpm-tis-device-for-ARM64-v.patch [RHEL-112608]
  - Resolves: RHEL-158212
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.3])
  - Resolves: RHEL-112608
    ([ARM64] Windows 11 VM should install without TPM Bypass)


author: Eduard Abdullin <eabdullin@almalinux.org> - 18:10.1.0-18.alma.1
changelog:
  - Enable QXL device build
  - Enable building for ppc64le
  - Re-added Spice support
  - Don't remove slof.bin for ppc64le


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-19
changelog:
  - kvm-vmstate-Introduce-VMSTATE_VARRAY_INT32_ALLOC.patch [RHEL-174858]
  - kvm-target-arm-Move-compare_u64-to-helper.c.patch [RHEL-174858]
  - kvm-target-arm-Convert-init_cpreg_list-to-g_hash_table_f.patch [RHEL-174858]
  - kvm-target-arm-machine-Use-VMSTATE_VARRAY_INT32_ALLOC-fo.patch [RHEL-174858]
  - kvm-target-arm-kvm-Export-kvm_print_register_name.patch [RHEL-174858]
  - kvm-target-arm-kvm-Tweak-print_register_name-for-arm64-s.patch [RHEL-174858]
  - kvm-target-arm-machine-Trace-cpreg-names-which-do-not-ma.patch [RHEL-174858]
  - kvm-target-arm-machine-Trace-all-register-mismatches.patch [RHEL-174858]
  - kvm-target-arm-machine-Fix-detection-of-unknown-incoming.patch [RHEL-174858]
  - kvm-target-arm-cpu-Introduce-the-infrastructure-for-cpre.patch [RHEL-174858]
  - kvm-target-arm-machine-Handle-ToleranceNotOnBothEnds-mig.patch [RHEL-174858]
  - kvm-target-arm-machine-Handle-ToleranceOnlySrcTestValue-.patch [RHEL-174858]
  - kvm-target-arm-cpu64-Mitigate-migration-failures-due-to-.patch [RHEL-174858]
  - kvm-target-arm-cpu64-Define-cpreg-migration-tolerance-fo.patch [RHEL-174858]
  - kvm-target-arm-helper-Define-cpreg-migration-tolerance-f.patch [RHEL-174858]
  - kvm-Revert-target-arm-Reinstate-bogus-AArch32-DBGDTRTX-r.patch [RHEL-174858]
  - kvm-hw-pci-host-gpex-acpi-Fix-_DSM-function-0-support-re.patch [RHEL-138494]
  - kvm-vfio-scsi-ui-Error-check-qio_channel_socket_connect_.patch [RHEL-138494]
  - kvm-vfio-igd-Enable-quirks-when-IGD-is-not-the-primary-d.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-amd-xgbe-device.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-calxeda-xgmac-device.patch [RHEL-138494]
  - kvm-hw-arm-virt-Include-system-system.h.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-platform.patch [RHEL-138494]
  - kvm-vfio-Move-vfio-region.h-under-hw-vfio.patch [RHEL-138494]
  - kvm-vfio-container-set-error-on-cpr-failure.patch [RHEL-138494]
  - kvm-vfio-Report-an-error-when-the-dma_max_mappings-limit.patch [RHEL-138494]
  - kvm-hw-vfio-user-add-x-pci-class-code.patch [RHEL-138494]
  - kvm-vfio-Introduce-helper-vfio_pci_from_vfio_device.patch [RHEL-138494]
  - kvm-vfio-vfio-container-base.h-update-VFIOContainerBase-.patch [RHEL-138494]
  - kvm-vfio-vfio-container.h-update-VFIOContainer-declarati.patch [RHEL-138494]
  - kvm-hw-vfio-cpr-legacy.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-hw-vfio-container.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-spapr.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-vfio-container.h-rename-VFIOContainer-bcontaine.patch [RHEL-138494]
  - kvm-vfio-user-container.h-update-VFIOUserContainer-decla.patch [RHEL-138494]
  - kvm-vfio-container.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-container.h-rename-VFIOUserContainer-bcont.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-update-VFIOUserPCIDevice-declaration.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-VFIOUserPCIDevice-device-fiel.patch [RHEL-138494]
  - kvm-vfio-pci.h-update-VFIOPCIDevice-declaration.patch [RHEL-138494]
  - kvm-vfio-pci.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-pci-quirks.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-cpr.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-igd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-use-QOM-casts-where-appropriate2.patch [RHEL-138494]
  - kvm-vfio-pci.h-rename-VFIOPCIDevice-pdev-field-to-parent.patch [RHEL-138494]
  - kvm-treewide-handle-result-of-qio_channel_set_blocking.patch [RHEL-138494]
  - kvm-vfio-pci-Do-not-unparent-in-instance_finalize.patch [RHEL-138494]
  - kvm-vfio-Do-not-unparent-in-instance_finalize.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container.h-rename-VFIOContaine.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container-base.h-rename-VFIOCon.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container.h-rename-file-to-vfio.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container-base.h-rename-file-to.patch [RHEL-138494]
  - kvm-hw-vfio-container.c-rename-file-to-container-legacy..patch [RHEL-138494]
  - kvm-hw-vfio-container-base.c-rename-file-to-container.c.patch [RHEL-138494]
