# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-223.el10]
changelog:
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CKI Backport Bot) [RHEL-168570] {CVE-2026-31402}
  - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function (Desnes Nunes) [RHEL-147795]
  - xhci: sideband: don't dereference freed ring when removing sideband endpoint (Desnes Nunes) [RHEL-147795] {CVE-2026-23009}
  - phy: freescale: imx8m-pcie: assert phy reset during power on (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: add Telit LE910 MBIM composition (Desnes Nunes) [RHEL-147795]
  - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,dwc3: Correct MSM8994 interrupts (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,dwc3: Correct IPQ5018 interrupts (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: Check for USB4 IP_NAME (Desnes Nunes) [RHEL-147795]
  - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 (Desnes Nunes) [RHEL-147795]
  - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (Desnes Nunes) [RHEL-147795] {CVE-2025-71193}
  - phy: drop probe registration printks (Desnes Nunes) [RHEL-147795]
  - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Update UCSI structure to have message in and message out fields" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Add support for message out data structure" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Enable debugfs for message_out data structure" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Add support for SET_PDOS command" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Fix null pointer dereference in ucsi_sync_control_common" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Get connector status after enable notifications" (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Get connector status after enable notifications (Desnes Nunes) [RHEL-147795]
  - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Fix null pointer dereference in ucsi_sync_control_common (Desnes Nunes) [RHEL-147795]
  - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: keep susphy enabled during exit to avoid controller faults (Desnes Nunes) [RHEL-147795]
  - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: move Telit 0x10c7 composition in the right place (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: add Telit Cinterion FE910C04 new compositions (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: core: Remove redundant comment in core init (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: add Foxconn T99W760 (Desnes Nunes) [RHEL-147795]
  - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. (Desnes Nunes) [RHEL-147795]
  - USB: add WQ_PERCPU to alloc_workqueue users (Desnes Nunes) [RHEL-147795]
  - drivers/usb/storage: use min() instead of min_t() (Desnes Nunes) [RHEL-147795]
  - usb: uas: reduce time under spinlock (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: eic7700: Add EIC7700 USB driver (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: Add ESWIN EIC7700 USB controller (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add support for SET_PDOS command (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Enable debugfs for message_out data structure (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add support for message out data structure (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Update UCSI structure to have message in and message out fields (Desnes Nunes) [RHEL-147795]
  - uapi: cdc.h: cleanly provide for more interfaces and countries (Desnes Nunes) [RHEL-147795]
  - usb: Remove redundant pm_runtime_mark_last_busy() calls (Desnes Nunes) [RHEL-147795]
  - usb: musb: fix gadget state on disconnect (Desnes Nunes) [RHEL-147795]
  - Documentation: PM: *_autosuspend() functions update last busy time (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_request_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_runtime_autosuspend() (Desnes Nunes) [RHEL-147795]
  - Documentation: PM: runtime: Fix a reference to pm_runtime_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_runtime_put_sync_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_runtime_put_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Document return values of suspend-related API functions (Desnes Nunes) [RHEL-147795]
  - usb: host: ehci-platform: Call reset assert/deassert on suspend/resume (Desnes Nunes) [RHEL-147795]
  - usb: host: Do not check priv->clks[clk] (Desnes Nunes) [RHEL-147795]
  - usb: typec: tipd: mark as orientation aware (Desnes Nunes) [RHEL-147795]
  - usb: uas: add WQ_PERCPU to alloc_workqueue users (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147795]
  - usb: dwc2: fix hang during suspend if set as peripheral (Desnes Nunes) [RHEL-147795]
  - usb: dwc2: fix hang during shutdown if set as peripheral (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Set orientation_aware if UCSI version is 2.x and above (Desnes Nunes) [RHEL-147795]
  - usb: chaoskey: fix locking for O_NONBLOCK (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add Kaanapali compatible (Desnes Nunes) [RHEL-147795]
  - xhci: Fix NULL pointer dereference when reading portli debugfs files (Desnes Nunes) [RHEL-147795]
  - usb: xhci: Add debugfs support for xHCI Port Link Info (PORTLI) register. (Desnes Nunes) [RHEL-147795]
  - usb: xhci: standardize single bit-field macros (Desnes Nunes) [RHEL-147795]
  - usb: xhci: drop xhci-caps.h dependence on xhci-ext-caps.h (Desnes Nunes) [RHEL-147795]
  - usb: xhci: simplify Max Scratchpad buffer macros (Desnes Nunes) [RHEL-147795]
  - usb: xhci: simplify Isochronous Scheduling Threshold handling (Desnes Nunes) [RHEL-147795]
  - usb: xhci: improve xhci-caps.h comments (Desnes Nunes) [RHEL-147795]
  - usb: xhci: limit number of interrupts to 128 (Desnes Nunes) [RHEL-147795]
  - usb: xhci: limit number of ports to 127 (Desnes Nunes) [RHEL-147795]
  - usb: xhci: simplify handling of Structural Parameters 1 values (Desnes Nunes) [RHEL-147795]
  - usb: xhci: use cached HCSPARAMS1 value (Desnes Nunes) [RHEL-147795]
  - usb: xhci: remove unused trace operation and argument (Desnes Nunes) [RHEL-147795]
  - usb: xhci: remove deprecated TODO comment (Desnes Nunes) [RHEL-147795]
  - usb: xhci: replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147795]
  - usb: xhci: Don't unchain link TRBs on quirky HCs (Desnes Nunes) [RHEL-147795]
  - usb: xhci: Assume that endpoints halt as specified (Desnes Nunes) [RHEL-147795]
  - usb: xhci: implement USB Port Register Set struct (Desnes Nunes) [RHEL-147795]
  - usb: xhci: add USB Port Register Set struct (Desnes Nunes) [RHEL-147795]
  - usb: xhci: add helper to read PORTSC register (Desnes Nunes) [RHEL-147795]
  - usb: xhci: add tracing for PORTSC register writes (Desnes Nunes) [RHEL-147795]
  - usb: xhci: rework xhci_decode_portsc() (Desnes Nunes) [RHEL-147795]
  - xhci: simplify and rework trb_in_td() (Desnes Nunes) [RHEL-147795]
  - xhci: Add helper to find trb from its dma address (Desnes Nunes) [RHEL-147795]
  - usb: xhci: limit run_graceperiod for only usb 3.0 devices (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: renesas,rzg3e-xhci: Add RZ/V2H(P) and RZ/V2N support (Desnes Nunes) [RHEL-147795]
  - phy: fsl-imx8mq-usb: support alternate reference clock (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: imx8mq-usb: add alternate reference clock (Desnes Nunes) [RHEL-147795]
  - phy: qcom: qmp-pcie: Add support for Glymur PCIe Gen5x4 PHY (Desnes Nunes) [RHEL-147795]
  - phy: qcom-qmp: pcs: Add v8.50 register offsets (Desnes Nunes) [RHEL-147795]
  - phy: qcom: qmp-combo: get the USB3 & DisplayPort lanes mapping from DT (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,qmp-pcie: document the SM8350 two lanes PCIe PHY (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp-phy: Document lanes mapping when not using in USB-C complex (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Document the Glymur QMP PCIe PHY (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Restrict resets per each device (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Update pcie phy bindings (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Update pcie phy bindings for QCS615 (Desnes Nunes) [RHEL-147795]
  - phy: qcom-qmp-combo: Use regulator_bulk_data with init_load_uA for regulator setup (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: imx8mp: Set out of band wakeup for i.MX95 (Desnes Nunes) [RHEL-147795]
  - usb: chipidea: ci_hdrc_imx: Set out of band wakeup for i.MX95 (Desnes Nunes) [RHEL-147795]
  - pmdomain: core: Allow power-off for out-of-band wakeup-capable devices (Desnes Nunes) [RHEL-147795]
  - pmdomain: core: Convert to device_awake_path() (Desnes Nunes) [RHEL-147795]
  - PM: wakeup: Add out-of-band system wakeup support for devices (Desnes Nunes) [RHEL-147795]
  - usb: chipidea: core: detach power domain for ci_hdrc platform device (Desnes Nunes) [RHEL-147795]
  - redhat/configs: Adding CONFIG_PHY_RZ_G3E_USB3 (Desnes Nunes) [RHEL-147795]
  - phy: renesas: Add Renesas RZ/G3E USB3.0 PHY driver (Desnes Nunes) [RHEL-147795]
  - phy: core: Remove extra space after '=' (Desnes Nunes) [RHEL-147795]
  - phy: add new phy_notify_state() api (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: drop NDI quirk module parameter (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: clean up NDI speed hack (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: enable NDI speed hack consistently (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: rename quirk symbols (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: clean up quirk comments (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: rewrite 8u2232c quirk (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: silence jtag probe (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: match on interface number for jtag (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in xdomain.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in usb4.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tunnel.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tmu.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tb_regs.h (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tb.h (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tb.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in switch.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in retimer.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in nhi.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in lc.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in icm.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in domain.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in debugfs.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in ctl.c (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: Add wake-up support for Tegra234 XUSB host controller (Desnes Nunes) [RHEL-147795]
  - usbnet: avoid a possible crash in dql_completed() (Desnes Nunes) [RHEL-147795]
  - net: usb: usbnet: adhere to style (Desnes Nunes) [RHEL-147795]
  - usbnet: fix crash due to missing BQL accounting after resume (Desnes Nunes) [RHEL-147795]
  - usbnet: Add support for Byte Queue Limits (BQL) (Desnes Nunes) [RHEL-147795]
  - net: usb: usbnet: coding style for functions (Desnes Nunes) [RHEL-147795]
  - usbnet: Prevents free active kevent (Desnes Nunes) [RHEL-147795] {CVE-2025-68312}
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147795]
  - Documentation: treewide: Replace marc.info links with lore (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Update deprecated firmware update site in icm.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Update NVM firmware upgrade documentation (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add support for orientation (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add SET_POWER_LEVEL UCSI command to debugfs (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add Glymur compatible (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add Milos compatible (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: drop unnecessary initialisations (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: clean up set_termios() (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: add control request helpers (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: clean up device type checks (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: clean up tiocmset() (Desnes Nunes) [RHEL-147795]
  - USB: serial: belkin_sa: clean up tiocmset() (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC (Desnes Nunes) [RHEL-147795]
  - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: Allow usb role swich control from userspace (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add the SM8750 compatible (Desnes Nunes) [RHEL-147795]
  - usb: uhci: Work around bogus clang shift overflow warning from DMA_BIT_MASK(64) (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Fix missing mutex_unlock() (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Add USB4 mode and TBT3 altmode support (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Rework ps883x_set() (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Cache register settings, not Type-C mode (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix configuration error handling (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix missing accessibility check (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix registration race (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix probe error handling (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Report power supply change on sink path change (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Report power supply changes on power opmode changes (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: psy: Add power supply status (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: glue: Allow more fine grained control over mode switches (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: glue: Add documentation (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required (Desnes Nunes) [RHEL-147795]
  - usb: typec: pd: Register SPR AVS caps with usb_power_delivery class (Desnes Nunes) [RHEL-147795]
  - tcpm: Parse and log AVS APDO (Desnes Nunes) [RHEL-147795]
  - usbip: Use min to simplify stub_send_ret_submit (Desnes Nunes) [RHEL-147795]
  - usb: core: Add tracepoints for device allocation and state changes (Desnes Nunes) [RHEL-147795]
  - usb: core: Centralize device state update logic (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typo in tb_eeprom_ctl_read documentation (Desnes Nunes) [RHEL-147795]
  - usb: ljca: Improve ACPI hardware ID documentation (Desnes Nunes) [RHEL-147795]
  - usb: ljca: Order ACPI hardware IDs alphabetically (Desnes Nunes) [RHEL-147795]
  - usb: vhci-hcd: Replace pr_*() with dev_*() logging (Desnes Nunes) [RHEL-147795]
  - usb: vhci-hcd: Switch to dev_err_probe() in probe path (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Handle incorrect num_connectors capability (Desnes Nunes) [RHEL-147795] {CVE-2025-71108}
  - USB: Fix descriptor count when handling invalid MBIM extended descriptor (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: dwc3-generic-plat: Add layerscape dwc3 support (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: Add software-managed properties for flattened model (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: add missed compatible string for arm64 layerscape (Desnes Nunes) [RHEL-147795]
  - usb: typec: altmodes/displayport: do not enter mode if port is the UFP (Desnes Nunes) [RHEL-147795]
  - usb: typec: class: add typec_get_data_role symbol (Desnes Nunes) [RHEL-147795]
  - usb: chipidea: imx: add USB support for i.MX94 (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: usbmisc-imx: add fsl,imx94-usbmisc compatible (Desnes Nunes) [RHEL-147795]
  - usb: typec: tipd: Fix error handling in cd321x_read_data_status (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: xhci: Add "generic-xhci" compatible for Marvell Armada 37xx/8k (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: xhci: Allow "iommus" and "dr_mode" properties (Desnes Nunes) [RHEL-147795]
  - usb: hub: Use max() to improve usb_set_lpm_pel() (Desnes Nunes) [RHEL-147795]
  - usbip: Fix locking bug in RT-enabled kernels (Desnes Nunes) [RHEL-147795]
  - usb: usbtmc: Remove unnecessary local variable from usbtmc_ioctl_request (Desnes Nunes) [RHEL-147795]
  - usb: ehci: Add Aspeed AST2700 support (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: ehci: Add Aspeed AST2700 compatible (Desnes Nunes) [RHEL-147795]
  - usb: uhci: Add Aspeed AST2700 support (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: uhci: Add Aspeed AST2700 compatible (Desnes Nunes) [RHEL-147795]
  - usb: uhci: Add reset control support (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: uhci: Add reset property (Desnes Nunes) [RHEL-147795]
  - usb: core: Drop spaces after function names (Desnes Nunes) [RHEL-147795]
  - usb: misc: ljca: Remove Wentong's e-mail address (Desnes Nunes) [RHEL-147795]
  - powerpc/perf/vpa-dtl: Add documentation for VPA dispatch trace log PMU (Mamatha Inamdar) [RHEL-138521]
  - powerpc/perf/vpa-dtl: Handle the writing of perf record when aux wake up is needed (Mamatha Inamdar) [RHEL-138521]
  - powerpc/perf/vpa-dtl: Add support to capture DTL data in aux buffer (Mamatha Inamdar) [RHEL-138521]
  - powerpc/perf/vpa-dtl: Add support to setup and free aux buffer for capturing DTL data (Mamatha Inamdar) [RHEL-138521]
  - powerpc/vpa_dtl: Add interface to expose vpa dtl counters via perf (Mamatha Inamdar) [RHEL-138521]
  - powerpc/time: Expose boot_tb via accessor (Mamatha Inamdar) [RHEL-138521]
  - docs: ABI: sysfs-bus-event_source-devices-vpa-dtl: Document sysfs event format entries for vpa_dtl pmu (Mamatha Inamdar) [RHEL-138521]
  - Documentation/rtla: Document --bpf-action option (Tomas Glozar) [RHEL-112653]
  - Documentation/rtla: Rename sample/ to example/ (Tomas Glozar) [RHEL-112653]
  - rtla/tests: Run Test::Harness in verbose mode (Tomas Glozar) [RHEL-112653]
  - rtla/tests: Test BPF action program (Tomas Glozar) [RHEL-112653]
  - rtla/timerlat: Add example for BPF action program (Tomas Glozar) [RHEL-112653]
  - rtla/timerlat: Add --bpf-action option (Tomas Glozar) [RHEL-112653]
  - rtla/timerlat: Support tail call from BPF program (Tomas Glozar) [RHEL-112653]
  - fanotify: call fanotify_events_supported() before path_permission() and security_path_notify() (Ondrej Mosnacek) [RHEL-53850]
  - fanotify: avoid/silence premature LSM capability checks (Ondrej Mosnacek) [RHEL-53850]
  - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Fix short gather if the unmap goes into a large mapping (Jerry Snitselaar) [RHEL-147902]
  - iommupt/amdv1: mark amdv1pt_install_leaf_entry as __always_inline (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Remove MOCK_IOMMUPT_AMDV1 format (Jerry Snitselaar) [RHEL-147902]
  - types: reuse common phys_vec type instead of DMABUF open‑coded variant (Jerry Snitselaar) [RHEL-147902]
  - types: move phys_vec definition to common header (Jerry Snitselaar) [RHEL-147902]
  - nvme-pci: Use size_t for length fields to handle larger sizes (Jerry Snitselaar) [RHEL-147902]
  - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm-v7s: Remove split on unmap behavior (Jerry Snitselaar) [RHEL-147902]
  - iommu/sva: include mmu_notifier.h header (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: handle DMA_ATTR_CPU_CACHE_CLEAN in trace output (Jerry Snitselaar) [RHEL-147902]
  - dma-debug: Allow multiple invocations of overlapping entries (Jerry Snitselaar) [RHEL-147902]
  - iommu: Fix mapping check for 0x0 to avoid re-mapping it (Jerry Snitselaar) [RHEL-147902]
  - powerpc/iommu: fix lockdep warning during PCI enumeration (Jerry Snitselaar) [RHEL-147902]
  - kunit: prevent log overwrite in param_tests (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: avoid random addr value print out on error path (Jerry Snitselaar) [RHEL-147902]
  - scatterlist: introduce sg_nents_for_dma() helper (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: Remove dma_mark_clean (again) (Jerry Snitselaar) [RHEL-147902]
  - dma-debug: track cache clean flag in entries (Jerry Snitselaar) [RHEL-147902]
  - docs: dma-api: document DMA_ATTR_CPU_CACHE_CLEAN (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: add DMA_ATTR_CPU_CACHE_CLEAN (Jerry Snitselaar) [RHEL-147902]
  - docs: dma-api: document __dma_from_device_group_begin()/end() (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: add __dma_from_device_group_begin()/end() (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: do not register driver in probe() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Always add IOVA range to iotlb_gather in gather_range_pages() (Jerry Snitselaar) [RHEL-147902]
  - iommu: debug-pagealloc: Use page_ext_get_from_phys() (Jerry Snitselaar) [RHEL-147902]
  - mm/page_ext: Add page_ext_get_from_phys() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Do not set C-bit on MMIO backed PTEs (Jerry Snitselaar) [RHEL-147902]
  - iommu: simplify list initialization in iommu_create_device_direct_mappings() (Jerry Snitselaar) [RHEL-147902]
  - iommu: debug-pagealloc: Check mapped/unmapped kernel memory (Jerry Snitselaar) [RHEL-147902]
  - iommu: debug-pagealloc: Track IOMMU pages (Jerry Snitselaar) [RHEL-147902]
  - iommu: Add calls for IOMMU_DEBUG_PAGEALLOC (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: enable IOMMU_DEBUG_PAGEALLOC in debug kernels (Jerry Snitselaar) [RHEL-147902]
  - iommu: Add page_ext for IOMMU_DEBUG_PAGEALLOC (Jerry Snitselaar) [RHEL-147902]
  - iommu: Introduce pci_dev_reset_iommu_prepare/done() (Jerry Snitselaar) [RHEL-147902]
  - iommu: Add iommu_driver_get_domain_for_dev() helper (Jerry Snitselaar) [RHEL-147902]
  - iommu: Tidy domain for iommu_setup_dma_ops() (Jerry Snitselaar) [RHEL-147902]
  - iommu: Lock group->mutex in iommu_deferred_attach() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: serialize sequence allocation under concurrent TLB invalidations (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Fix type of type parameter to amd_iommufd_hw_info() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Remove unused variable in amd_iommufd_viommu_destroy() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for nested domain attach/detach (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Refactor logic to program the host page table in DTE (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Refactor persistent DTE bits programming into amd_iommu_make_clear_dte() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Introduce gDomID-to-hDomID Mapping and handle parent domain invalidation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for nested domain allocation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Introduce struct amd_iommu_viommu (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for nest parent domain allocation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Always enable GCR3TRPMode when supported. (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Introduce data struct for AMD nested domain allocation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Introduce helper function amd_iommu_update_dte() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Make amd_iommu_make_clear_dte() non-static inline (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Rename DEV_DOMID_MASK to DTE_DOMID_MASK (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: add AMD_IOMMU_IOMMUFD (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for hw_info for iommu capability query (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Drop incorrect NULL check for iommu in alloc_irq_table() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: move wait_on_sem() out of spinlock (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Fix race condition during PASID entry replacement (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Clear Present bit before tearing down context entry (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Clear Present bit before tearing down PASID entry (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Flush piotlb for SVM and Nested domain (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Flush cache for PASID table before using it (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Do not set disable_ats unless vSTE is Translate (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3-test: Add nested s1bypass/s1dssbypass coverage (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Mark EATS_TRANS safe when computing the update sequence (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Mark STE MEV safe when computing the update sequence (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Add update_safe bits to fix STE update sequence (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Add device-tree support for CMDQV driver (Jerry Snitselaar) [RHEL-147902]
  - iommu/tegra241-cmdqv: Decouple driver from ACPI (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Restore ACTLR settings for MDSS on sa8775p (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Remove IAS (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Add actlr settings for mdss on Qualcomm platforms (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency (Jerry Snitselaar) [RHEL-147902]
  - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-147902]
  - dt-bindings: iommu: Add NVIDIA Tegra CMDQV support (Jerry Snitselaar) [RHEL-147902]
  - Documentation/x86: Update IOMMU spec references to use stable identifiers (Jerry Snitselaar) [RHEL-147902]
  - x86/irq: Cleanup posted MSI code (Jerry Snitselaar) [RHEL-147902]
  - x86/irq_remapping: Sanitize posted_msi_supported() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Use core's primary handler and set IRQF_ONESHOT (Jerry Snitselaar) [RHEL-147902]
  - tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Treat PAGE_SNOOP and PWSNP separately (Jerry Snitselaar) [RHEL-147902]
  - iommu/tegra241-cmdqv: Reset VCMDQ in tegra241_vcmdq_hw_init_user() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Only cache flush memory changed by unmap (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Initialize batch->kind in batch_clear() (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: distinguish between missing and exhausted atomic pools (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm: fix size_t signedness bug in unmap path (Jerry Snitselaar) [RHEL-147902] {CVE-2026-23067}
  - iommupt: Make it clearer to the compiler that pts.level == 0 for single page (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Fix error path in amd_iommu_probe_device() (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: Avoid allocating redundant pools (Jerry Snitselaar) [RHEL-147902]
  - mm_zone: Generalise has_managed_dma() (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: Improve pool lookup (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Make pt_feature() always_inline (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Prevent module/builtin conflicts in kconfig (Jerry Snitselaar) [RHEL-147902]
  - amd/iommu: Make protection domain ID functions non-static (Jerry Snitselaar) [RHEL-147902]
  - amd/iommu: Preserve domain ids inside the kdump kernel (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Return ERR_PTR from _table_alloc() (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED (Jerry Snitselaar) [RHEL-147902] {CVE-2025-71122}
  - iommufd/selftest: Do not leak the hwpt if IOMMU_TEST_OP_MD_CHECK_MAP fails (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: Fix DMA_BIT_MASK() macro being broken (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: eliminate alloc_pages warning in atomic_pool_expand (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: fix SEV-TIO support reporting (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Report SEV-TIO support (Jerry Snitselaar) [RHEL-147902]
  - powerpc: Convert to physical address DMA mapping (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: remove unused mapping resource callbacks (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: convert dummy ops to physical address mapping (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: prepare dma_map_ops to conversion to physical address (Jerry Snitselaar) [RHEL-147902]
  - tools/dma: move dma_map_benchmark from selftests to tools/dma (Jerry Snitselaar) [RHEL-147902]
  - iommupt/vtd: Support mgaw's less than a 4 level walk for first stage (Jerry Snitselaar) [RHEL-147902]
  - iommupt/vtd: Allow VT-d to have a larger table top than the vasz requires (Jerry Snitselaar) [RHEL-147902]
  - genpt: Make GENERIC_PT invisible (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Avoid a compiler bug with sw_bit (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Fix unlikely flows in increase_top() (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Restore previous domain::aperture_end calculation (Jerry Snitselaar) [RHEL-147902]
  - iommu/tegra: fix device leak on probe_device() (Jerry Snitselaar) [RHEL-147902]
  - iommu/ipmmu-vmsa: fix device leak on of_xlate() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Actually correct pt_test_sw_bit_{acquire_release}() parameter description (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: populate lpae pgtable kunit test (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm-selftests: Use KUnit (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm-selftests: Modularize the test (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm: Move selftests to a separate file (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm: Remove arm_lpae_dump_ops() (Jerry Snitselaar) [RHEL-147902]
  - iommu/iommupt: Fix build error in genericpt unit-tests (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Documentation fixes (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Describe @bitnr parameter (Jerry Snitselaar) [RHEL-147902]
  - Documentation: genpt: Don't use code block marker before iommu_amdv1.c include listing (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a kunit test for the SW bits (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Follow PT_FEAT_DMA_INCOHERENT into the PASID entry (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Use the generic iommu page table (Jerry Snitselaar) [RHEL-147902]
  - iommupt/x86: Support SW bits and permit PT_FEAT_DMA_INCOHERENT (Jerry Snitselaar) [RHEL-147902]
  - iommupt/x86: Set the dirty bit only for writable PTEs (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the Intel VT-d second stage page table format (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Flush the CPU cache after any writes to the page table (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Use the incoherent start/stop functions for PT_FEAT_DMA_INCOHERENT (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add basic support for SW bits in the page table (Jerry Snitselaar) [RHEL-147902]
  - iommu/pages: Add support for incoherent IOMMU page table walkers (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a kunit test for the IOMMU implementation (Jerry Snitselaar) [RHEL-147902]
  - Documentation: kunit: Document new parameterized test features (Jerry Snitselaar) [RHEL-147902]
  - kunit: Add example parameterized test with direct dynamic parameter array setup (Jerry Snitselaar) [RHEL-147902]
  - kunit: Add example parameterized test with shared resource management using the Resource API (Jerry Snitselaar) [RHEL-147902]
  - kunit: Enable direct registration of parameter arrays to a KUnit test (Jerry Snitselaar) [RHEL-147902]
  - kunit: Pass parameterized test context to generate_params() (Jerry Snitselaar) [RHEL-147902]
  - kunit: Introduce param_init/exit for parameterized test context management (Jerry Snitselaar) [RHEL-147902]
  - kunit: Add parent kunit for parameterized test context (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Remove AMD io_pgtable support (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Use the generic iommu page table (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the x86 64 bit page table format (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Change the selftest to use iommupt instead of xarray (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a mock pagetable format for iommufd selftest to use (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Fix the kunit building (Jerry Snitselaar) [RHEL-147902]
  - redhat: config: Populate iommu pt kunit config option (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a kunit test for Generic Page Table (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add read_and_clear_dirty op (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add map_pages op (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add unmap_pages op (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add iova_to_phys op (Jerry Snitselaar) [RHEL-147902]
  - powerpc/pseries/svm: Make mem_encrypt.h self contained (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the AMD IOMMU v1 page table format (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the basic structure of the iommu implementation (Jerry Snitselaar) [RHEL-147902]
  - genpt: Add Documentation/ files (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: Populate debug generic pt config option (Jerry Snitselaar) [RHEL-147902]
  - genpt: Generic Page Table base API (Jerry Snitselaar) [RHEL-147902]
  - iommu: Pass in old domain to attach_dev callback functions (Jerry Snitselaar) [RHEL-147902]
  - iommu: Do not revert set_domain for the last gdev (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Set release_domain to blocked_domain (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Set release_domain to arm_smmu_blocked_domain (Jerry Snitselaar) [RHEL-147902]
  - iommu: Generic support for RMRs during device release (Jerry Snitselaar) [RHEL-147902]
  - iommu/pages: use folio_nr_pages() instead of shift operation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Enhance "Completion-wait Time-out" error message (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Set INTEL_IOMMU_FLOPPY_WA depend on BLK_DEV_FD (Jerry Snitselaar) [RHEL-147902]
  - iommu: tegra: enable compile testing (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Add Glymur MDSS compatible (Jerry Snitselaar) [RHEL-147902]
  - selftests/dma: fix invalid array access in printf (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: Allow use of DMA_BIT_MASK(64) in global scope (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Make vfio_compat's unmap succeed if the range is already empty (Jerry Snitselaar) [RHEL-147902]
  - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Skip enabling command/event buffers for kdump (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Reuse device table for kdump (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support to remap/unmap IOMMU buffers for kdump (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: use str_plural() to simplify the code (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: debugfs: Avoid dumping context command register (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Removal of Advanced Fault Logging (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: PRS isn't usable if PDS isn't supported (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Remove LPIG from page group response descriptor (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Drop unused cap_super_offset() (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() (Jerry Snitselaar) [RHEL-147902]
  - swiotlb: Remove redundant __GFP_NOWARN (Jerry Snitselaar) [RHEL-147902]
  - dma-direct: clean up the logic in __dma_direct_alloc_pages() (Jerry Snitselaar) [RHEL-147902]
  - dma-remap: drop nth_page() in dma_common_contiguous_remap() (Jerry Snitselaar) [RHEL-147902]
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137405] {CVE-2025-68285}
  - clk: renesas: cpg-mssr: Fix 'soc' node handling in cpg_mssr_reserved_init() (Radu Rendec) [RHEL-77269]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-224.el10]
changelog:
  - tools/power turbostat: Allow execution to continue after perf_l2_init() failure (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix delimiter bug in print functions (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix --show/--hide for individual cpuidle counters (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix incorrect format variable (Steve Best) [RHEL-129778]
  - tools/power turbostat: Consistently use print_float_value() (Steve Best) [RHEL-129778]
  - tools/power/turbostat: Fix microcode patch level output for AMD/Hygon (Steve Best) [RHEL-129778]
  - tools/power turbostat: Eliminate unnecessary data structure allocation (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix swidle header vs data display (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix illegal memory access when SMT is present and disabled (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix AMD RAPL regression (Steve Best) [RHEL-129778]
  - tools/power turbostat: version 2026.02.14 (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix and document --header_iterations (Steve Best) [RHEL-129778]
  - tools/power turbostat: Use strtoul() for iteration parsing (Steve Best) [RHEL-129778]
  - tools/power turbostat: Favor cpu# over core# (Steve Best) [RHEL-129778]
  - tools/power turbostat: Expunge logical_cpu_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Enhance HT enumeration (Steve Best) [RHEL-129778]
  - tools/power turbostat: Simplify global core_id calculation (Steve Best) [RHEL-129778]
  - tools/power turbostat: Unify even/odd/average counter referencing (Steve Best) [RHEL-129778]
  - tools/power turbostat: Allocate average counters dynamically (Steve Best) [RHEL-129778]
  - tools/power turbostat: Delete core_data.core_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Rename physical_core_id to core_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Cleanup package_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Cleanup internal use of "base_cpu" (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add L2 cache statistics (Steve Best) [RHEL-129778]
  - tools/power turbostat: Remove redundant newlines from err(3) strings (Steve Best) [RHEL-129778]
  - tools/power turbostat: Allow more use of is_hybrid flag (Steve Best) [RHEL-129778]
  - tools/power turbostat: Rename "LLCkRPS" column to "LLCMRPS" (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: Document the "--force" option (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: Document Totl%C0, Any%C0, GFX%C0, CPUGFX% columns (Steve Best) [RHEL-129778]
  - tools/power turbostat: Harden against unexpected values (Steve Best) [RHEL-129778]
  - tools/power turbostat: Dump hypervisor name (Steve Best) [RHEL-129778]
  - tools/power turbostat: Dump CPUID.1.ECX[31] (Hypervisor) (Steve Best) [RHEL-129778]
  - tools/power turbostat: Dump CPUID(1) consistently with CPUID(6) (Steve Best) [RHEL-129778]
  - tools/power turbostat: AMD: msr offset 0x611 read failed: Input/output error (Steve Best) [RHEL-129778]
  - tools/power turbostat: version 2025.12.02 (Steve Best) [RHEL-129778]
  - tools/power turbostat: Print wide names only for RAW 64-bit columns (Steve Best) [RHEL-129778]
  - tools/power turbostat: Print percentages in 8-columns (Steve Best) [RHEL-129778]
  - tools/power turbostat: Print "nan" for out of range percentages (Steve Best) [RHEL-129778]
  - tools/power turbostat: Validate APERF access for VMWARE (Steve Best) [RHEL-129778]
  - tools/power turbostat: Enhance perf probe (Steve Best) [RHEL-129778]
  - tools/power turbostat: Validate RAPL MSRs for AWS Nitro Hypervisor (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add run-time MSR driver probe (Steve Best) [RHEL-129778]
  - tools/power turbostat: Set per_cpu_msr_sum to NULL after free (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add LLC stats (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: fix typo: idle_pct should be pct_idle (Steve Best) [RHEL-129778]
  - tools/power turbostat: Remove dead code (Steve Best) [RHEL-129778]
  - tools/power turbostat: Refactor floating point printout code (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: Update example (Steve Best) [RHEL-129778]
  - tools/power turbostat: Refactor added-counter value printing code (Steve Best) [RHEL-129778]
  - tools/power turbostat: Refactor added column header printing (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add Wildcat Lake and Nova Lake support (Steve Best) [RHEL-129778]
  - tools/power turbostat: Regression fix Uncore MHz printed in hex (Steve Best) [RHEL-129778]
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-164343] {CVE-2026-23270}
  - Prevent stripping of rtla and rv binaries during install (John Kacur) [RHEL-85865 RHEL-85868]
  - Fix rtla and rv debuginfo package definitions (John Kacur) [RHEL-85865 RHEL-85868]
  - Add debuginfo package for rtla tool (John Kacur) [RHEL-85865 RHEL-85868]
  - Add debuginfo package for rv tool (John Kacur) [RHEL-85865 RHEL-85868]
  - iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show (Jerry Snitselaar) [RHEL-140474]
  - redhat/configs: Enable AMD IOMMU DebugFS support (Jerry Snitselaar) [RHEL-140474]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-225.el10]
changelog:
  - firmware: qcom_scm: Use TASK_IDLE state in wait_for_wq_completion() (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom_scm: Support multiple waitq contexts (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom_scm: Add API to get waitqueue IRQ info (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: allow QSEECOM on Surface Pro 11 (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: tzmem: export shm_bridge create/delete (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: add support for object invocation (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: Allow QSEECOM on Dell Inspiron 7441 / Latitude 7455 (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: Allow QSEECOM on Lenovo Thinkbook 16 (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: Allow QSEECOM on HAMOA-IOT-EVK (Mattijs Korpershoek) [RHEL-170163]
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-169566] {CVE-2025-68724}
  - PCI: hv: Fix double ida_free in hv_pci_probe error path (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: pci-epf-vntb: Fix MSI doorbell IRQ unwind (Myron Stowe) [RHEL-139975]
  - PCI: s32g: Skip Root Port removal during success (Myron Stowe) [RHEL-139975]
  - PCI: Provide pci_free_irq_vectors() stub (Myron Stowe) [RHEL-139975]
  - PCI: meson: Report that link is up while in ASPM L0s and L1 states (Myron Stowe) [RHEL-139975]
  - PCI: qcom: Remove ASPM L0s support for MSM8996 SoC (Myron Stowe) [RHEL-139975]
  - MAINTAINERS: Add Manivannan Sadhasivam as PCI/pwrctrl maintainer (Myron Stowe) [RHEL-139975]
  - PCI: Use max() instead of max_t() to ease static analysis (Myron Stowe) [RHEL-139975]
  - PCI: qcom: Implement .assert_perst() (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Implement .assert_perst() for dwc glue drivers (Myron Stowe) [RHEL-139975]
  - PCI: Add .assert_perst() to control PCIe PERST# (Myron Stowe) [RHEL-139975]
  - MAINTAINERS: Add NXP S32G PCIe controller driver maintainer (Myron Stowe) [RHEL-139975]
  - PCI: s32g: Add NXP S32G PCIe controller driver (RC) (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Add register and bitfield definitions (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: s32g: Add NXP S32G PCIe controller (Myron Stowe) [RHEL-139975]
  - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: amlogic: Fix the register name of the DBI region (Myron Stowe) [RHEL-139975]
  - PCI: mediatek: Add support for Airoha AN7583 SoC (Myron Stowe) [RHEL-139975]
  - PCI: mediatek: Use generic MACRO for TPVPERL delay (Myron Stowe) [RHEL-139975]
  - PCI: mediatek: Convert bool to single quirks entry and bitmap (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: mediatek: Add support for Airoha AN7583 (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: mediatek: Convert to YAML schema (Myron Stowe) [RHEL-139975]
  - PCI: keystone: Add support to build as a loadable module (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Export dw_pcie_allocate_domains() and dw_pcie_ep_raise_msix_irq() (Myron Stowe) [RHEL-139975]
  - PCI: Export pci_get_host_bridge_device() for use by pci-keystone (Myron Stowe) [RHEL-139975]
  - PCI: keystone: Exit ks_pcie_probe() for invalid mode (Myron Stowe) [RHEL-139975]
  - PCI: j721e: Use 'pcie->reset_gpio' directly and drop the local variable (Myron Stowe) [RHEL-139975]
  - PCI: j721e: Use devm_clk_get_optional_enabled() to get and enable the clock (Myron Stowe) [RHEL-139975]
  - PCI: ixp4xx: Guard ARM32-specific hook_fault_code() (Myron Stowe) [RHEL-139975]
  - PCI: dw-rockchip: Simplify regulator setup with devm_regulator_get_enable_optional() (Myron Stowe) [RHEL-139975]
  - PCI: dw-rockchip: Configure L1SS support (Myron Stowe) [RHEL-139975]
  - PCI: tegra194: Remove unnecessary L1SS disable code (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Advertise L1 PM Substates only if driver requests it (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition (Myron Stowe) [RHEL-139975]
  - PCI: brcmstb: Add panic/die handler to driver (Myron Stowe) [RHEL-139975]
  - PCI: brcmstb: Add a way to indicate if PCIe bridge is active (Myron Stowe) [RHEL-139975]
  - PCI: brcmstb: Fix disabling L0s capability (Myron Stowe) [RHEL-139975]
  - PCI: host-generic: Move bridge allocation outside of pci_host_common_init() (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: pci-epf-vntb: Add MSI doorbell support (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: Add pci_epf_assign_bar_space() API (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: Add pci_epf_get_required_bar_size() helper (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: Rename 'epf_bar::aligned_size' to 'epf_bar:mem_size' (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-x1e80100: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8550: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8450: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8350: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8250: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8150: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sc8280xp: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sc7280: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sa8775p: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: Update the email address for Manivannan Sadhasivam (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: amlogic,axg-pcie: Fix select schema (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8550: Add Kaanapali compatible (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: dwc: rockchip: Add RK3528 variant (Myron Stowe) [RHEL-139975]
  - PCI: Fix Resizable BAR restore order (Myron Stowe) [RHEL-139975]
  - PCI: Fix BAR resize rollback path overwriting ret (Myron Stowe) [RHEL-139975]
  - PCI: Validate pci_rebar_size_supported() input (Myron Stowe) [RHEL-139975]
  - PCI: Convert BAR sizes bitmasks to u64 (Myron Stowe) [RHEL-139975]
  - drm/amdgpu: Use pci_rebar_get_max_size() (Myron Stowe) [RHEL-139975]
  - drm/xe/vram: Use pci_rebar_get_max_size() (Myron Stowe) [RHEL-139975]
  - PCI: Add pci_rebar_get_max_size() (Myron Stowe) [RHEL-139975]
  - drm/xe/vram: Use PCI rebar helpers in resize_vram_bar() (Myron Stowe) [RHEL-139975]
  - drm/i915/gt: Use pci_rebar_size_supported() (Myron Stowe) [RHEL-139975]
  - PCI: Add pci_rebar_size_supported() helper (Myron Stowe) [RHEL-139975]
  - PCI: Improve Resizable BAR functions kernel doc (Myron Stowe) [RHEL-139975]
  - PCI: Move pci_rebar_size_to_bytes() and export it (Myron Stowe) [RHEL-139975]
  - PCI: Move pci_rebar_bytes_to_size() and clean it up (Myron Stowe) [RHEL-139975]
  - PCI: Move Resizable BAR code to rebar.c (Myron Stowe) [RHEL-139975]
  - PCI: Prevent restoring assigned resources (Myron Stowe) [RHEL-139975]
  - drm/amdgpu: Remove driver side BAR release before resize (Myron Stowe) [RHEL-139975]
  - drm/i915: Remove driver side BAR release before resize (Myron Stowe) [RHEL-139975]
  - PCI: Add kerneldoc for pci_resize_resource() (Myron Stowe) [RHEL-139975]
  - PCI: Fix restoring BARs on BAR resize rollback path (Myron Stowe) [RHEL-139975]
  - PCI: Free saved list without holding pci_bus_sem (Myron Stowe) [RHEL-139975]
  - PCI: Try BAR resize even when no window was released (Myron Stowe) [RHEL-139975]
  - PCI: Change pci_dev variable from 'bridge' to 'dev' (Myron Stowe) [RHEL-139975]
  - PCI/IOV: Adjust ->barsz[] when changing BAR size (Myron Stowe) [RHEL-139975]
  - PCI: Prevent resource tree corruption when BAR resize fails (Myron Stowe) [RHEL-139975]
  - PCI/PTM: Enable only if device advertises relevant role (Myron Stowe) [RHEL-139975]
  - Documentation: PCI: Amend error recovery doc with pci_save_state() rules (Myron Stowe) [RHEL-139975]
  - treewide: Drop pci_save_state() after pci_restore_state() (Myron Stowe) [RHEL-139975]
  - PCI/ERR: Ensure error recoverability at all times (Myron Stowe) [RHEL-139975]
  - PCI/PM: Stop needlessly clearing state_saved on enumeration and thaw (Myron Stowe) [RHEL-139975]
  - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths (Myron Stowe) [RHEL-139975]
  - PCI: vmd: Switch to pci_bus_find_emul_domain_nr() (Myron Stowe) [RHEL-139975]
  - PCI: Enable host bridge emulation for PCI_DOMAINS_GENERIC platforms (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix device leak at device stop (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix device and OF node leak at bus scan (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix device leak at registration (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix double cleanup on devm_add_action_or_reset() failure (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Add optional slot clock for PCI slots (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Create pwrctrl devices only when CONFIG_PCI_PWRCTRL is enabled (Myron Stowe) [RHEL-139975]
  - arm64: Kconfig: switch to HAVE_PWRCTRL (Myron Stowe) [RHEL-139975]
  - wifi: ath12k: switch to PCI_PWRCTRL_PWRSEQ (Myron Stowe) [RHEL-139975]
  - wifi: ath11k: switch to PCI_PWRCTRL_PWRSEQ (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Rename pwrctrl Kconfig symbols and slot module (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Add pwrctrl driver for PCI slots (Myron Stowe) [RHEL-139975]
  - dt-bindings: vendor-prefixes: Document the 'pciclass' prefix (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Skip scanning for the device further if pwrctrl device is created (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Move pci_pwrctrl_unregister() to pci_destroy_dev() (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Move creation of pwrctrl devices to pci_scan_device() (Myron Stowe) [RHEL-139975]
  - Bluetooth: mgmt: Add idle_timeout to configurable system parameters (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix regressions caused by reusing ident (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: clamp SCO altsetting table indices (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix not tracking outstanding TX ident (David Marlin) [RHEL-157827]
  - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix send LE flow credits in ACL link (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (David Marlin) [RHEL-157827]
  - Bluetooth: hci_ll: Fix firmware leak on error path (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-157827]
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req (David Marlin) [RHEL-157827]
  - Bluetooth: qca: fix ROM version reading on WCN3998 chips (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (David Marlin) [RHEL-157827]
  - Bluetooth: HIDP: Fix possible UAF (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: Fix hci_le_create_conn_sync (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Fix defer tests being unstable (David Marlin) [RHEL-157827]
  - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (David Marlin) [RHEL-157827]
  - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (David Marlin) [RHEL-157827]
  - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (David Marlin) [RHEL-157827]
  - Bluetooth: Fix CIS host feature condition (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: Add LE Channel Sounding HCI Command/event structures (David Marlin) [RHEL-157827]
  - Bluetooth: purge error queues in socket destructors (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: hci_qca: Cleanup on all setup failures (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add device ID for Realtek RTL8761BU (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID for RTL8852CE (David Marlin) [RHEL-157827]
  - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add USB ID 0489:e112 for Realtek 8851BE (David Marlin) [RHEL-157827]
  - Bluetooth: hci_conn: Set link_policy on incoming ACL connections (David Marlin) [RHEL-157827]
  - Bluetooth: hci_qca: Fix SSR (SubSystem Restart) fail when BT_EN is pulled up by hw (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add support for MediaTek7920 0489:e158 (David Marlin) [RHEL-157827]
  - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: report BIS capability flags in supported settings (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (David Marlin) [RHEL-157827]
  - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-157827]
  - drivers/bluetooth: btbcm: Use kmalloc_array() to prevent overflow (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Introduce HCI Driver protocol (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: add new custom firmwares (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 0x13d3/0x3619 for RTL8852BE-VT (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 0x13d3/0x3618 for RTL8852BE-VT (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT (David Marlin) [RHEL-157827]
  - Bluetooth: iso: fix socket matching ambiguity between BIS and CIS (David Marlin) [RHEL-157827]
  - Bluetooth: btrtl: Add the support for RTL8761CUV (David Marlin) [RHEL-157827]
  - Bluetooth: Remove redundant pm_runtime_mark_last_busy() calls (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Reclassify Qualcomm WCN6855 debug packets (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Suspend/Resume: Controller doorbell interrupt handling (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Support for S4 (Hibernate) (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Fix not updating BIS sender source address (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: Allow use of Set Device Flags without Add Device (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Attempt to resolve broadcast address (David Marlin) [RHEL-157827]
  - Bluetooth: HCI: Always use the identity address when initializing a connection (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-157827]
  - Bluetooth: hci_core: Introduce HCI_CONN_FLAG_PAST (David Marlin) [RHEL-157827]
  - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-157827]
  - Bluetooth: hci_h5: implement CRC data integrity (David Marlin) [RHEL-157827]
  - Bluetooth: hci_h5: avoid sending two SYNC messages (David Marlin) [RHEL-157827]
  - Bluetooth: mediatek: add gpio pin to reset bt (David Marlin) [RHEL-157827]
  - sfc: add transmit timestamping support (Izabela Bakollari) [RHEL-165819]
  - cpufreq: intel_pstate: Fix crash during turbo disable (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Rearrange variable declaration involving __free() (Steve Best) [RHEL-133082]
  - cpufreq: Pass policy pointer to ->update_limits() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Enable asym capacity only when CPU SMT is not possible (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Eliminate some code duplication (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Use mutex guard for driver locking (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Add Diamond Rapids OOB mode support (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Improve printing of debug messages (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: hybrid: Adjust energy model rules (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Add and use hybrid_has_l3() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Add and use hybrid_get_cpu_type() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Use likely() optimization in intel_pstate_sample() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Enable HWP without EPP if DEC is enabled (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Adjust frequency percentage computations (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Rearrange freq QoS updates using __free() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Remove EPB-related code (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Rearrange variable declaration involving __free() (Steve Best) [RHEL-133082]
  - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164429]
  - x86/resctrl: Fix memory bandwidth counter width for Hygon (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add missing resctrl initialization for Hygon (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Update documentation for telemetry events (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Move RMID initialization to first mount (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Compute number of RMIDs as minimum across resources (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Fix non-contiguous CBM check for Hygon (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Add CPU vendor detection for Hygon (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Define CPU vendor IDs as bits to match usage (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Fix a division by zero error on Hygon (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add energy/perf choices to rdt boot option (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Refactor mkdir_mondata_subdir() (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Read telemetry events (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Find and enable usable telemetry events (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Add architectural event pointer (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Discover hardware telemetry events (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Add and initialize a resource for package scope monitoring (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Add an architectural hook called for first mount (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Support binary fixed point event counters (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Handle events that can be read from any CPU (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Make event details accessible to functions when reading events (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Rename some L3 specific functions (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Split L3 dependent parts out of __mon_event_count() (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Clean up domain_remove_cpu_ctrl() (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Move L3 initialization into new helper function (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Improve domain type checking (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Update bit_usage to reflect io_alloc (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to modify io_alloc capacity bitmasks (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Modify struct rdt_parse_data to pass mode and CLOSID (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to display io_alloc CBMs (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add user interface to enable/disable io_alloc feature (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to display "io_alloc" support (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Implement "io_alloc" enable/disable handlers (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Detect io_alloc feature (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add SDCIAE feature in the command line options (Gavin Shan) [RHEL-163514]
  - x86/cpufeatures: Add support for L3 Smart Data Cache Injection Allocation Enforcement (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Consider sparse masks when initializing new group's allocation (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled (Gavin Shan) [RHEL-163514]
  - MAINTAINERS: resctrl: Add myself as reviewer (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Configure mbm_event mode if supported (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce the interface to switch between monitor modes (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce the interface to modify assignments in a group (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Auto assign counters on mkdir and clean up on group removal (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Provide interface to update the event configurations (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add event configuration directory under info/L3_MON/ (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Support counter read/reset with mbm_event assignment mode (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Pass struct rdtgroup instead of individual members (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add the functionality to unassign MBM events (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add the functionality to assign MBM events (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce event configuration field in struct mon_evt (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add data structures and definitions for ABMC assignment (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to display number of free MBM counters (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add resctrl file to display number of assignable counters (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce the interface to display monitoring modes (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add support to enable/disable AMD ABMC feature (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add ABMC feature in the command line options (Gavin Shan) [RHEL-163514]
  - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Prepare for more monitor events (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Remove the rdt_mon_features global variable (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Replace architecture event enabled checks (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Consolidate monitor event descriptions (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Optimize code in rdt_get_tree() (Gavin Shan) [RHEL-163514]
  - Documentation: Fix filesystems typos (Gavin Shan) [RHEL-163514]
  - ACPI: CPPC: add APIs and sysfs interface for perf_limited (Mark Langsdorf) [RHEL-143330]
  - cpufreq: cppc: Update MIN_PERF/MAX_PERF in target callbacks (Mark Langsdorf) [RHEL-143330]
  - cpufreq: CPPC: Update cached perf_ctrls on sysfs write (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Extend cppc_set_epp_perf() for FFH/SystemMemory (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Warn on missing mandatory DESIRED_PERF register (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Add cppc_get_perf() API to read performance controls (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Rename EPP constants for clarity (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Clean up cppc_perf_caps and cppc_perf_ctrls structs (Mark Langsdorf) [RHEL-143330]
  - cpufreq: CPPC: Add generic helpers for sysfs show/store (Mark Langsdorf) [RHEL-143330]
  - intel_idle: Add C-states validation (Steve Best) [RHEL-129779]
  - intel_idle: Add cmdline option to adjust C-states table (Steve Best) [RHEL-129779]
  - intel_idle: Initialize sysfs after cpuidle driver initialization (Steve Best) [RHEL-129779]
  - intel_idle: Remove the 'preferred_cstates' parameter (Steve Best) [RHEL-129779]
  - intel_idle: Remove unused driver version constant (Steve Best) [RHEL-129779]
  - intel_idle: Remove unnecessary address-of operators (Steve Best) [RHEL-129779]
  - rv: Fix handle_task_newtask prototype (Gabriele Monaco) [RHEL-116706]
  - redhat/configs: Enable additional RV monitors on debug kernels (Gabriele Monaco) [RHEL-116706]
  - redhat/configs: Enable sched and rtapp RV monitors (Gabriele Monaco) [RHEL-116706]
  - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Perform fast check switch only for online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Check _CPC validity for only the online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Detect preferred core availability on online CPUs (Mark Langsdorf) [RHEL-151651]
  - redhat/configs: automotive: enable SPI_OMAP24XX as a module (Jared Kangas) [RHEL-118418]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-225
changelog:
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
  - crypto: scatterwalk - Backport memcpy_sglist()
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  - crypto: algif_aead - Revert to operating out-of-place
  - crypto: algif_aead - snapshot IV for async AEAD requests
  - crypto: authenc - use memcpy_sglist() instead of null skcipher
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
  - crypto: authencesn - Fix src offset when decrypting in-place
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-226.el10]
changelog:
  - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172216]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172216] {CVE-2026-31431}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172216] {CVE-2026-23060}
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172216]
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172216] {CVE-2026-31677}
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172216] {CVE-2026-31431}
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172216]
  - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171460]
  - drm/i915/dmc: Fix an unlikely NULL pointer deference at probe (Desnes Nunes) [RHEL-161592]
  - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Herbert Xu) [RHEL-154016]
  - s390/mm: Add missing secure storage access fixups for donated memory (Mete Durlu) [RHEL-168792]
  - timers/migration: Exclude isolated cpus from hierarchy (CKI Backport Bot) [RHEL-68981]
  - cpumask: Add initialiser to use cleanup helpers (CKI Backport Bot) [RHEL-68981]
  - sched/isolation: Force housekeeping if isolcpus and nohz_full don't leave any (CKI Backport Bot) [RHEL-68981]
  - cgroup/cpuset: Fail if isolated and nohz_full don't leave any housekeeping (CKI Backport Bot) [RHEL-68981]
  - cgroup/cpuset: Rename update_unbound_workqueue_cpumask() to update_isolation_cpumasks() (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Use scoped_guard on available flag set/clear (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Add mask for CPUs available in the hierarchy (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Rename 'online' bit to 'available' (CKI Backport Bot) [RHEL-68981]
  - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-145403]
  - audit: Use kzalloc() instead of kmalloc()/memset() in audit_krule_to_data() (Ricardo Robaina) [RHEL-145403]
  - audit: fix comment misindentation in audit.h (Ricardo Robaina) [RHEL-145403]
  - audit: fix skb leak when audit rate limit is exceeded (Ricardo Robaina) [RHEL-145403]
  - audit: init ab->skb_list earlier in audit_buffer_alloc() (Ricardo Robaina) [RHEL-145403]
  - audit: add record for multiple object contexts (Ricardo Robaina) [RHEL-145403]
  - audit: add record for multiple task security contexts (Ricardo Robaina) [RHEL-145403]
  - lsm: security_lsmblob_to_secctx module selection (Ricardo Robaina) [RHEL-145403]
  - audit: create audit_stamp structure (Ricardo Robaina) [RHEL-145403]
  - audit: add a missing tab (Ricardo Robaina) [RHEL-145403]
  - audit: fix typo in auditfilter.c comment (Ricardo Robaina) [RHEL-145403]
  - audit: Replace deprecated strcpy() with strscpy() (Ricardo Robaina) [RHEL-145403]
  - audit: fix indentation in audit_log_exit() (Ricardo Robaina) [RHEL-145403]
  - audit: mark audit_log_vformat() with __printf() attribute (Ricardo Robaina) [RHEL-145403]
  - fs: Fix filename init after recent refactoring (Ricardo Robaina) [RHEL-145403]
  - netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error (Ricardo Robaina) [RHEL-145403]
  - fs: dedup handling of struct filename init and refcounts bumps (Ricardo Robaina) [RHEL-145403]
  - audit: Initialize lsmctx to avoid memory allocation error (Ricardo Robaina) [RHEL-145403]
  - net: corrections for security_secid_to_secctx returns (Ricardo Robaina) [RHEL-145403]
  - lsm: replace context+len with lsm_context (Ricardo Robaina) [RHEL-145403]
  - lsm: ensure the correct LSM context releaser (Ricardo Robaina) [RHEL-145403]
  - lsm: remove lsm_prop scaffolding (Ricardo Robaina) [RHEL-145403]
  - netlabel,smack: use lsm_prop for audit data (Ricardo Robaina) [RHEL-145403]
  - audit: change context data from secid to lsm_prop (Ricardo Robaina) [RHEL-145403]
  - lsm: create new security_cred_getlsmprop LSM hook (Ricardo Robaina) [RHEL-145403]
  - audit: use an lsm_prop in audit_names (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_inode_getsecid (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_current_getsecid (Ricardo Robaina) [RHEL-145403]
  - audit: update shutdown LSM data (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_ipc_getsecid (Ricardo Robaina) [RHEL-145403]
  - audit: maintain an lsm_prop in audit_context (Ricardo Robaina) [RHEL-145403]
  - lsm: add lsmprop_to_secctx hook (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_audit_rule_match (Ricardo Robaina) [RHEL-145403]
  - lsm: add the lsm_prop data structure (Ricardo Robaina) [RHEL-145403]
  - KVM: arm64: Account for RESx bits in __compute_fgt() (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Fix typos and stale comments in kvm_util (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Move page_align() to shared header (Sebastian Ott) [RHEL-157318]
  - KVM: riscv: selftests: Fix incorrect rounding in page_align() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Fix incorrect rounding in page_align() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Disable unused TTBR1_EL1 translations (Sebastian Ott) [RHEL-157318]
  - tools headers: Sync UAPI KVM headers with kernel sources (Sebastian Ott) [RHEL-157318]
  - Documentation: KVM: Update GICv3 docs for GICv5 hosts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Discard PC update state on vcpu reset (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Don't reprobe for ICH_VTR_EL2.TDS on CPU hotplug (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Correct test for ICH_HCR_EL2_TDIR cap for GICv5 hosts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert ICH_HCR_EL2_TDIR cap to EARLY_LOCAL_CPU_FEATURE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic: Pick EOIcount deactivations from AP-list tail (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove the redundant ISB in __kvm_at_s1e2() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix vma_shift staleness on nested hwpoison path (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Inject a SEA if failed to read the descriptor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Report addrsz fault at level 0 with a bad VTTBR.BADDR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Check S2 limits based on implemented PA size (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2 fault (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Eagerly init vgic dist/redist on vgic creation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Deduplicate ASID retrieval code (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Revert accidental drop of kvm_uninit_stage2_mmu() for non-NV VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix protected mode handling of pages larger than 4kB (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic: Handle const qualifier from gic_kvm_info allocation type (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove redundant kern_hyp_va() in unpin_host_sve_state() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix ID register initialization for non-protected pKVM guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Optimise away S1POE handling when not supported by host (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Hide S1POE from guests when not supported by the host (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add debugfs file dumping computed RESx values (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add sanitisation to SCTLR_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove all traces of HCR_EL2.MIOCNCE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove all traces of FEAT_TME (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify handling of full register invalid constraint (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Get rid of FIXED_VALUE altogether (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify handling of HCR_EL2.E2H RESx (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Move RESx into individual register descriptors (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add RES1_WHEN_E2Hx constraints as configuration flags (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add REQUIRES_E2H1 constraint as configuration flags (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify FIXED_VALUE handling (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert HCR_EL2.RW to AS_RES1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Correctly handle SCTLR_EL1 RES1 bits for unsupported features (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Allow RES1 bits to be inferred from configuration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inherit RESx bits from FGT register descriptors (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Extend unified RESx handling to runtime sanitisation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce data structure tracking both RES0 and RES1 bits (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce standalone FGU computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove duplicate configuration for SCTLR_EL1.{EE,E0E} (Sebastian Ott) [RHEL-157318]