  - kvm-vfio-iommufd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-cpr-iommufd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-vfio-iommufd.h-rename-VFIOContainer-bcontainer-.patch [RHEL-138494]
  - kvm-vfio-spapr.c-use-QOM-casts-where-appropriate2.patch [RHEL-138494]
  - kvm-vfio-spapr.c-rename-VFIOContainer-bcontainer-field-t.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_instance_init-to-vfio_pci_ini.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_instance_finalize-to-vfio_pci.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_class_init-to-vfio_pc.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_info-to-vfio_pci_info.patch [RHEL-138494]
  - kvm-s390x-s390-pci-vfio.c-use-QOM-casts-where-appropriat.patch [RHEL-138494]
  - kvm-hw-vfio-types.h-rename-TYPE_VFIO_PCI_BASE-to-TYPE_VF.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_base_dev_class_init-to-vf.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_base_dev_info-to-vfio_pci.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_properties-to-vfio_pc.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_nohotplug_properties-.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_nohotplug_dev_class_init-.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_nohotplug_dev_info-to-vfi.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_class_init-.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_properties-.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_instance_init-to-vf.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_instance_finalize-t.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_info-to-vfi.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-device.h-fix-include-header-gua.patch [RHEL-138494]
  - kvm-vfio-Remove-workaround-for-kernel-DMA-unmap-overflow.patch [RHEL-138494]
  - kvm-system-iommufd-Use-uint64_t-type-for-IOVA-mapping-si.patch [RHEL-138494]
  - kvm-hw-vfio-Reorder-vfio_container_query_dirty_bitmap-tr.patch [RHEL-138494]
  - kvm-hw-vfio-Avoid-ram_addr_t-in-vfio_container_query_dir.patch [RHEL-138494]
  - kvm-hw-vfio-Use-uint64_t-for-IOVA-mapping-size-in-vfio_c.patch [RHEL-138494]
  - kvm-migration-push-Error-errp-into-vmstate_subsection_lo.patch [RHEL-138494]
  - kvm-migration-push-Error-errp-into-vmstate_load_state.patch [RHEL-138494]
  - kvm-migration-Remove-error-variant-of-vmstate_save_state.patch [RHEL-138494]
  - kvm-migration-multi-mode-notifier.patch [RHEL-138494]
  - kvm-migration-add-cpr_walk_fd.patch [RHEL-138494]
  - kvm-oslib-qemu_clear_cloexec.patch [RHEL-138494]
  - kvm-migration-cpr-exec-command-parameter.patch [RHEL-138494]
  - kvm-migration-cpr-exec-save-and-load.patch [RHEL-138494]
  - kvm-migration-cpr-exec-mode.patch [RHEL-138494]
  - kvm-migration-cpr-exec-docs.patch [RHEL-138494]
  - kvm-vfio-cpr-exec-mode.patch [RHEL-138494]
  - kvm-hw-vfio-listener-Include-missing-exec-target_page.h-.patch [RHEL-138494]
  - kvm-hw-Remove-unnecessary-system-ram_addr.h-header.patch [RHEL-138494]
  - kvm-vfio-container-Remap-only-populated-parts-in-a-secti.patch [RHEL-138494]
  - kvm-vfio-cpr-legacy-drop-an-erroneous-assert.patch [RHEL-138494]
  - kvm-vfio-iommufd-Set-cpr.ioas_id-on-source-side-for-CPR-.patch [RHEL-138494]
  - kvm-vfio-iommufd-Restore-vbasedev-s-reference-to-hwpt-af.patch [RHEL-138494]
  - kvm-vfio-container-Support-unmap-all-in-one-ioctl.patch [RHEL-138494]
  - kvm-vfio-iommufd-Support-unmap-all-in-one-ioctl.patch [RHEL-138494]
  - kvm-vfio-listener-Add-an-assertion-for-unmap_all.patch [RHEL-138494]
  - kvm-vfio-Clean-up-includes.patch [RHEL-138494]
  - kvm-migration-set-correct-list-pointer-when-removing-not.patch [RHEL-138494]
  - kvm-vfio-user-simplify-vfio_user_process.patch [RHEL-138494]
  - kvm-vfio-user-clarify-partial-message-handling.patch [RHEL-138494]
  - kvm-vfio-user-refactor-out-header-handling.patch [RHEL-138494]
  - kvm-vfio-user-simplify-vfio_user_recv_one.patch [RHEL-138494]
  - kvm-vfio-user-recycle-msg-on-failure.patch [RHEL-138494]
  - kvm-include-hw-hyperv-Remove-unused-struct-mshv_vp_regis.patch [RHEL-138494]
  - kvm-linux-headers-Update-to-Linux-v6.18-rc3.patch [RHEL-138494]
  - kvm-linux-headers-Update-to-Linux-v6.19-rc1.patch [RHEL-138494]
  - kvm-hw-vfio-Add-helper-to-retrieve-device-feature.patch [RHEL-138494]
  - kvm-hw-vfio-region-Create-dmabuf-for-PCI-BAR-per-region.patch [RHEL-138494]
  - Resolves: RHEL-174858
    ([rhel10] Backport qemu cross-kernel migration mitigation series)
  - Resolves: RHEL-138494
    (NVIDIA:Grace-Hopper:Backport vfio: Add DMABUF support for PCI BAR regions - RHEL 10.3)