  - arm64: Convert SCTLR_EL2 to sysreg infrastructure (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Avoid NV stage-2 code when NV is not supported (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use standard seq_file iterator for vgic-debug debugfs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Reimplement vgic-debug XArray iteration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use standard seq_file iterator for idregs debugfs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Set vgic_model before initing private IRQs (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Drop ICH_HFGRTR_EL2.ICC_HAPR_EL1 and make RES1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v3: Switch vGIC-v3 to use generated ICH_VMCR_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix various comments (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Add trap config for DBGWCR<15>_EL1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Enable GICv3 CPUIF trapping on GICv5 hosts if required (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify PAGE_S2_MEMATTR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Kill KVM_PGTABLE_S2_NOFWB (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Switch pKVM host S2 over to KVM_PGTABLE_S2_AS_S1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add KVM_PGTABLE_S2_AS_S1 flag (Sebastian Ott) [RHEL-157318]
  - arm64: Add MT_S2{,_FWB}_AS_S1 encodings (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use kvm_has_mte() in pKVM trap initialization (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inject UNDEF when accessing MTE sysregs with MTE disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Trap MTE access and discovery when MTE is disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove dead code resetting HCR_EL2 for pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Return correct RES0 bits for FGT registers (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Always populate FGT masks at boot time (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix error checking for FFA_VERSION (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Prevent host from managing timer offsets for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Check whether a VM IOCTL is allowed in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Track KVM IOCTLs and their associated KVM caps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Do not allow KVM_CAP_ARM_MTE for any guest in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Include VM type when checking VM capabilities in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce helper to calculate fault IPA offset (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix MTE flag initialization for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix Trace Buffer trap polarity for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix Trace Buffer trapping for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Add a test for FEAT_IDST (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Report optional ID register traps with a 0x18 syndrome (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Add a generic synchronous exception injection primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Force trap of GMID_EL1 when the guest doesn't have MTE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle CSSIDR2_EL1 and SMIDR_EL1 in a generic way (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle FEAT_IDST for sysregs without specific handlers (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add a generic synchronous exception injection primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add trap routing for GMID_EL1 (Sebastian Ott) [RHEL-157318]
  - arm64: Repaint ID_AA64MMFR2_EL1.IDS description (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Honor UX/PX attributes for EL2 S1 mappings (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert VTCR_EL2 to config-driven sanitisation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Account for RES1 bits in DECLARE_FEAT_MAP() and co (Sebastian Ott) [RHEL-157318]
  - arm64: Convert VTCR_EL2 to sysreg infratructure (Sebastian Ott) [RHEL-157318]
  - arm64: Convert ID_AA64MMFR0_EL1.TGRAN{4,16,64}_2 to UnsignedEnum (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix missing <asm/stackpage/nvhe.h> include (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Calculate hyp VA size only once (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Don't blindly set set PSTATE.PAN on guest exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Respect stage-2 write permssion when setting stage-1 AF (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove unused vcpu_{clear,set}_wfx_traps() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove unused parameter in synchronize_vcpu_pstate() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove extra argument for __pvkm_host_{share,unshare}_hyp() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inject UNDEF for a register trap without accessor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Copy FGT traps to unprotected pKVM VCPU on VCPU load (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix EL2 S1 XN handling for hVHE setups (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Check for vGICv3 when clearing TWI (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove ISB after writing FPEXC32_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Shuffle KVM_HOST_DATA_FLAG_* indices (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix comment in fpsimd_lazy_switch_to_host() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: at: Update AF on software walk only if VM has FEAT_HAFDBS (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: at: Use correct HA bit in TCR_EL2 when regime is EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Document KVM_PGTABLE_PROT_{UX,PX} (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix spelling mistake "Unexpeced" -> "Unexpected" (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add break to default case in kvm_pgtable_stage2_pte_prot() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add endian casting to kvm_swap_s[12]_desc() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix compilation when CONFIG_ARM64_USE_LSE_ATOMICS=n (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Add test for AT emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Expose hardware access flag management to NV guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Implement HW access flag management in stage-2 SW PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Implement HW access flag management in stage-1 SW PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Propagate PTW errors up to AT emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add helper for swapping guest descriptor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Use pgtable definitions in stage-2 walk (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle endianness in read helper for emulated PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Stop passing vCPU through void ptr in S2 PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Call helper for reading descriptors directly (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Advertise support for FEAT_XNX (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Teach ptdump about FEAT_XNX permissions (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Consider all 7 possible levels of cache (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Remove ARM64_FEATURE_FIELD_BITS and its last user (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add timer deactivation test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add Group-0 enable test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add asymmetric SPI deaectivation test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Perform EOImode==1 deactivation in ack order (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Remove LR-bound limitation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Exclude timer-controlled interrupts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Change configuration before enabling interrupt (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Fix GUEST_ASSERT_IAR_EMPTY() helper (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: gic_v3: Disable Group-0 interrupts by default (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: gic_v3: Add irq group setting helper (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Always trap GICV_DIR register (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Handle deactivation via GICV_DIR traps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Handle LR overflow when EOImode==0 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Force exit to sync ICH_HCR_EL2.En (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: nv: Plug L1 LR sync into deactivation primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: nv: Resync LRs/VMCR/HCR early for better MI emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Avoid broadcast kick on CPUs lacking TDIR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle in-LR deactivation when possible (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Add SPI tracking to handle asymmetric deactivation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Set ICH_HCR_EL2.TDIR when interrupts overflow LR capacity (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Add GICv2 SGI handling to deactivation primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle deactivation via ICV_DIR_EL1 traps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle LR overflow when EOImode==0 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use MI to detect groups being enabled/disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Move undeliverable interrupts to the end of ap_list (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Invert ap_list sorting to push active interrupts out (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Make vgic_target_oracle() globally available (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Turn kvm_vgic_vcpu_enable() into kvm_vgic_vcpu_reset() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Revamp vgic maintenance interrupt configuration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Eagerly save VMCR on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Compute vgic state irrespective of the number of interrupts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Extract LR computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Extract LR folding primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Decouple GICH_HCR programming from LRs being loaded (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Preserve EOIcount on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Extract LR computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Extract LR folding primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Decouple ICH_HCR_EL2 programming from LRs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Preserve EOIcount on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Drop LPI active state when folding LRs (Sebastian Ott) [RHEL-157318]
  - irqchip/gic: Add missing GICH_HCR control bits (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add LR overflow handling documentation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add tracking of vgic_irq being present in a LR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Repack struct vgic_irq fields (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Detect and work around the lack of ICV_DIR_EL1 trapping (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic-v3: Fix GICv3 trapping in protected mode (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Turn vgic-v3 errata traps into a patched-in constant (Sebastian Ott) [RHEL-157318]
  - irqchip/gic: Expose CPU interface VA to KVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add support for FEAT_XNX stage-2 permissions (Sebastian Ott) [RHEL-157318]
  - arm64: Detect FEAT_XNX (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Reschedule as needed when destroying the stage-2 page-tables (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Split kvm_pgtable_stage2_destroy() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Only drop references on empty tables in stage2_free_walker (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Assert GICR_TYPER.Processor_Number matches selftest CPU number (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: SYNC after guest ITS setup in vgic_lpi_stress (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use kvzalloc() for kvm struct allocation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Drop useless __GFP_HIGHMEM from kvm struct allocation (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Add ICH_VMCR_EL2 (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Move generation of RES0/RES1/UNKN to function (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Support feature-specific fields with 'Prefix' descriptor (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Fix checks for incomplete sysreg definitions (Sebastian Ott) [RHEL-157318]
  - Documentation: kvm: new UAPI for handling SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: selftests: Test for KVM_EXIT_ARM_SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: arm64: VM exit to userspace to handle SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: arm64: vgic-v3: Trap all if no in-kernel irqchip (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v3: Only set ICH_HCR traps for v2-on-v3 or v3 guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Enable nested for GICv5 host with FEAT_GCIE_LEGACY (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use ARM64_HAS_GICV5_LEGACY for GICv5 probing (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v5: Probe for GICv5 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v5: Support GICv3 compat (Sebastian Ott) [RHEL-157318]
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Ricardo Robaina) [RHEL-144438]
  - wifi: ath10k: fix station lookup failure during disconnect (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cw1200: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: correct use sequence of driver_data in skb->info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: pause TCM on fast resume (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: cancel mlo_scan_start_wk (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: correctly decode TTLM with default link map (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: ignore link disabled flag from userspace (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: apply advertised TTLM from association response (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: parse all TTLM entries (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't perform DA check on S1G beacon (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix wrong P2P device link id issue (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix dead lock while flushing management frames (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix scan state stuck in ABORTING after cancel_remain_on_channel (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: cancel scan only on active scan vdev (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: correctly check if CSA is active (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Fix bitrate calculation overflow for HE rates (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: don't force radio frequency check in freq_to_idx() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: collect station statistics earlier when disconnect (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: restore non-chanctx injection behaviour (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211_hwsim: disable BHs for hwsim_radio_lock (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't iterate not running interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: avoid kernel-infoleak from struct iw_point (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Remove blank line after mt792x firmware version dmesg (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: mt76: Strip whitespace from build ddate" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: do not use old MBSSID elements (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't WARN for connections on invalid channels (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: allow sharing identical chanctx for S1G interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: include s1g_primary_2mhz when comparing chandefs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: include s1g_primary_2mhz when sending chandef (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: correct FILS status codes (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Strip whitespace from build ddate (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: skip ieee80211_iter_keys() on scanning link remove (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: skip deflink accounting for offchannel links (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: move mt7996_update_beacons under mt76 mutex (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7925: ensure the 6GHz A-MPDU density cap from the hardware. (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix EMI rings for RRO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix MLO set key and group key issues (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix MLD group index assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: use correct link_id when filling TXD and TXP (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: set link_valid field when initializing wcid (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix teardown command for an MLD peer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: support fixed rate for link station (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix implicit beamforming support for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: no need to wait ACK event for SDO command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix max nss value when getting rx chainmask (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7925: cqm rssi low/high event notify (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: replace use of system_wq with system_percpu_wq (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: adjust BSS conf pointer handling (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: mt76: mt792x: improve monitor interface handling" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mmio_*_copy fix byte order and alignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Use of_reserved_mem_region_to_resource() for "memory-region" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix typos in comments (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Add the capability to set TX token start ID (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Add mt76_dev pointer in mt76_queue struct. (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Move Q_READ/Q_WRITE definitions in dma.h (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Remove useless check in mt7996_msdu_page_get_from_cache() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: relicense to BSD-3-Clause-Clear (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: fix license/copyright of util.h (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: use GFP_DMA32 for page_pool buffer allocation (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7915: add bf backoff limit table support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Fix DTS power-limits on little endian systems (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: connac: Replace memcpy + hard-coded size with strscpy (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Remove unnecessary link_id checks in mt7996_tx (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: stop radar detection in cfg80211_leave() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: use cfg80211_leave() in iftype change (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix channel switching code (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Enable 40 MHz width by default (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix RX channel width reported by RTL8192FU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix the 40 MHz subchannel for RTL8192EU, RTL8723BU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Make RTL8192CU, RTL8723AU TX with 40 MHz width (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852a: correct field mask of reset DAC/ADC FIFO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: refactor CMAC packet handlers (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: refactor CMAC crypt functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: utilize the newly defined CMAC constants (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add generic MMIE struct defines (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix CMAC functions not handling errors (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: replace use of system_unbound_wq with system_dfl_wq (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add support for 6GHz AP role not relevant AP type (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add default ID 0bda:b831 for RTL8831BU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: use separated function to set RX filter (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: correct user macid mask of RX info for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: update format of addr cam H2C command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: add addr cam H2C command v1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fill addr cam H2C command by struct (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: align RA H2C format v1 for RTL8922A (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: print band and port where beacon update on (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: ignore DCFO if not defined in chip_info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: consider type 15 in BB gain table (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: update wcpu_on to download firmware for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: remove undefined bit B_BE_PPDU_MAC_INFO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: calling BB pre-init by chips with/without BB MCU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: separate pre-init code before downloading firmware (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: part size to download firmware by header info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: flush TX queue before deleting key (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: rtw8852bu: Added dev id for ASUS AX57 NANO USB Wifi dongle (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: configure RX antenna if chips can support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: do RF calibration once setting channel when running pure monitor mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: consider data rate/bandwidth/GI for injected packets (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: fix out-of-bounds access in rtw89_phy_read_txpwr_limit() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: add compensation of thermal value from efuse calibration (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: debug: add parser to diagnose along DIAG_MAC fw element (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: parse firmware element of DIAG_MAC (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: pci: add to read PCI configuration space from common code (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: make monitor link info check more specific (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: track MU-MIMO configuration on disabled interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: Add fallback mechanism for INDOOR_SP connection (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: clean up duplicate ap_power handling (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: use a C99 initializer in wiphy_register (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: rtl8188ee: correct allstasleep in P2P PS H2C command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Enable the new rtw89_8852au module (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852au.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852a: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852a_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852a_dle_mem_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Use the correct power sequences for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: fix doc of struct key_params (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove unnecessary vlan NULL check (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: pass frame type to element parsing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove "disabling VHT" message (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add and use chanctx usage iteration (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: simplify ieee80211_recalc_chanctx_min_def() API (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove chanctx to link back-references (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: make link iteration safe for 'break' (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split NAN definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split P2P definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split S1G definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split EHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split HE definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split VHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split HT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split mesh definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix timeout error during beacon stats retrieval (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Make firmware stats reset caller-driven (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: process TX wait skbs for USB via C2H handler (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: provide TX reports for management frames (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: handle IEEE80211_TX_CTL_REQ_TX_STATUS frames for USB (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: anchor TX URBs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fill TX descriptor of FWCMD in shortcut (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: implement C2H TX report handler (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: refine rtw89_core_tx_wait_complete() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: use ieee80211_free_txskb() where appropriate (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: fix leak in rtw89_usb_write_port() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: Add BUFFALO WI-U3-866DHP to the USB ID list (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: 8822c: use fixed rate and bandwidth to reply CSI packets (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Enable the new rtw89_8852cu module (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852cu.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852c_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852c_dle_mem_usb{2,3} (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: Fix rtw8852c_pwr_{on,off}_func() for USB (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Fix rtw89_mac_dmac_func_pre_en_ax() for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_post_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_pre_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Move bulk out map to new struct rtw89_usb_info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw89_core_get_ch_dma_v2() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8832cu: turn off TX partial mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: use = {} to initialize bmi_target_info instead of memset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: use = {} to initialize pm_qos_request instead of memset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: unassign arvif on scan vdev create failure (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: enforce vdev limit in ath12k_mac_vdev_create() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Set EHT fixed rates for associated STAs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add EHT rates to ath12k_mac_op_set_bitrate_mask() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add EHT fixed GI/LTF (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add EHT MCS/NSS rates to Peer Assoc (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add EHT rate handling to existing set rate functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: generalize GI and LTF fixed rate functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix error handling in creating hardware group (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix reusing m3 memory (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: Allow HT Action frame processing on 6 GHz when HE is supported (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rt2x00: add nvmem eeprom support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add RX flag to report radiotap VHT information (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: check for NULL pointer after kmalloc (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: cfg: fix a few device names (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: Move EMLSR prints to IWL_DL_EHT (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: disable EHT if the device doesn't allow it (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: use FW_CHECK on bad ROC notification (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm/mld: report non-HT frames as 20 MHz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fix build when mvm/mld not configured (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: check the validity of noa_len (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: stop checking the firmware's error pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: be more chatty when we fail to find a wifi7 device (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fw: remove support of several iwl_lari_config_change_cmd versions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: include raw PHY notification in radiotap (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: update to new sniffer API (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: set wiphy::iftype_ext_capab dynamically (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: support get/set_antenna (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: cleanup unsupported phy command versions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fix remaining kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: tests: check listed PCI IDs have configs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: cfg: add new device names (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: iwlmld is always used for wifi7 devices (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: move rate conversions to utils.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: reschedule check_tpt_wk also not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: remove support from of alive notif version 6 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: align the name of iwl_alive_ntf_v6 to the convention (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: improve scan time on 6 GHz band (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: restart hardware to recover firmware if power-save becomes abnormal (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: fix ADC oscillation in 160MHz affecting RX performance (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: regd: apply ACPI policy even if country code is programmed (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: support EHT rate pattern via bitrate mask (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mlo: handle needed H2C when link switching is requested by stack (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: use skb_dequeue() for queued ROC packets to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: splice C2H events queue to local to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add parameters to radio-specific debugfs directories (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add debugfs support for multi-radio wiphy (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: default S1G chandef width to 1MHz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: get probe response chan via ieee80211_get_channel_khz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: reset CRC valid after CSA (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211_hwsim: advertise puncturing feature support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: validate radio frequency range for monitor mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rt2x00: check retval for of_get_mac_address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Assert base_lock is held before allocating REO update element (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add support for BSS color change (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: Correctly use "ab" macro parameter (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: advertise NL80211_FEATURE_TX_POWER_INSERTION (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: add support for Tx Power insertion in RRM action frame (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: wrap ath11k_mac_op_get_txpower() with lock-aware internal helper (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: relocate some Tx power related functions in mac.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: fix peer HE MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: Support for FTM TLV test commands (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Use correct power off sequence for RTL8192CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Dump the efuse right after reading it (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Report the signal strength only if it's known (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Replace hardcoded strings with helper functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add MODULE_FIRMWARE() entries (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix TX and RX MCS rate configurations in HE mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix NSS value update in ext_rx_stats (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Defer vdev bring-up until CSA finalize to avoid stale beacon (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: track dropped MSDU buffer type packets in REO exception ring (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix MSDU buffer types handling in RX error path (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: move recovery check logic into a new work (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - selftests: net: unify the Makefile formats (Hangbin Liu) [RHEL-155384]
  - selftests: net: sort configs (Hangbin Liu) [RHEL-155384]
  - lib/test_vmalloc.c: minor fixes to test_vmalloc.c (Audra Mitchell) [RHEL-151432]
  - kselftest: mm: fix typos in test_vmalloc.sh (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc: remove xfail condition check (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc: add no_block_alloc_test case (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: introduce xfail for failing tests (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: restrict default test mask to avoid test warnings (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: use late_initcall() if built-in for init ordering (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: allow built-in execution (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: replace RWSEM to SRCU for setup (Audra Mitchell) [RHEL-151432]
  - bus: mhi: host: pci_generic: Add Foxconn T99W760 modem (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: ep: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: ep: Make mhi_ep_bus_type const (Jose Ignacio Tornos Martinez) [RHEL-151312]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-226
changelog:
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - rxrpc: linearize incoming DATA packet when it has paged frags


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-227.el10]
changelog:
  - PCI/PTM: Drop pci_enable_ptm() granularity parameter (CKI Backport Bot) [RHEL-172222]
  - x86/mce: Remove the redundant mce_hygon_feature_init() (Steve Best) [RHEL-130026]
  - x86/mce: Ensure user polling settings are honored when restarting timer (Steve Best) [RHEL-130026]
  - x86/mce/amd: Fix threshold limit reset (Steve Best) [RHEL-130026]
  - x86/mce/apei: Handle variable SMCA BERT record size (Steve Best) [RHEL-130026]
  - x86/mce/mcelog: Use xchg() to get and clear the flags (Steve Best) [RHEL-130026]
  - x86/mce/inject: Remove call to mce_notify_irq() (Steve Best) [RHEL-130026]
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Steve Best) [RHEL-130026]
  - x86/mce/threshold: Remove the redundant this_cpu_dec_return() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Filter bogus hardware errors on Zen3 clients (Steve Best) [RHEL-130026]
  - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs (Steve Best) [RHEL-130026]
  - x86/mce: Handle AMD threshold interrupt storms (Steve Best) [RHEL-130026]
  - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Add support for physical address valid bit (Steve Best) [RHEL-130026]
  - EDAC/mce_amd: Add support for FRU text in MCA (Steve Best) [RHEL-130026]
  - x86/mce: Save and use APEI corrected threshold limit (Steve Best) [RHEL-130026]
  - x86/mce/amd: Define threshold restart function for banks (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove redundant reset_block() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Support SMCA Corrected Error Interrupt (Steve Best) [RHEL-130026]
  - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD DFR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD THR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/mce: Add a clear_bank() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' (Steve Best) [RHEL-130026]
  - x86/mce: Move machine_check_poll() status checks to helper functions (Steve Best) [RHEL-130026]
  - x86/mce: Separate global and per-CPU quirks (Steve Best) [RHEL-130026]
  - x86/mce: Convert family/model mixed checks to VFM-based checks (Steve Best) [RHEL-130026]
  - x86/mce: Do 'UNKNOWN' vendor check early (Steve Best) [RHEL-130026]
  - x86/mce: Break up __mcheck_cpu_apply_quirks() (Steve Best) [RHEL-130026]
  - x86/mce: Make four functions return bool (Steve Best) [RHEL-130026]
  - x86/mce: Add wrapper for struct mce to export vendor specific info (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only SMCA init (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only init (Steve Best) [RHEL-130026]
  - x86/mce: Set CR4.MCE last during init (Steve Best) [RHEL-130026]
  - x86/mce: Remove __mcheck_cpu_init_early() (Steve Best) [RHEL-130026]
  - x86/mce: Cleanup bank processing on init (Steve Best) [RHEL-130026]
  - x86/mce/amd: Put list_head in threshold_bank (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove smca_banks_map (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Rename threshold restart function (Steve Best) [RHEL-130026]
  - x86/msr: Convert __rdmsr() uses to native_rdmsrq() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Convert __wrmsr() uses to native_wrmsr{,q}() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Add the native_rdmsrq() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'native_wrmsrl()' to 'native_wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' (Steve Best) [RHEL-130026]
  - x86/msr: Add explicit includes of <asm/msr.h> [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_on_cpu()' to 'rdmsrq_on_cpu()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl()' to 'wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl()' to 'rdmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on 'u32' MSR indices in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on u64 in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Harmonize the prototype and definition of do_trace_rdpmc() (Steve Best) [RHEL-130026]
  - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161187]
  - io_uring/kbuf: limit legacy provided buffer lists to USHRT_MAX (Jeff Moyer) [RHEL-161187]
  - redhat/configs: Enable FFA for TPM on AArch64 (Marcin Juszkiewicz) [RHEL-167985]
  - platform/x86/intel/pmc: Remove double empty line (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Enable substate residencies for multiple PMCs (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Move LPM mode attributes to PMC (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Change LPM mode fields to u8 (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Wildcat Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Add Wildcat Lake support to Intel PMC SSRAM Telemetry (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Remove redundant has_die_c6 variable (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Rename PMC index variable to pmc_idx (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add DMU GUID to Arrow Lake U/H (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add support for multiple DMU GUIDs (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Replace dev_warn() with dev_dbg() (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Panther Lake (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Show substate requirement for S0ix blockers (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Improve function to show substate header (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Move telemetry endpoint register handling (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Lunar Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: use kcalloc() instead of kzalloc() (Steve Best) [RHEL-129781]
  - redhat: configs: Enable CONFIG_SENSORS_SPD5118 (Jennifer Berringer) [RHEL-168906]
  - i3c: master: dw-i3c: Balance PM runtime usage count on probe failure (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Detect and support 16-bit register addressing (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Support 16-bit addressing for NVMEM accesses (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Name chips taking the specification literally (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Split into common and I2C specific code (Jennifer Berringer) [RHEL-168906]
  - hwmon: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Disable runtime PM on Agilex5 to avoid bus hang on IBI (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add shutdown support to dw_i3c_master driver (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add quirk to address OD/PP timing issue on AMD platform (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add support for AMDI0015 ACPI ID (Jennifer Berringer) [RHEL-168906]
  - i3c: simplify combined i3c/i2c dependencies (Jennifer Berringer) [RHEL-168906]
  - i3c: Move device name assignment after i3c_bus_init (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Simplify with scoped for each OF child loop (Jennifer Berringer) [RHEL-168906]
  - i3c: fix refcount inconsistency in i3c_master_register (Jennifer Berringer) [RHEL-168906]
  - device property: Add scoped fwnode child node iterators (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Drop duplicate check before calling OF APIs (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Improve initialization of numbered I2C adapters (Jennifer Berringer) [RHEL-168906]
  - thermal: intel: int340x: soc_slider: Set offset only for balanced mode (Steve Best) [RHEL-130009]
  - thermal: int340x: Fix sysfs group leak on DLVR registration failure (Steve Best) [RHEL-130009]
  - drivers: thermal: intel: tcc_cooling: Drop redundant local variable (Steve Best) [RHEL-130009]
  - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature (Steve Best) [RHEL-130009]
  - thermal: intel: Use sysfs_emit() in a sysfs show function (Steve Best) [RHEL-130009]
  - thermal: intel: fix typo "nagative" in comment for cpu argument (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use sysfs_emit{_at}() in sysfs show functions (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Enable slow workload type hints (Steve Best) [RHEL-130009]
  - thermal: intel: intel_pch_thermal: Drop explicit driver data clearing (Steve Best) [RHEL-130009]
  - thermal: intel: intel_tcc_cooling: Add CPU models in the support list (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Wildcat Lake (Steve Best) [RHEL-130009]
  - ACPI: DPTF: Support Nova Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add DLVR support for Nova Lake (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Add Nova Lake processor thermal device (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use symbolic constant for UUID comparison (Steve Best) [RHEL-130009]
  - thermal: intel: Select INT340X_THERMAL from INTEL_SOC_DTS_THERMAL (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Power Slider: Validate slider_balance range (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter to change slider offset (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter for balanced Slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Panther Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add support for power slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Remove redundant acpi_has_method() call (Steve Best) [RHEL-130009]
  - tools/power/x86/intel-speed-select: v1.25 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Allow non root users (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Optimize suspend/resume callbacks (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Check for admin capability for write commands (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Store and restore all domains data (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Add missing write block check (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Use pkg-config for libnl-3.0 detection (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: v1.24 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Reset isst_turbo_freq_info for invalid buckets (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Check feature status (Krzysztof Pawlinski) [RHEL-133093]
  - rh_message.h: update support status of mlx5 devices (Scott Weaver) [RHEL-142605 RHEL-142608 RHEL-166116]
  - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults (Charles Mirabile) [RHEL-154155]
  - x86/resctrl: Fix SNC detection (Phil Auld) [RHEL-147186]
  - x86/topo: Fix SNC topology mess (Phil Auld) [RHEL-147186]
  - x86/topo: Replace x86_has_numa_in_package (Phil Auld) [RHEL-147186]
  - x86/topo: Add topology_num_nodes_per_package() (Phil Auld) [RHEL-147186]
  - x86/numa: Store extra copy of numa_nodes_parsed (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Phil Auld) [RHEL-145610]
  - sched/core: Fix wakeup_preempt's next_class tracking (Phil Auld) [RHEL-147186]
  - sched/fair: Only set slice protection at pick time (Phil Auld) [RHEL-147186]
  - sched/eevdf: Update se->vprot in reweight_entity() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix lag clamp (Phil Auld) [RHEL-147186]
  - sched/fair: Fix zero_vruntime tracking (Phil Auld) [RHEL-147186]
  - sched/clock: Avoid false sharing for sched_clock_irqtime (Phil Auld) [RHEL-147186]
  - sched/rt: Skip currently executing CPU in rto_next_cpu() (Phil Auld) [RHEL-147186]
  - sched/cpufreq: Use %pe format for PTR_ERR() printing (Phil Auld) [RHEL-147186]
  - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups (Phil Auld) [RHEL-147186]
  - sched/debug: Fix dl_server (re)start conditions (Phil Auld) [RHEL-147186]
  - sched/debug: Add support to change sched_ext server params (Phil Auld) [RHEL-147186]
  - sched_ext: Add a DL server for sched_ext tasks (Phil Auld) [RHEL-147186]
  - sched/debug: Stop and start server based on if it was active (Phil Auld) [RHEL-147186]
  - sched/deadline: Clear the defer params (Phil Auld) [RHEL-147186]
  - sched/debug: Fix updating of ppos on server write ops (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix 'stuck' dl_server (Phil Auld) [RHEL-147186]
  - sched/fair: Revert force wakeup preemption (Phil Auld) [RHEL-147186]
  - sched/fair: Disable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched: Update rq->avg_idle when a task is moved to an idle CPU (Phil Auld) [RHEL-147186]
  - sched/debug: Convert copy_from_user() + kstrtouint() to kstrtouint_from_user() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix pelt clock sync when entering idle (Phil Auld) [RHEL-147186]
  - sched/fair: Remove nohz.nr_cpus and use weight of cpumask instead (Phil Auld) [RHEL-147186]
  - sched/fair: Change likelyhood of nohz.nr_cpus (Phil Auld) [RHEL-147186]
  - sched/fair: Fix math notation errors in avg_vruntime comment (Phil Auld) [RHEL-147186]
  - sched/fair: Move checking for nohz cpus after time check (Phil Auld) [RHEL-147186]
  - sched: Audit MOVE vs balance_callbacks (Phil Auld) [RHEL-147186]
  - sched: Deadline has dynamic priority (Phil Auld) [RHEL-147186]
  - sched/deadline: Use ENQUEUE_MOVE to allow priority change (Phil Auld) [RHEL-147186]
  - sched/deadline: Ensure get_prio_dl() is up-to-date (Phil Auld) [RHEL-147186]
  - sched/deadline: Avoid double update_rq_clock() (Phil Auld) [RHEL-147186]
  - sched: Fold rq-pin swizzle into __balance_callbacks() (Phil Auld) [RHEL-147186]
  - sched: Provide idle_rq() helper (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix server stopping with runnable tasks (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix potential race in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/deadline: Remove unnecessary comment in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Drop useless cpumask_empty() in find_energy_efficient_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Simplify task_numa_find_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Use cpumask_weight_and() in sched_balance_find_dst_group() (Phil Auld) [RHEL-147186]
  - sched: Reorder some fields in struct rq (Phil Auld) [RHEL-147186]
  - sched/fair: Fix sched_avg fold (Phil Auld) [RHEL-147186]
  - sched: Fix faulty assertion in sched_change_end() (Phil Auld) [RHEL-147186]
  - sched/core: Rework sched_class::wakeup_preempt() and rq_modified_*() (Phil Auld) [RHEL-147186]
  - sched_ext: Rename pnt_seq to kick_sync (Phil Auld) [RHEL-147186]
  - sched_ext: Don't kick CPUs running higher classes (Phil Auld) [RHEL-147186]
  - sched_ext: Fix SCX_KICK_WAIT to work reliably (Phil Auld) [RHEL-147186]
  - sched_ext: Allow forcibly picking an scx task (Phil Auld) [RHEL-147186]
  - sched_ext: fix flag check for deferred callbacks (Phil Auld) [RHEL-147186]
  - sched/ext: Fold balance_scx() into pick_task_scx() (Phil Auld) [RHEL-147186]
  - sched_ext: defer queue_balance_callback() until after ops.dispatch (Phil Auld) [RHEL-147186]
  - sched_ext: Move internal type and accessor definitions to ext_internal.h (Phil Auld) [RHEL-147186]
  - sched_ext: Make explicit scx_task_iter_relock() calls unnecessary (Phil Auld) [RHEL-147186]
  - sched/fair: Join two #ifdef CONFIG_FAIR_GROUP_SCHED blocks (Phil Auld) [RHEL-147186]
  - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics (Phil Auld) [RHEL-147186]
  - sched/fair: Sort out 'blocked_load*' namespace noise (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight (Phil Auld) [RHEL-147186]
  - sched/fair: Clean up comments in 'struct cfs_rq' (Phil Auld) [RHEL-147186]
  - sched/fair: Fold the sched_avg update (Phil Auld) [RHEL-147186]
  - <linux/compiler_types.h>: Add the __signed_scalar_typeof() helper (Phil Auld) [RHEL-147186]
  - sched/fair: Remove superfluous rcu_read_lock() (Phil Auld) [RHEL-147186]
  - sched/fair: Avoid rq->lock bouncing in sched_balance_newidle() (Phil Auld) [RHEL-147186]
  - sched/fair: Switch to rcu_dereference_all() (Phil Auld) [RHEL-147186]
  - sched/headers: Rename rcu_dereference_check_sched_domain() => rcu_dereference_sched_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Limit hrtick work (Phil Auld) [RHEL-147186]
  - sched/core: Add assertions to QUEUE_CLASS (Phil Auld) [RHEL-147186]
  - sched/core: Fix psi_dequeue() for Proxy Execution (Phil Auld) [RHEL-147186]
  - sched/headers: Remove whitespace noise from kernel/sched/sched.h (Phil Auld) [RHEL-147186]
  - sched/rt: Remove a preempt-disable section in rt_mutex_setprio() (Phil Auld) [RHEL-147186]
  - sched/deadline: Walk up cpuset hierarchy to decide root domain when hot-unplug (Phil Auld) [RHEL-147186]
  - cgroup/cpuset: Introduce cpuset_cpus_allowed_locked() (Phil Auld) [RHEL-147186]
  - sched/fair: Enable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched/fair: Reimplement NEXT_BUDDY to align with EEVDF goals (Phil Auld) [RHEL-147186]
  - sched/deadline: Use cpumask_weight_and() in dl_bw_cpus (Phil Auld) [RHEL-147186]
  - sched/deadline: Minor cleanup in select_task_rq_dl() (Phil Auld) [RHEL-147186]
  - sched/deadline: Document dl_server (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server stop condition (Phil Auld) [RHEL-147186]
  - sched/eevdf: Fix min_vruntime vs avg_vruntime (Phil Auld) [RHEL-147186]
  - sched: Fix proxy/current (push,pull)ability (Phil Auld) [RHEL-147186]
  - sched: Start blocked_on chain processing in find_proxy_task() (Phil Auld) [RHEL-147186]
  - sched: Add an initial sketch of the find_proxy_task() function (Phil Auld) [RHEL-147186]
  - sched: Fix runtime accounting w/ split exec & sched contexts (Phil Auld) [RHEL-147186]
  - sched: Move update_curr_task logic into update_curr_se (Phil Auld) [RHEL-147186]
  - configs: Make sure PROXY_EXEC is off (Phil Auld) [RHEL-147186]
  - sched: Add CONFIG_SCHED_PROXY_EXEC & boot argument to enable/disable (Phil Auld) [RHEL-147186]
  - locking/mutex: Rework task_struct::blocked_on (Phil Auld) [RHEL-147186]
  - sched/core: Remove double update_rq_clock() in __set_cpus_allowed_ptr_locked() (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-147186]
  - sched/core: Optimize core cookie matching check (Phil Auld) [RHEL-147186]
  - sched/core: Add comment explaining force-idle vruntime snapshots (Phil Auld) [RHEL-147186]
  - sched/proxy: Yield the donor task (Phil Auld) [RHEL-147186]
  - sched: Fix the do_set_cpus_allowed() locking fix (Phil Auld) [RHEL-147186]
  - sched: Remove never used code in mm_cid_get() (Phil Auld) [RHEL-147186]
  - sched: Detect per-class runqueue changes (Phil Auld) [RHEL-147186]
  - sched: Add support to pick functions to take rf (Phil Auld) [RHEL-147186]
  - sched: Match __task_rq_{,un}lock() (Phil Auld) [RHEL-147186]
  - sched: Mandate shared flags for sched_change (Phil Auld) [RHEL-147186]
  - sched: Cleanup the sched_change NOCLOCK usage (Phil Auld) [RHEL-147186]
  - sched: Make __do_set_cpus_allowed() use the sched_change pattern (Phil Auld) [RHEL-147186]
  - sched: Rename do_set_cpus_allowed() (Phil Auld) [RHEL-147186]
  - sched: Add locking comments to sched_class methods (Phil Auld) [RHEL-147186]
  - sched: Move sched_class::prio_changed() into the change pattern (Phil Auld) [RHEL-147186]
  - sched: Fix do_set_cpus_allowed() locking (Phil Auld) [RHEL-147186]
  - sched: Fix migrate_disable_switch() locking (Phil Auld) [RHEL-147186]
  - sched/deadline: Prepare for switched_from() change (Phil Auld) [RHEL-147186]
  - sched: Cleanup sched_delayed handling for class switches (Phil Auld) [RHEL-147186]
  - sched: Fold sched_class::switch{ing,ed}_{to,from}() into the change pattern (Phil Auld) [RHEL-147186]
  - sched/fair: Only update stats for allowed CPUs when looking for dst group (Phil Auld) [RHEL-147186]
  - sched: Employ sched_change guards (Phil Auld) [RHEL-147186]
  - cleanup: Fix documentation build error for ACQUIRE updates (Phil Auld) [RHEL-147186]
  - tools/testing: add linux/args.h header and fix radix, VMA tests (Phil Auld) [RHEL-147186]
  - cleanup: Introduce ACQUIRE() and ACQUIRE_ERR() for conditional locks (Phil Auld) [RHEL-147186]
  - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Phil Auld) [RHEL-147186]
  - sched: Re-arrange the {EN,DE}QUEUE flags (Phil Auld) [RHEL-147186]
  - sched/topology,x86: Fix build warning (Phil Auld) [RHEL-147186]
  - sched/topology: Fix sched domain build error for GNR, CWF in SNC-3 mode (Phil Auld) [RHEL-147186]
  - sched/fair: Forfeit vruntime on yield (Phil Auld) [RHEL-147186]
  - sched/deadline: only set free_cpus for online runqueues (Phil Auld) [RHEL-147186]
  - sched: Create architecture specific sched domain distances (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix race in push_dl_task() (Phil Auld) [RHEL-147186]
  - vfio/nvgrace-gpu: register device memory for poison handling (Aristeu Rozanski) [RHEL-73608]
  - mm: add stubs for PFNMAP memory failure registration functions (Aristeu Rozanski) [RHEL-73608]
  - mm: fixup pfnmap memory failure handling to use pgoff (Aristeu Rozanski) [RHEL-73608]
  - mm: handle poisoning of pfn without struct pages (Aristeu Rozanski) [RHEL-73608]
  - mm: change ghes code to allow poison of non-struct pfn (Aristeu Rozanski) [RHEL-73608]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-227
changelog:
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
  - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
  - net: skbuff: propagate shared-frag marker through pskb_copy()


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-227
changelog:
  - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe backport
    of upstream 31e62c2ebbfd, Qualys Security Advisory)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-228.el10]
changelog:
  - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - s390/barrier: Make array_index_mask_nospec() __always_inline (Ramesh Chhetri) [RHEL-174629]
  - s390/entry: Scrub r12 register on kernel entry (Ramesh Chhetri) [RHEL-174629]
  - bitmap: introduce bitmap_weighted_xor() (Michal Schmidt) [RHEL-174745]
  - bitmap: add test_zero_nbits() (Michal Schmidt) [RHEL-174745]
  - bitmap: exclude nbits == 0 cases from bitmap test (Michal Schmidt) [RHEL-174745]
  - bitmap: test bitmap_weight() for more (Michal Schmidt) [RHEL-174745]
  - bitmap: add bitmap_weight_from() (Michal Schmidt) [RHEL-174745]
  - bitmap: align test_bitmap output (Michal Schmidt) [RHEL-174745]
  - bitmap: switch test to scnprintf("%*pbl") (Michal Schmidt) [RHEL-174745]
  - bitmap: Add test for out-of-boundary modifications for scatter & gather (Michal Schmidt) [RHEL-174745]
  - cpumask: Introduce cpumask_weighted_or() (Michal Schmidt) [RHEL-174745]
  - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Michal Schmidt) [RHEL-174745]
  - bitmap: remove _check_eq_u32_array (Michal Schmidt) [RHEL-174745]
  - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-172305]
  - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-172305]
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172748] {CVE-2026-43051}
  - redhat/configs: Enable MPAM options (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Make resctrl_mon_ctx_waiters static (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix the check for no monitor components found (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix MBA CDP alloc_capable handling on unmount (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add initial MPAM documentation (Gavin Shan) [RHEL-164228]
  - arm_mpam: Quirk CMN-650's CSU NRDY behaviour (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-6 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-4 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-1 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add quirk framework (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Call resctrl_init() on platforms that can support resctrl (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Select ARCH_HAS_CPU_RESCTRL (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add empty definitions for assorted resctrl functions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Update the rmid reallocation limit (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_rmid_read() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Allow resctrl to allocate monitors (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for csu counters (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add monitor initialisation and domain boilerplate (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add kunit test for control format conversions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for 'MB' resource (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Wait for cacheinfo to be ready (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add rmid index helpers (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Convert to/from MPAMs fixed-point formats (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Hide CDP emulation behind CONFIG_EXPERT (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add CDP emulation (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add plumbing against arm64 task and cpu hooks (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement helpers to update configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_get_config() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement resctrl_arch_reset_all_ctrls() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Pick the caches we will use as resctrl resources (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add boilerplate cpuhp and domain allocation (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Force guest EL1 to use user-space's partid configuration (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add helpers to change a task or cpu's MPAM PARTID/PMG values (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Initialise and context switch the MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Advertise the CPUs MPAM limits to the driver (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Drop the CONFIG_EXPERT restriction (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Re-initialise MPAM regs when CPU comes online (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Context switch the MPAM registers (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Make MPAMSM_EL1 accesses UNDEF (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Preserve host MPAM configuration when changing traps (Gavin Shan) [RHEL-164228]
  - arm64/sysreg: Add MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm_mpam: Reset when feature configuration bit unset (Gavin Shan) [RHEL-164228]
  - arm_mpam: Ensure in_reset_state is false after applying configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: Force __iomem casts (Gavin Shan) [RHEL-100932]
  - arm_mpam: Disable preemption when making accesses to fake MSC in kunit test (Gavin Shan) [RHEL-100932]
  - arm_mpam: Fix null pointer dereference when restoring bandwidth counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use non-atomic bitops when modifying feature bitmap (Gavin Shan) [RHEL-100932]
  - arm_mpam: Remove duplicate linux/srcu.h header (Gavin Shan) [RHEL-100932]
  - arm_mpam: Stop using uninitialized variables in __ris_msmon_read() (Gavin Shan) [RHEL-100932]
  - MAINTAINERS: new entry for MPAM Driver (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit tests for props_mismatch() (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit test for bitmap reset (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helper to reset saved mbwu state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use long MBWU counters if supported (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe for long/lwd mbwu counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Consider overflow in bandwidth counter state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Track bandwidth counter state for power management (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add mpam_msmon_read() to read monitor value (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers to allocate monitors (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe and reset the rest of the features (Gavin Shan) [RHEL-100932]
  - arm_mpam: Allow configuration to be applied and restored during cpu online (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use a static key to indicate when mpam is enabled (Gavin Shan) [RHEL-100932]
  - arm_mpam: Register and enable IRQs (Gavin Shan) [RHEL-100932]
  - arm_mpam: Extend reset logic to allow devices to be reset any time (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add a helper to touch an MSC from any CPU (Gavin Shan) [RHEL-100932]
  - arm_mpam: Reset MSC controls from cpuhp callbacks (Gavin Shan) [RHEL-100932]
  - arm_mpam: Merge supported features during mpam_enable() into mpam_class (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe the hardware features resctrl supports (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers for managing the locking around the mon_sel registers (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe hardware to find the supported partid/pmg values (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add cpuhp callbacks to probe MSC hardware (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add MPAM MSC register layout definitions (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add the class and component structures for firmware described ris (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate (Gavin Shan) [RHEL-100932]
  - ACPI / MPAM: Parse the MPAM table (Gavin Shan) [RHEL-100932]
  - ACPI: Define acpi_put_table cleanup handler and acpi_get_table_pointer() helper (Gavin Shan) [RHEL-100932]
  - platform: Define platform_device_put cleanup handler (Gavin Shan) [RHEL-100932]
  - arm64: kconfig: Add Kconfig entry for MPAM (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Find cache level by cache-id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add acpi_pptt_cache_v1_full to use pptt cache as one structure (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Stop acpi_count_levels() expecting callers to clear levels (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (Gavin Shan) [RHEL-100932]
  - s390/pfault: Fix virtual vs physical address confusion (Mircea Dragan) [RHEL-170908]
  - lib/vsprintf: Add specifier for printing struct timespec64 (CKI Backport Bot) [RHEL-172105]
  - RDMA/rw: Fix MR pool exhaustion in bvec RDMA READ path (Kamal Heib) [RHEL-163515]
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Import DMA-BUF module in uverbs_std_types_dmabuf file (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check id_priv->restricted_node_type in cma_listen_on_dev() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: select CONFIG_DMA_SHARED_BUFFER (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add DMABUF object type and operations (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Support external FD uobjects (Kamal Heib) [RHEL-163515]
  - RDMA/core: introduce rdma_restrict_node_type() (Kamal Heib) [RHEL-163515]
  - RDMA/umem: don't abuse current->group_leader (Kamal Heib) [RHEL-163515]
  - IB/core: Extend rate limit support for RC QPs (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Kamal Heib) [RHEL-163515]
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Kamal Heib) [RHEL-163515]
  - RDMA/core: add MR support for bvec-based RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: use IOVA-based DMA mapping for bvec RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: add bio_vec based RDMA read/write API (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Kamal Heib) [RHEL-163515]
  - RDMA/iwcm: Fix workqueue list corruption by removing work_list (Kamal Heib) [RHEL-163515]
  - RDMA/core: Avoid exporting module local functions and remove not-used ones (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Remove redundant DMABUF ops check (Kamal Heib) [RHEL-163515]
  - IB/core: Add query_port_speed verb (Kamal Heib) [RHEL-163515]
  - IB/core: Refactor rate_show to use ib_port_attr_to_rate() (Kamal Heib) [RHEL-163515]
  - IB/core: Add helper to convert port attributes to data rate (Kamal Heib) [RHEL-163515]
  - IB/core: Add async event on device speed change (Kamal Heib) [RHEL-163515]
  - IB/cache: update gid cache on client reregister event (Kamal Heib) [RHEL-163515]
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Fix rdma_ucm_query_ib_service_resp struct padding (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Fix leaking the multicast GID table reference (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Kamal Heib) [RHEL-163515]
  - RDMA/core: Reduce cond_resched() frequency in __ib_umem_release (Kamal Heib) [RHEL-163515]
  - RDMA/core: Add new IB rate for XDR (8x) support (Kamal Heib) [RHEL-163515]
  - RDMA/core: Prevent soft lockup during large user memory region cleanup (Kamal Heib) [RHEL-163515]
  - RDMA/restrack: Fix typos in the comments (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Correct typedef and bad line warnings (Kamal Heib) [RHEL-163515]
  - IB/isert: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/iser: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/rdmavt: rdmavt_qp.h: clean up kernel-doc comments (Kamal Heib) [RHEL-163515]
  - RDMA/core: WQ_PERCPU added to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Base cm_id destruction timeout on CMA values (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: fix some kernel-doc warnings (Kamal Heib) [RHEL-163515]
  - RDMA/core: let rdma_connect_locked() call lockdep_assert_held(&id_priv->handler_mutex) (Kamal Heib) [RHEL-163515]
  - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-163515]
  - IB/ipoib: Ignore L3 master device (Kamal Heib) [RHEL-163515]
  - RDMA/core: Use route entry flag to decide on loopback traffic (Kamal Heib) [RHEL-163515]
  - RDMA/core: Squash a single user static function (Kamal Heib) [RHEL-163515]
  - RDMA/core: fix "truely"->"truly" (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support write an event into a CM (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support query resolved service records (Kamal Heib) [RHEL-163515]
  - RDMA/cma: Support IB service record resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Support IB service records resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Add RMPP support for SA queries (Kamal Heib) [RHEL-163515]
  - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-165161]
  - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-171979]
  - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-159000]
  - iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement (Jerry Snitselaar) [RHEL-160189]
  - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (Jerry Snitselaar) [RHEL-160189]
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169737] {CVE-2025-68183}
  - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-147247]
  - x86/platform/uv: Handle deconfigured sockets (Krzysztof Pawlinski) [RHEL-158967]
  - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-164699]
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-164699]
  - net/ipv6: Remove HBH helpers (Michal Schmidt) [RHEL-156515]
  - net: mana: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - gve: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - bnxt_en: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - ice: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx4: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx5e: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on RX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on TX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Introduce payload_len helpers (Michal Schmidt) [RHEL-156515]
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-161120] {CVE-2025-68741}
  - selftests/bpf: Add test to verify the fix of kprobe_write_ctx abuse (Ines Qian) [RHEL-78291]
  - bpf: Fix abuse of kprobe_write_ctx via freplace (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix kprobe multi stacktrace_ips test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace ips test for kprobe_multi/kretprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove hexdump dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove xxd util dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Skip livepatch test when prerequisites are missing (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for livepatch + bpf trampoline (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for exclusive maps (Ines Qian) [RHEL-78291]
  - bpf: Require frozen map for calculating map hash (Ines Qian) [RHEL-78291]
  - bpf: Limit bpf program signature size (Ines Qian) [RHEL-78291]
  - bpf: Fix exclusive map memory leak (Ines Qian) [RHEL-78291]
  - selftests/bpf: Allow selftests to build with older xxd (Ines Qian) [RHEL-78291]
  - bpftool: Allow bpftool to build with openssl < 3 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Update test_tag to use sha256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test widen_imprecise_scalars() with different stack depth (Ines Qian) [RHEL-78291]
  - bpf: account for current allocated stack depth in widen_imprecise_scalars() (Ines Qian) [RHEL-78291]
  - bpf: add _impl suffix for bpf_stream_vprintk() kfunc (Ines Qian) [RHEL-78291]
  - bpf:add _impl suffix for bpf_task_work_schedule* kfuncs (Ines Qian) [RHEL-78291]
  - bpf: Conditionally include dynptr copy kfuncs (Ines Qian) [RHEL-78291]
  - libbpf: Fix powerpc's stack register definition in bpf_tracing.h (Ines Qian) [RHEL-78291]
  - bpf: Sync pending IRQ work before freeing ring buffer (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix redefinition of 'off' as different kind of symbol (Ines Qian) [RHEL-78291]
  - bpf: Fix memory leak in __lookup_instance error path (Ines Qian) [RHEL-78291]
  - selftests: arg_parsing: Ensure data is flushed to disk before reading. (Ines Qian) [RHEL-78291]
  - selftests/bpf: make arg_parsing.c more robust to crashes (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for unpinning htab with internal timer struct (Ines Qian) [RHEL-78291]
  - bpf: Avoid RCU context warning when unpinning htab with internal structs (Ines Qian) [RHEL-78291]
  - libbpf: Fix undefined behavior in {get,put}_unaligned_be32() (Ines Qian) [RHEL-78291]
  - bpf: Finish constification of 1st parameter of bpf_d_path() (Ines Qian) [RHEL-78291]
  - libbpf: Fix missing #pragma in libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for rejection of ALU ops with negative offsets (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - bpf: Reject negative offsets for ALU ops (Ines Qian) [RHEL-78291]
  - libbpf: remove linux/unaligned.h dependency for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_sha256() implementation into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_errstr() into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: remove unused libbpf_strerror_r and STRERR_BUFSIZE (Ines Qian) [RHEL-78291]
  - libbpf: make libbpf_errno.c into more generic libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix realloc size in bpf_get_addrs (Ines Qian) [RHEL-78291]
  - libbpf: Replace AF_ALG with open coded SHA-256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stress test for rqspinlock in NMI (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test case for different expected_attach_type (Ines Qian) [RHEL-78291]
  - bpf: Enforce expected_attach_type for tailcall compatibility (Ines Qian) [RHEL-78291]
  - bpftool: Remove duplicate string.h header (Ines Qian) [RHEL-78291]
  - bpf: Remove duplicate crypto/sha2.h header (Ines Qian) [RHEL-78291]
  - libbpf: Fix error when st-prefix_ops and ops from differ btf (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace map lookup_and_delete_elem test case (Ines Qian) [RHEL-78291]
  - selftests/bpf: Refactor stacktrace_map case with skeleton (Ines Qian) [RHEL-78291]
  - bpf: Add lookup_and_delete_elem for BPF_MAP_STACK_TRACE (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix flaky bpf_cookie selftest (Ines Qian) [RHEL-78291]
  - selftests/bpf: Task_work selftest cleanup fixes (Ines Qian) [RHEL-78291]
  - bpf: Mark kfuncs as __noclone (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe multi write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context ip register change test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context registers changes test (Ines Qian) [RHEL-78291]
  - uprobe: Do not emulate/sstep original instruction when ip is changed (Ines Qian) [RHEL-78291]
  - bpf: Allow uprobe program to change context registers (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for program signing options (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add union argument tests using fexit programs (Ines Qian) [RHEL-78291]
  - bpf: Allow union argument in trampoline based programs (Ines Qian) [RHEL-78291]
  - selftests: bpf: Add tests for signed loads from arena (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - bpf, x86: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - selftests/bpf: add bpf task work stress tests (Ines Qian) [RHEL-78291]
  - selftests/bpf: BPF task work scheduling tests (Ines Qian) [RHEL-78291]
  - bpf: task work scheduling kfuncs (Ines Qian) [RHEL-78291]
  - bpf: extract map key pointer calculation (Ines Qian) [RHEL-78291]
  - bpf: bpf task work plumbing (Ines Qian) [RHEL-78291]
  - bpf: verifier: permit non-zero returns from async callbacks (Ines Qian) [RHEL-78291]
  - bpf: htab: extract helper for freeing special structs (Ines Qian) [RHEL-78291]
  - bpf: extract generic helper from process_timer_func() (Ines Qian) [RHEL-78291]
  - bpf: refactor special field-type detection (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable signature verification for some lskel tests (Ines Qian) [RHEL-78291]
  - bpftool: Add support for signing BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Embed and verify the metadata hash in the loader (Ines Qian) [RHEL-78291]
  - libbpf: Update light skeleton for signing (Ines Qian) [RHEL-78291]
  - bpf: Implement signature verification for BPF programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix selftest verifier_arena_large failure (Ines Qian) [RHEL-78291]
  - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 (Ines Qian) [RHEL-78291]
  - bpftool: Fix UAF in get_delegate_value (Ines Qian) [RHEL-78291]
  - bpftool: Add HELP_SPEC_OPTIONS in token.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: test cases for callchain sensitive live stack tracking (Ines Qian) [RHEL-78291]
  - selftests/bpf: __not_msg() tag for test_loader framework (Ines Qian) [RHEL-78291]
  - bpf: table based bpf_insn_successors() (Ines Qian) [RHEL-78291]
  - bpf: disable and remove registers chain based liveness (Ines Qian) [RHEL-78291]
  - bpf: signal error if old liveness is more conservative than new (Ines Qian) [RHEL-78291]
  - bpf: enable callchain sensitive stack liveness tracking (Ines Qian) [RHEL-78291]
  - bpf: callchain sensitive stack liveness tracking using CFG (Ines Qian) [RHEL-78291]
  - bpf: compute instructions postorder per subprogram (Ines Qian) [RHEL-78291]
  - bpf: declare a few utility functions as internal api (Ines Qian) [RHEL-78291]
  - bpf: remove redundant REG_LIVE_READ check in stacksafe() (Ines Qian) [RHEL-78291]
  - bpf: use compute_live_registers() info in clean_func_state (Ines Qian) [RHEL-78291]
  - bpf: bpf_verifier_state->cleaned flag instead of REG_LIVE_DONE (Ines Qian) [RHEL-78291]
  - bpf: Move the signature kfuncs to helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Return hashes of maps in BPF_OBJ_GET_INFO_BY_FD (Ines Qian) [RHEL-78291]
  - libbpf: Support exclusive map creation (Ines Qian) [RHEL-78291]
  - libbpf: Implement SHA256 internal helper (Ines Qian) [RHEL-78291]
  - bpf: Implement exclusive map creation (Ines Qian) [RHEL-78291]
  - bpf: Update the bpf_prog_calc_tag to use SHA256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf: Enforce RCU protection for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() (Ines Qian) [RHEL-78291]
  - bpf...d_path(): constify path argument (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a test for bpf_cgroup_from_id lookup in non-root cgns (Ines Qian) [RHEL-78291]
  - bpf: Do not limit bpf_cgroup_from_id to current's namespace (Ines Qian) [RHEL-78291]
  - bpftool: Search for tracefs at /sys/kernel/tracing first (Ines Qian) [RHEL-78291]
  - selftests/bpf: More open-coded gettid syscall cleanup (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for arena fault reporting (Ines Qian) [RHEL-78291]
  - selftests: bpf: use __stderr in stream error tests (Ines Qian) [RHEL-78291]
  - selftests: bpf: introduce __stderr and __stdout (Ines Qian) [RHEL-78291]
  - bpf: Report arena faults to BPF stderr (Ines Qian) [RHEL-78291]
  - bpf: core: introduce main_prog_aux for stream access (Ines Qian) [RHEL-78291]
  - bpf: arm64: simplify exception table handling (Ines Qian) [RHEL-78291]
  - bpf: WQ_PERCPU added to alloc_workqueue users (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_unbound_wq with system_dfl_wq (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_wq with system_percpu_wq (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix the issue where the error code is 0 (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_ATOMIC instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Introduce bpf_jit_emit_atomic_ops() to emit atomic instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement bpf_addr_space_cast instruction (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_MEM32 pseudo instructions (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add BPF program dump in veristat (Ines Qian) [RHEL-78291]
  - libbpf: Remove unused args in parse_usdt_note (Ines Qian) [RHEL-78291]
  - bpf, arm64: Remove duplicated bpf_flush_icache() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test kfunc bpf_strcasecmp (Ines Qian) [RHEL-78291]
  - bpf: add bpf_strcasecmp kfunc (Ines Qian) [RHEL-78291]
  - selftests/bpf: add benchmark testing for kprobe-multi-all (Ines Qian) [RHEL-78291]
  - selftests/bpf: skip recursive functions for kprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: move get_ksyms and get_addrs to trace_helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpftool: Add CET-aware symbol matching for x86_64 architectures (Ines Qian) [RHEL-78291]
  - bpftool: Refactor kernel config reading into common helper (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add LPM trie microbenchmarks (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto tests for arm64 (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enrich subtest_basic_usdt case in selftests to cover SIB handling logic (Ines Qian) [RHEL-78291]
  - libbpf: Fix USDT SIB argument handling causing unrecognized register error (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix typos and grammar in test sources (Ines Qian) [RHEL-78291]
  - bpf: Add selftest to check the verifier's abstract multiplication (Ines Qian) [RHEL-78291]
  - bpf: Improve the general precision of tnum_mul (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove may_goto tests from DENYLIST.s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto verifier tests on s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add __arch_s390x macro (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a missing newline to the "bad arch spec" message (Ines Qian) [RHEL-78291]
  - s390/bpf: Add s390 JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove entries from config.{arch} already present in config (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for trampoline.c (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_prog_run_array_cg() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_task_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_iter_run_prog() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_inode_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_cgrp_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: Use sha1() instead of sha1_transform() in bpf_prog_calc_tag() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Tests for is_scalar_branch_taken tnum logic (Ines Qian) [RHEL-78291]
  - bpf: Use tnums for JEQ/JNE is_branch_taken logic (Ines Qian) [RHEL-78291]
  - selftests/bpf: Use vmlinux.h for BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Add documentation to version and error API functions (Ines Qian) [RHEL-78291]
  - s390/bpf: Use direct calls and jumps where possible (Ines Qian) [RHEL-78291]
  - bpftool: Add kernel.kptr_restrict hint for no instructions (Ines Qian) [RHEL-78291]
  - bpf: Add a verbose message when the BTF limit is reached (Ines Qian) [RHEL-78291]
  - bpf: Replace get_next_cpu() with cpumask_next_wrap() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for DEVMAP reuse (Ines Qian) [RHEL-78291]
  - libbpf: Fix reuse of DEVMAP (Ines Qian) [RHEL-78291]
  - bpf: Remove migrate_disable in kprobe_multi_link_prog_run (Ines Qian) [RHEL-78291]
  - selftests/bpf: Copy test_kmods when installing selftest (Ines Qian) [RHEL-78291]
  - bpf: Don't use %pK through printk (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpf: Remove redundant __GFP_NOWARN (Ines Qian) [RHEL-78291]
  - bpf: Standardize function declaration style (Ines Qian) [RHEL-78291]
  - bpf: removed unused 'env' parameter from is_reg64 and insn_has_def32 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test multi_st_ops and calling kfuncs from different programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add multi_st_ops that supports multiple instances (Ines Qian) [RHEL-78291]
  - bpf: Allow struct_ops to get map id by kdata (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for token argument (Ines Qian) [RHEL-78291]
  - bpftool: Add bpftool-token manpage (Ines Qian) [RHEL-78291]
  - bpftool: Add bpf_token show (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test concurrent task local data key creation (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test basic task local data operations (Ines Qian) [RHEL-78291]
  - selftests/bpf: Introduce task local data (Ines Qian) [RHEL-78291]
  - bpf: Allow syscall bpf programs to call non-recur helpers (Ines Qian) [RHEL-78291]
  - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (Charles Haithcock) [RHEL-154387]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-228
changelog:
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
  - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - ptrace: require CAP_SYS_PTRACE on mm-less tasks (kABI-safe Qualys fix)


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-17
changelog:
  - Support storing of __crc_* symbols in sections other than .rodata.
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-19
changelog:
  - Capture local __crc_* symbols for "Provides: kernel()".
  - Add support for XZ compression for the symvers file.
  - Fix "Provides: kernel()" generation when both __kcrctab and __kcrctab_gpl
    are present.
  - Fix regression for "Provides:" generation in cases when modversions are stored
    in a section that is over 64K in size.
  - Speedup and cleanup changes in find-provides.ksyms and find-requires.ksyms.
  - Fix regex usage in kmod.attr. (Denys Vlasenko)
  - Implement modalias "Provides:" grouping. (Denys Vlasenko)
  - Speedup and cleanup changes in modalias.prov and kmod.attr. (Denys Vlasenko)


author: keycloak-httpd-client-install fails to build with Python 3.12 - 1.1.14
changelog:
  - Resolves: rhbz#2155009 - keycloak-httpd-client-install fails to build with
    Python 3.12: ModuleNotFoundError: No module named 'distutils'


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Marek Safarik <msafarik@redhat.com> - 7.12.1-16
changelog:
  - Added manpages for keylime services and the tenant
  - Added support for ECC attestation
  - Fixed man page RST formatting for rst2man compatibility


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Julien Rische <jrische@redhat.com> - 1.21.3-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145356
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-145358
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145397


author: Julien Rische <jrische@redhat.com> - 1.21.3-11
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171587 RHEL-171595


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Mike FABIAN <mfabian@redhat.com> - 0.0.62-1
changelog:
  - Update to 0.0.62
  - Get translation changes from CLDR
  - Add more translations from CLDR
  - Add Norwegian keyboard layout to keyboards.xml
    (Resolves: https://github.com/mike-fabian/langtable/issues/16)
  - Add Hang script to Southern Aymara


author: Mike FABIAN <mfabian@redhat.com> - 0.0.63-1
changelog:
  - Update to 0.0.63
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Japanese: prefer anthy over kkc
    (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
  - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
    (Resolves: https://github.com/mike-fabian/langtable/issues/18)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.64-1
changelog:
  - Update to 0.0.64
  - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
    (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.65-1
changelog:
  - Update to 0.0.65
  - Add wuu, tok, glk, gbm, ssy
  - Remove aa_ER.UTF-8@saaho
  - Add kv_RU.UTF-8, chr_RU.UTF-8
  - Add EU, EZ
  - Improve README and Makefile (Resolves: https://github.com/mike-
    fabian/langtable/issues/19)
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 2.015-16
changelog:
  - Convert to new fonts packaging guidelines
  - Migrate to SPDX license expression
  - Drop very very old obsoletes for google-lato-fonts
  - Add gating CI tests in Fedora


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-20
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113472 - "cannot seek on data source" in TLS lftp sessions


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-1
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.0-1
changelog:
  - Rebase to 0.12.0
    Resolves: RHEL-133421, RHEL-70825, RHEL-130042
  - Add a Requires for crypto-policies instead of a Recommends
    Resolves: RHEL-139045


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.1-1
changelog:
  - Version 2.11.1 (RHEL-150897)
  - udiskslinuxnvmecontroller: Fix sanitize job start (RHEL-69113)
  - udiskslinuxpartitiontable: Fix missing job completion (RHEL-124987)
  - udiskslinuxdevice: multipath handling fixes (RHEL-128598)
  - lvm2: Prevent a segfault on discarded probe output (RHEL-138293)
  - udisksmodulemanager: Silence console warnings when requested module is not available (RHEL-144145)
  - tests: Make sure to load sr_mod for cdrom tests (RHEL-153132)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-74200, RHEL-80679, RHEL-104216, RHEL-104427, RHEL-113843
      RHEL-118671, RHEL-122751, RHEL-126854, RHEL-126945, RHEL-128105
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-104238)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-6
changelog:
  - add support for dropping root privileges (disabled by default) (RHEL-12183)
  - create linuxptp user and /run/ptp directory


author: Brian C. Lane <bcl@redhat.com> 40.5.4-1
changelog:
  - tito: Add tito to container's test-packages (bcl)
    Related: RHEL-31830
  - creator: Fix pylint error in run_creator (bcl)
    Related: RHEL-31830
  - livemedia-creator: Check for BIOS vs. UEFI qemu support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Enable s390x virt support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Make use of virtio devices more generic (bcl)
    Related: RHEL-31830
  - Set requirement on lorax-templates-rhel for prefixdevname change (bcl)
    Related: RHEL-30010


author: Brian C. Lane <bcl@redhat.com> 40.5.5-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-35396
  - docs: Update livemedia-creator documentation for RHEL 10 (bcl)
    Related: RHEL-31853
  - livemedia-creator: The --make-tar option requires tar (bcl)
    Related: RHEL-31853
  - docs: Update example kickstarts for RHEL/CentOS (bcl)
    Resolves: RHEL-31853
  - lorax: Change default rootfs size to 3GiB (bcl)
    Resolves: RHEL-32504


author: Brian C. Lane <bcl@redhat.com> 40.5.6-1
changelog:
  - New lorax documentation - 40.5.6 (bcl)
    Related: RHEL-48606
  - ltmpl: Remove * from docstring (bcl)
    Related: RHEL-48606
  - docs: Update intersphinx and add _static dir (bcl)
    Related: RHEL-48606
  - docs: Document --rootfs-type options (bcl)
    Related: RHEL-48606
  - erofs: Use dedupe and all-fragments options (bcl)
    Related: RHEL-48606
  - imgutils: mkfs.erofs options should come first (bcl)
    Related: RHEL-48606
  - Accept but ignore the old --squashfs-only argument (awilliam)
    Related: RHEL-48606
  - Add compression.erofs section to lorax.conf (bcl)
    Resolves: RHEL-48606
  - Add erofs and erofs-ext4 support to --rootfs-type (bcl)
    Related: RHEL-48606
  - Replace squashfs_only with rootfs_type (bcl)
    Related: RHEL-48606
  - imgutils: Add mkerofs function and test (bcl)
    Related: RHEL-48606
  - runtime-postinstall: Make sure blacklist_exceptions has been removed (jstodola)
    Resolves: RHEL-53721


author: Brian C. Lane <bcl@redhat.com> 40.5.7-1
changelog:
  - templates: Sync template changes from lorax-templates-rhel (bcl)
    Resolves: RHEL-54713
  - tests: Add a test to make sure redhat-release-eula isn't included (bcl)
    Related: RHEL-54381


author: Brian C. Lane <bcl@redhat.com> 40.5.8-1
changelog:
  - tests: Fix mkksiso unit test (bcl)
    Related: RHEL-61778
  - pylint: Print astroid version (bcl)
    Related: RHEL-61778
  - Extend help for --updates and --ks parameters (jkonecny)
    Related: RHEL-61778
  - Fix --updates the updates image wasn't loaded (jkonecny)
    Resolves: RHEL-61778
  - Implement --replace also for S390 (sebastian.stark)
    Related: RHEL-61778
  - mkksiso: option --replace to replace arbitrary text in boot config.  (sebastian.stark)
    Related: RHEL-61778
  - livemedia: Add isomd5sum (bcl)
    Resolves: RHEL-58896


author: Brian C. Lane <bcl@redhat.com> 40.5.9-1
changelog:
  - tests: Swap nomodeset for inst.text in mkksiso test data (bcl)
    Related: RHEL-66603
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: RHEL-66603
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.10-1
changelog:
  - erofs: Change the erofs compression default to zstd (bcl)
    Related: RHEL-48606
  - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl)
    Related: RHEL-66603
  - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl)
    Related: RHEL-66603
  - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.11-1
changelog:
  - erofs: Make smaller lzma erofs images by default (bcl)
    Related: RHEL-48606
  - Revert "erofs: Change the erofs compression default to zstd" (bcl)
    Related: RHEL-48606


author: Brian C. Lane <bcl@redhat.com> 40.5.12-1
changelog:
  - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl)
    Resolves: RHEL-83202
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl)
    Resolves: RHEL-83519


author: Brian C. Lane <bcl@redhat.com> 40.5.14-1
changelog:
  - New lorax documentation - 40.5.14 (bcl)
    Related: RHEL-130954
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-126547
    Resolves: RHEL-130954
  - livemedia.ks: Increase size of root partition in example live kickstart (bcl)
    Resolves: RHEL-142732
  - executils: decoding after deserialization (oleg.sviridov)
    Resolves: RHEL-121650


author: Brian C. Lane <bcl@redhat.com> 40.5.15-1
changelog:
  - executils: Ignore utf-8 decode errors (bcl)
    Resolves: RHEL-121650
  - executils: Remove binary_output flag (bcl)
    Related: RHEL-121650
  - logging: Set encoding=UTF-8 on FileHandler (bcl)
    Related: RHEL-121650
  - executils: Set encoding to UTF-8 for _run_program (bcl)
    Related: RHEL-121650


author: Brian C. Lane <bcl@redhat.com> - 10.0-55
changelog:
  - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl)
    Related: RHEL-67586
  - tests: Fix the repos used for the test (bcl)
    Related: RHEL-67586
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-67586


author: Brian C. Lane <bcl@redhat.com> - 10.1-1
changelog:
  - Bump release version to 10.1 (bcl)
    Related: RHEL-91929
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91929


author: Brian C. Lane <bcl@redhat.com> - 10.1-3
changelog:
  - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk)
    Resolves: RHEL-102872
  - runtime-postinstall: allow pipewire to run as root (awilliam)
    Resolves: RHEL-102419
  - runtime-cleanup: Do not clean up rpm binaries (bcl)
    Resolves: RHEL-101695


author: Brian C. Lane <bcl@redhat.com> - 10.2-1
changelog:
  - Do not remove SELinux from the runtime (ppolawsk)
    Resolves: RHEL-126547
  - Bump release version to 10.2 (bcl)
    Related: RHEL-126547


author: Brian C. Lane <bcl@redhat.com> - 10.0-49
changelog:
  - SERIAL: Bump to 48 to match spec change for mass rebuild (bcl)
  - firmware: Exclude installation of audio firmware (bcl)
    Related: RHEL-44311
  - tests: Replace $stream with 10-stream (bcl)
    Related: RHEL-44311
  - runtime-install: Only install qcom-firmware on aarch64 (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to brcmfmac-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to intel-audio-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to dvb-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: qcom firmware is now in the qcom-firmware package (bcl)
    Related: RHEL-44311
  - Drop Tiger VNC from templates (mkolman)
    Resolves: RHEL-38741


author: Brian C. Lane <bcl@redhat.com> - 10.0-50
changelog:
  - runtime-cleanup: Fix gshadow typo (bcl)
    Resolves: RHEL-35396
  - runtime-install: Add redhat-release-eula (bcl)
    Related: RHEL-35396
  - kernel: Keep nvram module (bcl)
    Resolves: RHEL-36443
  - kernel: Keep hid-multitouch module (bcl)
    Resolves: RHEL-49546


author: Brian C. Lane <bcl@redhat.com> - 10.0-53
changelog:
  - runtime-cleanup: fonttosfnt no longer installed (bcl)
    Resolves: RHEL-54717
  - Use the same page args in all the per-arch templates (bcl)
    Resolves: RHEL-54535
  - Remove manual /root/lorax-packages.log creation (bcl)
    Resolves: RHEL-54534
  - Remove libuser.conf (bcl)
    Resolves: RHEL-54533


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.7-1
changelog:
  - Rebase to 10.11.7
  - Patch 10 removed, the main.ssl_cipher test has been fixed
    and re-enabled by upstream and now passes on all architectures


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Koichiro Iwao <meta@almalinux.org> - 25.2.7-1.alma.1
changelog:
  - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in
    AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32)


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57014 - Rebase qemu-ga to 9.1.0
  - RHEL-32297 - guest agent public ssh injection api support for Windows
  - RHEL-36718 - The version of mingw-qemu-ga-win doesn't match inside query and via command 'guest-info'
  - Set version to 109.1.0


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.0.0-1
changelog:
  - RHEL-83547 - Rebase mingw-qemu-ga-win to QEMU 10.0.0 
  - RHEL-96980 - mingw-qga: Drop mingw-pixman build deps
  - RHEL-98947 - [mingw-qemu-ga-win] MSI installer ignore VSS installation result 
  - RHEL-11824 - [QGA] VSS installation retry, if previously VSS service was not un-registered correctly


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.1.0-1
changelog:
  - RHEL-111001 Rebase mingw-qemu-ga-win to QEMU 10.1.0
  - RHEL-107458 [mingw-qemu-ga-win] QAPI error desc does not contain Windows error
  - RHEL-107446 QGA VSS wasn't removed if the QGA installation fail and quit
  - RHEL-107215 Fix don't daemonize before channel is initialized patch for Windows behavior


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.2.1-1
changelog:
  - RHEL-148234 Move CoInitialize/CoInitializeSecurity to main process thread 
  - RHEL-56925 Implement guest-network-get-route for Windows


author: Joe Orton <jorton@redhat.com> - 1.14.2-21
changelog:
  - restore plaintext password storage by default (per upstream)
  - restrict symbols exposed by DSOs built for httpd


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-3
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-4
changelog:
  - Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory
    Increase (CVE-2025-53020)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-5
changelog:
  - Resolves: RHEL-134484 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-7
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
  - nfsrahead: zero-initialise device_info struct (RHEL-158528)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.1-3
changelog:
  - Resolves: RHEL-33742 - Disable ENGINE support by default
  - disable ENGINE support by default
  - add engine bcond


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-6
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: pdancak <pdancak@redhat.com> - 2:1.26.3-7
changelog:
  - RHEL-159548 - CVE-2026-27654 nginx: NGINX: Denial of Service or file
    modification via buffer overflow in ngx_http_dav_module


author: pdancak <pdancak@redhat.com> - 2:1.26.3-8
changelog:
  - RHEL-159527 - CVE-2026-27784 nginx: NGINX: Denial of Service due to
    memory corruption via crafted MP4 file


author: pdancak <pdancak@redhat.com> - 2:1.26.3-9
changelog:
  - RHEL-159435 - CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: pdancak <pdancak@redhat.com> - 2:1.26.3-10
changelog:
  - RHEL-157876 CVE-2026-32647 nginx: NGINX: Denial of Service or Code
    Execution via specially crafted MP4 files


author: Jonathan Wright <jonathan@almalinux.org> - 2:1.26.3-10.alma.1
changelog:
  - AlmaLinux changes: Fix CVE-2026-42945 Buffer overrun in rewrite module
    via arguments in replacement strings


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-1417
  - alt-name: Remove alt-names when interface marked as absent. RHEL-126481
  - hsr: Automatically disable IP on hsr port. RHEL-100774
  - hsr: add support for configuring "interlink" property. RHEL-100766
  - Support referring alternative-name as port/parent/next-hop-interface.
    RHEL-126508
  - Support referring interface name using its alternative name. RHEL-126510


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.59-1
changelog:
  - Upgrade to 2.2.59
  - route: add support for lock-mtu option. RHEL-151844
  - iptunnel: introduce support for ipip/sit/ip6ip6/ipip6 tunnels. RHEL-79801
  - nm: Fix error when modify port list of down interface. RHEL-52334


author: Jan Vaclav <jvaclav@redhat.com> - 2.2.60-1
changelog:
  - Upgrade to 2.2.60
  - Add support for configuring ipip tunnel in nmstate RHEL-79801
  - Fix error when modify port list of down interface RHEL-52334
  - Add support for mtu-lock route option RHEL-151844
  - ipv4: Add new parameter prefix-route-metric RHEL-147209


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
changelog:
  - Update to version 22.22.2
  - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
  - disabled failing tests in nghttp2 due to newer version
  - patch for npm/braces CVE-2026-25547


author: Andrei Radchenko <aradchen@redhat.com> - 2023.10-11
changelog:
  - Add test case for symlinked dependencies bug fix
  - added test/symlinked scenario
  - verifies nodejs.req correctly generates requirements for symlinked deps
  - added mock 'external' packages to support this test


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Joseph Marrero <jmarrero@redhat.com> - 2.23.0-6
changelog:
  - Add RPM macros to configure %_passwd_path and %_group_path
  - Fixes user/group lookup for packages with non-root file ownership
  - See: https://github.com/rpm-software-management/rpm/pull/3672


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Jerry James <loganjerry@gmail.com> - 9-1
changelog:
  - Update OCaml native arches for OCaml 5.1
  - Remove the Python file and some macros (now in ocaml-rpm-macros)
  - Add %ocaml_pkg macro for common declarations


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Matthew Burket <mburket@redhat.com> - 1:1.4.3-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133978)
  - Add the ability to show rule details in output (RHEL-104651)


author: Packit <hello@packit.dev> - 0.2.5-1
changelog:
  - 0.2.5 (Jan Rodak)
  - Show referenced OVAL State (Jan Rodak)
  - Parse reference in filter (Jan Rodak)
  - Show OVAL Variables and referenced OVAL endpoints in report (Jan Rodak)
  - Remove UUID from headings (Jan Rodak)
  - Move function (Jan Rodak)
  - Display in report OVAL object that references to other OVAL Objects (Jan Rodak)
  - Resolve parsing of referenced OVAL Objects and OVAL Variables (Jan Rodak)
  - Add OVAL Variable structure and parser (Jan Rodak)
  - Rework OVAL Object and State (Jan Rodak)
  - Parse mapping between OVAL var and values and propagate them (Jan Rodak)
  - Remove namesapace for attributes (Jan Rodak)
  - Show OVAL states in report (Jan Rodak)
  - Parse attributes of elements in OVAL state and Parse all OVAL states in OVAL test (Jan Rodak)
  - Show OVAL objects in report (Jan Rodak)
  - Parse attributes of elements in OVAL object (Jan Rodak)
  - Removing the processing of collected objects (Jan Rodak)
  - Use an empty string instead of None when the text of the set-value element is empty (Jan Rodak)
  - Fix deprecation warning (Jan Rodak)
  - Remove product detection from the tmt plan (Jan Rodak)
  - Increase vm memory (Jan Rodak)
  - Add python3 dependency (Jan Rodak)
  - Adjust the build of content (Jan Rodak)
  - Automatic product detection to build content by CPE identifier (Jan Rodak)
  - Remove whitespaces (Jan Rodak)
  - Show explanation of score computation in report (Jan Rodak)
  - Add explanation of score computation (Jan Rodak)
  - Parse system attribute from score element (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.6-1
changelog:
  - 0.2.6 (Jan Rodak)
  - Extend the condition to account empty strings in href (Jan Černý)
  - Add comments for the pylint tool (Jan Černý)
  - Add special classes to table element (Jan Černý)
  - Account for missing reference href attribute (Jan Černý)
  - Add pragmas to avoid PEP8 warnings (Jan Černý)
  - Present references in a table (Jan Černý)
  - Collapse CPE tree when is true (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add titles (Jan Rodak)
  - Fix performace of generation of graphs (Jan Rodak)
  - Rearrange fields of rule detail and OVAL definition detail (Jan Rodak)
  - Fix bugs in html (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.7-1
changelog:
  - 0.2.7 (Jan Rodak)
  - Add tool tip to search bar (Jan Rodak)
  - Enable search by reference (Jan Rodak)
  - Add generation search infromation (Jan Rodak)
  - Use macro for generation of list items (Jan Rodak)
  - Create two-tier display of Evaluation Characteristics (Jan Rodak)
  - Add title (Jan Rodak)
  - Reduce complexity of function generate_referenced_endpoints (Jan Rodak)
  - Use default dict (Jan Rodak)
  - Fix JSON schema (Jan Rodak)
  - Use correct orthography of addresses types acronyms (Jan Rodak)
  - Add function to update known references (Jan Rodak)
  - Change the presentation of referenced endpoints (Jan Rodak)
  - Add new elements (Jan Rodak)
  - Add onclick function (Jan Rodak)
  - Add map of OVAL endpoints (Jan Rodak)
  - Add target addresses to report (Jan Rodak)
  - Add target addresses to model (Jan Rodak)
  - Fix width of pre element (Jan Rodak)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-21
changelog:
  - Implement obtaining Kerberos tickets on behalf of user on SSH authentication
    Resolves: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
changelog:
  - Remove recommendation of p11-kit
    Resolves: RHEL-139070
  - Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
    in sshd_config should count when defined multiple times
    Resolves: RHEL-150365
  - Fix mistracking of MaxStartups process exits in some situations
    Resolves: RHEL-121768
  - Fix GSSAPI authentication indicator issues found by AI
    Resolves: RHEL-154309
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155813


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
changelog:
  - Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
    Resolves: RHEL-88565
  - Fix duplicate audit log entry when destroying ed25519 private keys
    Resolves: RHEL-46782
  - Fix typo in GSSAPIProxyS4U2Services
    Related: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-25
changelog:
  - Fix static analysis issues
    Resolves: RHEL-163365
  - Ssh should refuse connection when mlkem kex is specified in FIPS
    Resolves: RHEL-155178
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164740
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166239
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166223
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166191
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166207


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-26
changelog:
  - Improve keytab detection when obtaining Kerberos tickets on behalf of user on SSH authentication
    Related: RHEL-92932
  - Add missing NULL check for server key generation in ML-KEM hybrids
    Resolves: RHEL-168106


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-122599
    Resolves: RHEL-141987
    Resolves: RHEL-142009
    Resolves: RHEL-142022
    Resolves: RHEL-142026
    Resolves: RHEL-142030
    Resolves: RHEL-142034
    Resolves: RHEL-142038
    Resolves: RHEL-142042
    Resolves: RHEL-142046
    Resolves: RHEL-142050
    Resolves: RHEL-142054


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-78944


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Fix reversion of previous dependency updates post golang update
    Resolves: RHEL-79109


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify pre-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-76915


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-84025


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Update addresses CVE-2025-29786
    Resolves: RHEL-84153


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-84160


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-9
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85035


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90009


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0 Add systemd-journal group to Requires Bump go-
    tpm-keyfiles Resolves: RHEL-119363


author: Kseniia Nivnia <knivnia@redhat.com> - 0.144.0-2
changelog:
  - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3
  - Addresses: CVE-2026-25679, CVE-2026-33186, CVE-2026-34986,
    CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.5.3-2
changelog:
  - We run tests with specially crafted OpenSSL configuration, not the system one
    Resolves: RHEL-25983


author: Lukas Tyrychtr <ltyrycht@redhat.com> - 46.1-2
changelog:
  - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Chris Lumens <clumens@redhat.com> - 3.0.1-4
changelog:
  - Fix promoting instances of a cloned resource
  - Handle large timeouts correctly in crm_resource --wait
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-120932
  - Resolves: RHEL-86148
  - Resolves: RHEL-114895


author: Chris Lumens <clumens@redhat.com> - 3.0.2-1
changelog:
  - Rebase on upstream 3.0.2-rc2
  - Don't hang waiting on certain pending monitor actions
  - Resolves: RHEL-78393


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-8
changelog:
  - Make sure redhat-package-notes spec is skipped if _package_note_flags is
    undefined (rbhz#2184553)


author: Sudip Shil <sshil@redhat.com> - 6.0-7
changelog:
  - Convert to new fonts packaging guidelines and SPDX license
  - Update the fonts package
  - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.018-1
changelog:
  - Update to 0.018
    - Fix version requirement for CPAN::Meta::Prereqs
    - Move issue tracker to GitHub


author: Paul Howarth <paul@city-fan.org> - 2.143-1
changelog:
  - Update to 2.143 (rhbz#2216187)
    - Fix regression with implicit minimum value and multiple requirements (GH#38)
  - Don't package perlcritic.rc


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.114-1
changelog:
  - Update to 0.114
    - Data::OptList now requires perl v5.12.0
    - Tests no longer add "-T" to shebang, so do not invoke taint mode


author: Packit <hello@packit.dev> - 6.93-1
changelog:
  - Release: v6.93 (Sullivan Beck)
  - Checkpoint: v6.93 (Sullivan Beck)
  - Remove Travis (Sullivan Beck)
  - Initial checkin of next release cycle: 6.93 (Sullivan Beck)


author: Paul Howarth <paul@city-fan.org> - 1.006000-1
changelog:
  - Update to 1.006000
    - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var
      module
    - Refactored the Perl 5.37.2+ lexical exporter support


author: Paul Howarth <paul@city-fan.org> - 1.006001-1
changelog:
  - Update to 1.006001
    Documentation
    - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual
    Packaging
    - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl


author: Paul Howarth <paul@city-fan.org> - 1.006002-1
changelog:
  - Update to 1.006002
    Documentation
    - Link to Exporter::Almighty in pod
    - Update copyright dates
    Packaging
    - Set homepage in metadata to https://exportertiny.github.io


author: Michal Josef Špaček <mspacek@redhat.com> - 6.01-34
changelog:
  - Package tests
  - Patch for remove warning in test
  - Simplify build and install phases
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 2.205-1
changelog:
  - Update to 2.205
    - Add perl 5.38 to CI matrix
    - Add on workflow_dispatch
    - Add some OO examples


author: Paul Howarth <paul@city-fan.org> - 4.09-1
changelog:
  - Update to 4.09
    - Updated backportPP with JSON::PP 4.11
    - Fix a test to pass under perl with core bool support


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 2:0.42.34-1
changelog:
  - 0.4234 bump
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Michal Josef Špaček <mspacek@redhat.com> - 6.0.1-42
changelog:
  - Add patch to add tests for other USM scenarios
  - Add patch to rewrite from Digest::SHA1 to Digest::SHA
  - Add patch to rewrite usage of HMAC with same dependencies
  - Add patch to split test files for better readability
  - Improve patch for switch from Socket6 to Socket
  - Package tests
  - Rename patch to better name with source dist version


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Michal Josef Špaček <mspacek@redhat.com> - 2.014-9
changelog:
  - Fix running of tests in perl-Net-Server-tests subpackage
    Resolves: RHEL-65278
  - Sync OpenSSL Engine patch with upstream


author: Paul Howarth <paul@city-fan.org> - 0.104003-1
changelog:
  - Update to 0.104003 (rhbz#2208530)
    - Add Artistic 1.0 Perl license and make Perl license use it
    - Remove extra "59" from LGPL-2.1
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.104004-1
changelog:
  - Update to 0.104004 (rhbz#2209461)
    - Rename Perl Artistic License to avoid confusion in detecting license


author: Paul Howarth <paul@city-fan.org> - 0.991-1
changelog:
  - Update to 0.991
    - Make the requirement for perl v5.12.0 explicit; previously, it was only
      implicit because of prerequisites


author: Paul Howarth <paul@city-fan.org> - 0.929-1
changelog:
  - Update to 0.929 (rhbz#2157199)
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Use %license
  - Fix permissions verbosely
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2255994)
    - Update docs to recommend YAML::PP
  - Package description updated as per upstream documentation


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 1:1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Alex Laurie <alex.r.laurie@gmail.com> - 24.004.60-13.alma.1
changelog:
  - Almalinux change: Add in the symlink for fedora-gdm-logo.png to
    watermark.png in the spinner theme directory to ensure the AlmaLinux
    watermark is displayed in plymouth.


author: Alex Laurie <alex.r.laurie@gmail.com> - 24.004.60-16.alma.1
changelog:
  - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm-
    logo.png to watermark.png in the spinner theme directory to ensure the
    AlmaLinux watermark is displayed in plymouth.


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-138726


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Than Ngo <than@redhat.com> - 1.3.11-4
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  - Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.12-7
changelog:
  - Add, multipath - drmgr support
  - Fix, SMT state is not honored when new CPUs are added dynamically
  Resolves: RHEL-62938


author: Than Ngo <than@redhat.com> - 2.7.10-1
changelog:
  - Update to 2.7.10
    * Aadd support for multiple platform dumps
    * Add support for light path diagnostics for rtas events
    * Enable correct display of model and system-id for IPS Power systems
    * Fix call home feature for nvmf devices
    * Fix crash in rtas_errd due to invalid -f option values
    * Fix build warnings with GCC-15
  Resolves: RHEL-65188


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Brian C. Lane <bcl@redhat.com> - 3.52.4-1
changelog:
  - timezone: Remove the --isUtc, --nontp, and --ntpserver arguments (bcl)
    Related: RHEL-34009
  - packages: Remove the old camel case arguments on RHEL10 (bcl)
    Resolves: RHEL-34009
  - nvdimm: Remove support for the nvdimm command on RHEL10 (bcl)
    Related: RHEL-34009


author: Brian C. Lane <bcl@redhat.com> - 3.52.6-1
changelog:
  - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl)
    Related: RHEL-61426
  - workflow: Use python 3.12.7 for testing (bcl)
    Related: RHEL-61426
  - options: adjust to behavior change in upstream _parse_optional (awilliam)
    Resolves: RHEL-61426


author: Brian C. Lane <bcl@redhat.com> - 3.52.7-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61435


author: Brian C. Lane <bcl@redhat.com> - 3.52.8-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61435
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76502


author: Brian C. Lane <bcl@redhat.com> - 3.52.9-1
changelog:
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-80086
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-80086


author: Brian C. Lane <bcl@redhat.com> - 3.52.10-1
changelog:
  - pylint: Ignore files in .git (bcl)
    Related: RHEL-96217
  - Add support for RDP (jkonecny)
    Resolves: RHEL-96217


author: Brian C. Lane <bcl@redhat.com> - 3.52.11-1
changelog:
  - Add support for new bootc kickstart command (ppolawsk)
    Resolves: RHEL-132612
    Related: RHEL-58215


author: Brian C. Lane <bcl@redhat.com> - 3.52.12-1
changelog:
  - rhsm: Add Flatpak registry option for RHEL10 (bciconel)
    Resolves: RHEL-132652
    Related: RHEL-132663


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Miro Hrončok <mhroncok@redhat.com> - 3.12-11
changelog:
  - %python_extras_subpkg: Add -v option to specify the required version(-release)
  - This is useful when the extras are built from a different specfile (e.g. in EPEL for a RHEL base package)
  - Resolves: RHEL-117448


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-10
changelog:
  - Don't assume %_smp_mflags only ever contains -jX, use -j%_smp_build_ncpus directly
  - Fixes: rhbz#2179149


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat
  Related: RHEL-167886, RHEL-168120


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-167886, RHEL-168120


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Vendula Poncova <vponcova@redhat.com> - 1.7-1
changelog:
  - CI: Use dnf instead of yum to install CentOS packages (vponcova)
  - Documentation: Improve the installation instruction (vponcova)
  - Remove untracked files from the git repository interactively (vponcova)
  - UnixFD: Document the support for Unix file descriptors (vponcova)
  - Documentation: Clean up examples in the documentation (vponcova)
  - Documentation: Simplify the README.md file (vponcova)
  - Documentation: Fix bullet point lists (vponcova)
  - Documentation: Simplify the hostname example (vponcova)
  - CI: Run tests for all supported Python version (vponcova)
  - UnixFD: Handle DBus signals with Unix file descriptors (vponcova)
  - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova)
  - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova)
  - UnixFD: Process results of client calls in the low-level library (vponcova)
  - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova)
  - CI: Always pull the latest container image (vponcova)
  - CI: Disable the unhashable-member warning (vponcova)
  - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova)
  - UnixFD: Move the unit tests to a new file (vponcova)
  - UnixFD: Manage the testing bus on set up and tear down (vponcova)
  - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova)
  - UnixFD: Create a new testing DBus interface (vponcova)
  - UnixFD: Fix the indentation in unit tests (vponcova)
  - Add unit tests for variants with variant types (vponcova)
  - Simplify the code for replacing values of the UnixFD type (vponcova)
  - Add classes for unpacking and unwrapping a variant (vponcova)
  - Don't use pylint from pip on Fedora Rawhide (vponcova)
  - UnixFD: Rename a parameter to server_arguments (vponcova)
  - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova)
  - Raise TimeoutError if a DBus call times out (vponcova)
  - Fix pylint tests in CentOS Stream 8 (vponcova)
  - Fix the ENV instruction in Dockerfiles (vponcova)
  - Fix pylint issues (vponcova)
  - run forked tests using subprocess, instead of multiprocessing (wdouglass)
  - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass)
  - Add test case for method call only returning fd (jlyda)
  - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda)
  - fix some lint discovered errors (wdouglass)
  - seperate unixfd functionality, to better support systems that don't have them (wdouglass)
  - Remove note in documentation about unsupported Unix file descriptors (wdouglass)
  - Add a test for UnixFD transfer (wdouglass)
  - Allow UnixFDs to be replaced and passed into Gio (wdouglass)
  - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo)
  - Extend the .coveragerc file (vponcova)
  - Disable builds for Fedora ELN on commits (vponcova)
  - Test Debian with Travis (vponcova)
  - Test Ubuntu with Travis (vponcova)
  - Test CentOS Stream 9 with Travis (vponcova)
  - Use CentOS Stream 8 for testing (vponcova)
  - add remove dbus object function on bus and update tests (matthewcaswell)
  - properly measure coverage across multiprocess test cases (wdouglass)
  - Move handle typing tests into a new class (and a new file) (wdouglass)
  - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass)
  - Add functions for generating/consuming fdlists with variants (wdouglass)
  - Provide a language argument for the code blocks (seahawk1986)
  - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass)
  - Allow to run tests in a container (vponcova)
  - Add C0209 to the ignore list for pylint (tjoslin)
  - Use the latest distro in Travis CI (vponcova)
  - Always update the container (vponcova)
  - Document limitations of the DBus specification generator (vponcova)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Evan Goode <egoode@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 (RHEL-38831)
  - Added pre-transaction plugin
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
    (RHEL-35577)


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: RHEL-113652
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: RHEL-113656


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Martin Kolman <mkolman@redhat.com> - 0.51-1
changelog:
  - SPDX compatible License: line (mkolman)
  - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com)
  - Improve formatting and data in setup.py (vslavik)


author: John Eckersberg <jeckersb@redhat.com> - 0.10.1-1
changelog:
  - New upstream release 0.10.1 (rhbz#2256342)
  - Remove patch for Python 3.13 compatibility (merged upstream in 0.10.0)
  - Add new depencency on furo
  - Include missing THANKS file (https://github.com/netaddr/netaddr/pull/345)


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Simon Pichugin <spichugi@redhat.com> - 0.6.3-1
changelog:
  - Update to 0.6.3
  - Added nesting depth limit to ASN.1 decoder (CVE-2026-30922)
  - Resolves: RHEL-170609


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <mhroncok@redhat.com> - 14-3
changelog:
  - Avoid needless pkg_resources import in pythonbundles.py
  - Ignore environment markers in pythonbundles.py


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Jiri Konecny <jkonecny@redhat.com> - 1.9.0-5
changelog:
  - Migrate to SPDX license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#Detailed_Description


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-168121, RHEL-167887


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-168121, RHEL-167887


author: Python Maint <python-maint@redhat.com> - 1.1.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haïkel Guémar <hguemar@fedoraproject.org>
        Iryna Shcherbina <ishcherb@redhat.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumír Balhar <lbalhar@redhat.com>
        Michal Schorm <mschorm@redhat.com>
        Miro Hrončok <mhroncok@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-29
changelog:
  - Initial package
  Fedora contributions by:
      Dennis Gilmore <dennis@ausil.us>
      Bill Nottingham <notting@fedoraproject.org>
      Charalampos Stratakis <cstratak@redhat.com>
      Christian Heimes <cheimes@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jesse Keating <jkeating@fedoraproject.org>
      Miro Hrončok <miro@hroncok.cz>
      Orion Poplawski <orion@cora.nwra.com>
      Patrik Kopkan <pkopkan@redhat.com>
      Rob Crittenden <rcritten@redhat.com>
      Robert Kuska <rkuska@redhat.com>
      Slavek Kabrda <bkabrda@redhat.com>
      Stephen Gallagher <sgallagh@redhat.com>
      Thomas Spura <tomspur@fedoraproject.org>
      Tom Callaway <spot@fedoraproject.org>
      Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11^20251221git9d7c400-1
changelog:
  - Update to the latest and last upstream commit
  - The project won't have any new releases
  - Use modern pyproject macros
  Related: RHEL-120807


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37
  - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-3
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-119368]
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-116443]
  - kvm-target-i386-add-compatibility-property-for-arch_capa.patch [RHEL-120253]
  - kvm-target-i386-add-compatibility-property-for-pdcm-feat.patch [RHEL-120253]
  - Resolves: RHEL-119368
    ([rhel10] Backport "arm/kvm: report registers we failed to set")
  - Resolves: RHEL-116443
    (qemu crash after hot-unplug disk from the multifunction enabled bus,crash point PCIDevice *vf = dev->exp.sriov_pf.vf[i])
  - Resolves: RHEL-120253
    (Backport fixes for PDCM and ARCH_CAPABILITIES migration incompatibility)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-4
changelog:
  - kvm-qapi-machine-s390x-add-QAPI-event-SCLP_CPI_INFO_AVAI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-tests-functional-add-tests-for-SCLP-event-CPI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-redhat-Add-new-rhel9.8.0-and-rhel10.2.0-machine-type.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-vfio-rename-field-to-num_initial_regions.patch [RHEL-118810]
  - kvm-vfio-only-check-region-info-cache-for-initial-region.patch [RHEL-118810]
  - kvm-arm-create-new-rhel-10.2-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-arm-create-new-rhel-9.8-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-10.2-specific-pc-q35-machine-typ.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-9.8-specific-pc-q35-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-rh-enable-CONFIG_USB_STORAGE_BOT.patch [RHEL-101929]
  - Resolves: RHEL-104009
    ([IBM 10.2 FEAT] KVM: Enhance machine type definition to include CPI and PCI passthru capabilities (qemu))
  - Resolves: RHEL-105823
    (Add new -rhel10.2.0 machine type to qemu-kvm [s390x])
  - Resolves: RHEL-73008
    ([IBM 10.2 FEAT] KVM: Implement Control Program Identification (qemu))
  - Resolves: RHEL-118810
    ([RHEL 10.2] Windows 11 VM fails to boot up with ramfb='on' with QEMU 10.1)
  - Resolves: RHEL-105826
    (Add new -rhel10.2.0 machine type to qemu-kvm [aarch64])
  - Resolves: RHEL-105828
    (Add new -rhel10.2.0 machine type to qemu-kvm [x86_64])
  - Resolves: RHEL-101929
    (enable 'usb-bot' device for proper support of USB CD-ROM drives via libvirt  )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-5
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120116]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120116]
  - kvm-vfio-Disable-VFIO-migration-with-MultiFD-support.patch [RHEL-126573]
  - kvm-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-from-10..patch [RHEL-67323]
  - kvm-hw-arm-smmu-common-Check-SMMU-has-PCIe-Root-Complex-.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Re-arrange-SMMUv3-IORT-build.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Update-IORT-for-multiple-smmu.patch [RHEL-73800]
  - kvm-hw-arm-virt-Factor-out-common-SMMUV3-dt-bindings-cod.patch [RHEL-73800]
  - kvm-hw-arm-virt-Add-an-SMMU_IO_LEN-macro.patch [RHEL-73800]
  - kvm-hw-pci-Introduce-pci_setup_iommu_per_bus-for-per-bus.patch [RHEL-73800]
  - kvm-hw-arm-virt-Allow-user-creatable-SMMUv3-dev-instanti.patch [RHEL-73800]
  - kvm-qemu-options.hx-Document-the-arm-smmuv3-device.patch [RHEL-73800]
  - kvm-bios-tables-test-Allow-for-smmuv3-test-data.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Add-tests-for-legacy-smmuv3-a.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Update-tables-for-smmuv3-test.patch [RHEL-73800]
  - kvm-qtest-Do-not-run-bios-tables-test-on-aarch64.patch []
  - Resolves: RHEL-120116
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-10.2])
  - Resolves: RHEL-126573
    (VFIO migration using multifd should be disabled by default)
  - Resolves: RHEL-67323
    ([aarch64] Support ACPI based PCI hotplug on ARM)
  - Resolves: RHEL-73800
    (NVIDIA:Grace-Hopper:Backport support for user-creatable nested SMMUv3 - RHEL 10.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-6
changelog:
  - kvm-ram-block-attributes-fix-interaction-with-hugetlb-me.patch [RHEL-126708]
  - kvm-ram-block-attributes-Unify-the-retrieval-of-the-bloc.patch [RHEL-126708]
  - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-128085]
  - kvm-Fix-the-typo-of-vfio-pci-device-s-enable-migration-o.patch [RHEL-130704]
  - Resolves: RHEL-126708
    ([RHEL 10]snp guest fail to boot with hugepage)
  - Resolves: RHEL-128085
    (VM crashes during boot when virtio device is attached through vfio_ccw)
  - Resolves: RHEL-130704
    ([rhel10] Fix the typo under vfio-pci device's enable-migration option )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-7
changelog:
  - kvm-pcie_sriov-Fix-broken-MMIO-accesses-from-SR-IOV-VFs.patch [RHEL-120115]
  - kvm-arm-fix-oob-access-in-compat-handling.patch [RHEL-130478]
  - Resolves: RHEL-120115
    (The vf nic created using the IGB emulated nic can not obtain ip address )
  - Resolves: RHEL-130478
    (Migration from RHEL 10.2 to RHEL 10.1 with virt-rhel10.0.0 machine type fails on Grace)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-8
changelog:
  - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540]
  - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543]
  - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212]
  - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212]
  - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212]
  - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212]
  - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212]
  - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212]
  - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212]
  - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212]
  - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212]
  - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212]
  - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212]
  - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212]
  - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212]
  - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212]
  - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212]
  - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212]
  - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212]
  - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212]
  - Resolves: RHEL-129540
    (Assertion failure on drain with iothread and I/O load)
  - Resolves: RHEL-121543
    (The VM hit io error when do S3-PR integration on the pass-through  failover multipath device)
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-9
changelog:
  - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212]
  - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003]
  - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003]
  - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003]
  - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003]
  - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853]
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)
  - Resolves: RHEL-110003
    (Expose block limits of block nodes in QMP and qemu-img)
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-10
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142]
  - Resolves: RHEL-108142
    (QEMU crashes when stopping source VM during live migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-11
changelog:
  - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-126707]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028]
  - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853]
  - Resolves: RHEL-126707
    ([qemu, rhel-10] increase default TSEG size)
  - Resolves: RHEL-139028
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2])
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Eduard Abdullin <eabdullin@almalinux.org> - 18:10.1.0-11.alma.1
changelog:
  - Enable QXL device build
  - Enable building for ppc64le
  - Re-added Spice support
  - Don't remove slof.bin for ppc64le


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-12
changelog:
  - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118]
  - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118]
  - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118]
  - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118]
  - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118]
  - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785]
  - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785]
  - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785]
  - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785]
  - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785]
  - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785]
  - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785]
  - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785]
  - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-net-implement-tunnel-probing.patch [RHEL-143785]
  - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785]
  - Resolves: RHEL-79118
    ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10])
  - Resolves: RHEL-143785
    (backport support for GSO over UDP tunnel offload)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425]
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749]
  - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584]
  - Resolves: RHEL-147425
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-132749
    (Migrate SCSI PR state and preempt reservation upon live migration)
  - Resolves: RHEL-134989
    (Hotplugged interface device can not be shown in the guest)
  - Resolves: RHEL-146584
    ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-14
changelog:
  - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
  - Resolves: RHEL-153058
    (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
  - Resolves: RHEL-144004
    ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-15
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
  - Resolves: RHEL-155601
    (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-16
changelog:
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
  - Resolves: RHEL-158224
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-17
changelog:
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-114231]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-114231]
  - Resolves: RHEL-114231
    (Add stats-intervals support to --blockdev)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-18
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-158212]
  - kvm-hw-tpm-Factor-tpm_ppi_enabled-out.patch [RHEL-112608]
  - kvm-hw-tpm-Add-TPMIfClass-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Remove-CRBState-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Propagate-ppi_enabled-to-tpm_tis_reset-and-re.patch [RHEL-112608]
  - kvm-hw-tpm-Simplify-tpm_ppi_enabled.patch [RHEL-112608]
  - kvm-docs-specs-tpm-document-PPI-support-on-ARM64-virt.patch [RHEL-112608]
  - kvm-hw-acpi-tpm-parameterize-PPI-base-address-in-tpm_bui.patch [RHEL-112608]
  - kvm-hw-tpm-add-PPI-support-to-tpm-tis-device-for-ARM64-v.patch [RHEL-112608]
  - Resolves: RHEL-158212
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.3])
  - Resolves: RHEL-112608
    ([ARM64] Windows 11 VM should install without TPM Bypass)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Tyonnchie Berry <tyberry@redhat.com> - 2.8-5
changelog:
  - Added patch Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch sched_attr-Do-not-define-for-glibc-2.41.patch
  Resolves: RHEL-88470


author: Tyonnchie Berry <tyberry@redhat.com> - 2.9-1
changelog:
  - Rebased to latest upstream version
  - Dropped previously applied patches
  - Cleaned up spec file
  Resolves: RHEL-86705


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase realtime-tests to the latest upstream
  - Added 3 patches and updated spec file
  Resolves: RHEL-144701


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-8
changelog:
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!) chronologically
    from the latest:
    - Resolve libs for executable links in COPY_AS_IS, PR 3073
    - Skip invalid disk drives when saving layout PR 3047
    - Do not delete NetBackup logs in case of errors and save
      /usr/openv/netbackup/logs to the restored system after a successful recovery
    - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen
      with NetBackup 10.2.0.1
    - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-10
changelog:
  - skip btrfs subvolumes when detecting ESP partitions
  - fix booting on UEFI systems with multiple CDROM devices
  - fix copying of console kernel cmdline parameters
  - Use git to apply patches in %prep
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!):
    - Backport PR 3250 to fix useless warning that libsystemd-core requires
      additional libraries and ReaR recovery system needs additional libraries
    - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs://
      BACKUP/OUTPUT_URL
  - fix backup of btrfs subvolumes


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-11
changelog:
  - Generate /etc/rear/os.conf during build again, it is better than generating it
    in %post, but do not mark it as config file to allow it to be updated during
    package upgrade and avoid containing an old OS version information


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-3
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-5
changelog:
  - fix support for PowerNV machines without PPC PReP partitions (RHEL-134218)
  - fix duplicate execution of automated recovery (RHEL-110659)
  - fix sorting of stage scripts (RHEL-132181)
  - add support for dbus-broker (RHEL-134213)


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 284-1
changelog:
  - Use --config=xxx for clang configs instead of two separate arguments to work
    around a bug in meson
  - Add clang link config file


author: Michal Domonkos <mdomonko@redhat.com> - 290-1
changelog:
  - Use upstream versions of find-provides/requires (RHEL-39760)
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-84703)


author: Rich Megginson <rmeggins@redhat.com> - 1.110.0-0.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - Resolves: RHEL-46227 : ha_cluster - export CIB properties configuration
  - Resolves: RHEL-110865 : network - Ansible RHEL network system role fails cannot find route table main
  - Resolves: RHEL-123026 : network - Skip the loopback profile when deleting all profiles except the ones explicitly included
  - Resolves: RHEL-123016 : sshd - fix: include external config files first so they can override all options
  - Resolves: RHEL-66738 : storage - add support for disk partitioning
  - Resolves: RHEL-115033 : storage - Storage role crashes on systems without /etc/fstab
  - support podman, timesync in container builds


author: Rich Megginson <rmeggins@redhat.com> - 1.110.1-0.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - fixes ansible-test and ansible-lint issues in firewall


author: Rich Megginson <rmeggins@redhat.com> - 1.110.1-1.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - fixes ansible-test issue with firewall


author: Rich Megginson <rmeggins@redhat.com> - 1.111.0-0.1
changelog:
  - Resolves: RHEL-46226 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
  - Resolves: RHEL-128428 : nbde_client - Error in using the RHEL system role for nbde client [rhel-10]
  - Resolves: RHEL-104931 : snapshot - add support for bootable snapsets
  - new role hpc
  - minor firewall update


author: Rich Megginson <rmeggins@redhat.com> - 1.111.0-0.2
changelog:
  - Resolves: RHEL-46226 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
  - revert to community.general 11.4.1 - we cannot use 12.* anymore as they have dropped support for py27 and py36


author: Rich Megginson <rmeggins@redhat.com> - 1.112.0-0.1
changelog:
  - Resolves: RHEL-127971 : sshd - feat: Add new configuration option CanonicalMatchUser on RHEL/CentOS


author: Rich Megginson <rmeggins@redhat.com> - 1.113.0-0.1
changelog:
  - Resolves: RHEL-127971 : sshd - feat: Add new configuration option CanonicalMatchUser on RHEL/CentOS
  - fix ansible-test issues in ha_cluster, sshd
  - rebase all roles to version which has community.general 11.x support (no code changes, only meta)


author: Rich Megginson <rmeggins@redhat.com> - 1.114.0-0.1
changelog:
  - Resolves: RHEL-129309 : aide - cannot manage rhel9.7/10.1 or earlier - unexpected character - line database=file
  - Resolves: RHEL-136597 : ha_cluster - feat: add support for fencing-watchdog-timeout
  - remove hpc role


author: Rich Megginson <rmeggins@redhat.com> - 1.118.0-0.1
changelog:
  - Resolves: RHEL-122052 : Templates in some role license files
  - Resolves: RHEL-120413 : ha_cluster - ha_cluster role does not work in container builds
  - Resolves: RHEL-136607 : metrics - [RFE] configure TLS certificates in grafana using the metrics system role
  - Resolves: RHEL-138277 : ssh - feat: Add new configuration option VersionAddendum
  - Resolves: RHEL-144495 : sshd - feat: New OpenSSH configuration option GSSAPIDelegateCredentials
  - Resolves: RHEL-137261 : storage - in _get_device_id IndexError: list index out of range
  - All roles support INJECT_FACTS_AS_VARS=false
  - metrics - test: do not restore service if final state not-found
  - sshd - feat: Add systemd ephemeral authorized_keys to the instantiated service file on Fedora
  - storage - fix: add vdo package for Fedora OSTree


author: Rich Megginson <rmeggins@redhat.com> - 1.118.0-0.2
changelog:
  - Resolves: RHEL-122052 : Templates in some role license files
  - Fix ansible-test issue with community.general.ini_file module 11.4.4 in documentation string


author: Rich Megginson <rmeggins@redhat.com> - 1.119.0-0.1
changelog:
  - Resolves: RHEL-144914 : postgresql - add PostgreSQL 18
  - fix upstream shellcheck issue in nbde_client role


author: Rich Megginson <rmeggins@redhat.com> - 1.119.1-0.0.1
changelog:
  - Resolves: RHEL-144914 : postgresql - add PostgreSQL 18 - fixes test issue
  - Resolves: RHEL-135522 : snapshot - Snapshot role ignores snapshot_lvm_bootable: true setting when creating a snapset
  - Resolves: RHEL-123523 : storage -  ZeroDivisionError when creating LVM volume without size specification


author: Rich Megginson <rmeggins@redhat.com> - 1.120.1-0.1
changelog:
  - Resolves: RHEL-145214 : selinux - Missing proto 'sctp' and 'dccp'
  - Resolves: RHEL-145219 : vpn - [ERROR]: Task failed: object of type 'dict' has no attribute '1.1.1.1'


author: Rich Megginson <rmeggins@redhat.com> - 1.120.2-0.1
changelog:
  - Resolves: RHEL-145214 : selinux - Missing proto 'sctp' and 'dccp'
  - timesync - fix: use ansible_facts timesync_ntp_provider_current


author: Rich Megginson <rmeggins@redhat.com> - 1.120.3-0.1
changelog:
  - Resolves: RHEL-150780 : firewall - fix: el7 interface functionality requires NetworkManager
  - Resolves: RHEL-145247 : selinux - [v 1.10.4] Prepare module installation -> "Template error: object of type 'dict' has no attribute 'path'"
  - ha_cluster - fix: ostree - add dnf/dnf5 package, add firewall packages
  - metrics - test: ostree - add package pcp-pmda-apache, role certificate
  - systemd - test: ostree requires cronie package for testing


author: Rich Megginson <rmeggins@redhat.com> - 1.120.4-0.1
changelog:
  - Resolves: RHEL-150780 : firewall - fix: el7 interface functionality requires NetworkManager
  - firewall - test: ensure interface chosen is managed by NetworkManager


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Jonathan Wright <jonathan@almalinux.org> - 3.3.0-6.alma.1
changelog:
  - Fix for CVE-2024-12084
  - Fix for CVE-2024-12085
  - Fix for CVE-2024-12086
  - Fix for CVE-2024-12087
  - Fix for CVE-2024-12088
  - Fix for CVE-2024-12747


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-5
changelog:
  - Resolves: RHEL-169137 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-2
changelog:
  - Rebase to 8.2604.0
    Resolves: RHEL-140910
  - Drop ossl-free-cert.patch (upstream)
  - Drop gtls-unused-certificates.patch (upstream)
  - Add SAN:IP validation support
    Resolves: RHEL-150376
  - Add TlsRevocationCheck support
    Resolves: RHEL-151324
  - Fix omelasticsearch IPv6 handling
    Resolves: RHEL-164768
  - Fix imfile not releasing deleted file FDs in inotify mode
    Resolves: RHEL-149118


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Eduard Abdullin <eabdullin@almalinux.org> - 1.79.0-3.alma.2
changelog:
  - Set target_cpu=x86-64-v2 for x86_64_v2 arch in build_rustflags macro
  - Set RUSTC_TARGET_CPU_X86_64 as x86-64-v2 for x86_64_v2 arch


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100438)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744)
  - zipl: makedumpfile is required for ngdump support (RHEL-114661)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109214)
  - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100438)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829)
  - Secure Execution: Add tool to verify host-key documents (RHEL-136795)
  - Resolves: RHEL-100438 RHEL-71829 RHEL-136795


author: Dan Horák <dhorak@redhat.com> - 2:2.41.0-1
changelog:
  - rebased to 2.41.0 (RHEL-136097)
  - hsci: Automatically set appropriate MTU for HSCI (RHEL-153550)
  - Resolves: RHEL-136097 RHEL-153550


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-36
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-114454
  - Add support for Image Mode
    Resolves: RHEL-114454


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.69 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.69


author: Matthew Burket <mburket@redhat.com> - 0.1.70-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.70 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.70


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.71-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.71 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.71


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.72-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.72 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.72


author: Matthew Burket <mburket@redhat.com>
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.74 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.77-2
changelog:
  - fix incorrect applicability of Grub2 UEFI specific rules
  - replace grub-mkconfig with grub2-mkconfig in rule descriptions


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.80-1
changelog:
  - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300)
  - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647)
  - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549)
  - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722)
  - Corrected version in the description of CIS profiles (RHEL-143955)
  - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059)


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-6
changelog:
  - seabios-pciinit-don-t-misalign-large-BARs.patch [RHEL-67847]
  - Resolves: RHEL-67847
    (amdgpu failed to initialize when multiple AMD MI210 GPUs assigned and firmware is seabios [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-7
changelog:
  - seabios-Remove-iasl-from-BuildRequires.patch [RHEL-68975]
  - Resolves: RHEL-68975
    (remove iasl build dependency)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-8
changelog:
  - seabios-update-release-date.patch [RHEL-126466]
  - Resolves: RHEL-126466
    (SeaBIOS date is "stuck" at 2014 even for recent releases)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.17.0-1
changelog:
  - Rebase to seabios 1.17.0
  - Resolves: RHEL-127509
    (rebase seabios to upstream release 1.17.0)
  - Resolves: RHEL-64639
    ([RHEL-10] Grub graphics modules crash VM when there's no graphics)


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.11-1
changelog:
  - Allow iotop stream connect to systemd-userdbd
  Resolves: RHEL-105481
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-107589
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-124855
  - Allow nfsidmapd search virt lib directories
  Resolves: RHEL-68722
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.12-1
changelog:
  - Update kernel_secretmem_use()
  Resolves: RHEL-116154
  - Allow system_mail_t read apache system content conditionally
  Resolves: RHEL-114970
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-119619
  - Update specfile trigger for smartmontools
  Resolves: RHEL-113167


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.13-1
changelog:
  - Add the rpm_signal() interface
  Related: RHEL-107589
  - Allow tuned_t use its private tmpfs files
  Related: RHEL-107589
  - Allow samba-bgqd send to smbd over a unix datagram socket
  Resolves: RHEL-93731
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041
  - Confine redfish_finder - host api discovery service
  Resolves: RHEL-50299
  - Update policy for dhcpc_hook_t
  Resolves: RHEL-113937
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  Resolves: RHEL-113937
  - Allow systemd to map files under /sys
  Resolves: RHEL-132638


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.14-1
changelog:
  - Update ktls policy
  Resolves: RHEL-123737
  - Update policy for redfish-finder
  Resolves: RHEL-50299
  - Allow sshd-session read, write, and map ica tmpfs files
  Resolves: RHEL-138247
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  Resolves: RHEL-127721
  - Allow stalld map sysfs files
  Resolves: RHEL-135512
  - Allow aide get attributes of a filesystem with extended attributes
  Resolves: RHEL-121479
  - Label miscellaneous /dev/papr-* devices
  Resolves: RHEL-129839
  - Allow KDE Plasma Login Manager to function as a display manager
  Resolves: RHEL-135676
  - Update specfile trigger for openwsmand
  Resolves: RHEL-133024


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.15-1
changelog:
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-77047
  - Allow stap server read virtual memory sysctls
  Resolves: RHEL-114104
  - Allow sshd-session inherit limits from its parent process
  Resolves: RHEL-136673
  - Allow sshd noatsecure on sshd-session execution
  Resolves: RHEL-138247
  - Allow sshd-net read and write to sshd vsock socket
  Related: RHEL-138247


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.16-1
changelog:
  - Allow sshd-session inherit limits from its parent sshd process
  Resolves: RHEL-136673
  - Revert "Allow sshd-session inherit limits from its parent process"
  Resolves: RHEL-136673
  - Allow tlshd write generic certificates
  Resolves: RHEL-123737
  - Allow systemd-hostnamed to create its Varlink socket
  Resolves: RHEL-139385
  - Update gpg_role() interface with unix_stream_socket permissions
  Resolves: RHEL-128555
  - Label /etc/aliases.cdb with etc_aliases_t
  Resolves: RHEL-109976
  - Add aliases.lmdb to mta_filetrans_named_content()
  Resolves: RHEL-140884
  - Update policy for bootupd
  Resolves: RHEL-141391


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.17-1
changelog:
  - Allow rhsmcertd read anaconda run files
  Resolves: RHEL-141391
  - Allow mdadm to use CAP_BPF during RAID monitoring
  Resolves: RHEL-135765
  - Allow mdadm the CAP_SYS_PTRACE capability
  Resolves: RHEL-135765
  - Allow staff and sysadm execute iotop using sudo
  Resolves: RHEL-134940
  - Allow kernel_t to read/write all domains' pipes
  Resolves: RHEL-124442
  - Allow nfsd_t domain setuid and setgid capability for rpc.mountd
  Resolves: RHEL-148107


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.18-1
changelog:
  - Allow NetworkManager list bpf directories
  Resolves: RHEL-142171
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  Resolves: RHEL-114886
  - Allow pkcsslotd read files in /proc and /sys
  Resolves: RHEL-130812
  - Allow pkcsslotd map its private tmpfs files
  Resolves: RHEL-130812
  - Allow tlshd communication to unconfined_t over a tcp socket
  Resolves: RHEL-125106
  - Label /run/insights-client.ppid with insights_client_run_t
  Resolves: RHEL-146687
  - Allow NM nvme dispatcher script start systemd services
  Resolves: RHEL-140760
  - Allow tlshd write generic certificate dirs
  Resolves: RHEL-127023
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  Resolves: RHEL-121479
  - Allow plasma login manager stop login services
  Resolves: RHEL-140911
  - Rebuild selinux policy after installation of the extra package
  Resolves: RHEL-135875
  Resolves: RHEL-143926
  - Move triggerin scriptlets to the parent packages
  Resolves: RHEL-141813
  - Rebuild policy before running {binsbin|varrun}-convert.sh
  Resolves: RHEL-141813


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.19-1
changelog:
  - Label the greetd login manager framework as a display manager
  Resolves: RHEL-147638
  - Allow sysadm user connect to lvm over a unix stream socket
  Resolves: RHEL-153729
  - Allow virtqemud map vhost net device
  Resolves: RHEL-141541
  - Allow virtqemud_t send kill signal to svirt_tcg_t
  Resolves: RHEL-69913
  - Allow virtqemud_t get priority of a svirt_t process
  Resolves: RHEL-69920
  - Dontaudit tlshd write generic certificate dirs
  Resolves: RHEL-152619
  - Allow redis_t to create netlink_rdma_socket
  Resolves: RHEL-154814
  - Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
  Resolves: RHEL-140212


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.20-1
changelog:
  - Do not backslash-escape underscores in file context specifications
  Resolves: RHEL-140921
  - Policy for go-fdo-server
  Resolves: RHEL-145754
  - Allow iptables_t read state of some processes
  Resolves: RHEL-164304
  - Allow iptables read firewalld process state
  Resolves: RHEL-164304
  - Allow systemd-machined read virtd process state
  Resolves: RHEL-164304
  - Allow systemd-machined read svirt process state
  Resolves: RHEL-164304
  - Label /dev/HID-SENSOR-.* with hid_sensor_device_t
  Resolves: RHEL-168417
  - Allow NetworkManager_dispatcher_nvme_t check status of systemd services
  Resolves: RHEL-164864
  - Dontaudit setroubleshootd read root's home files like .rpmmacros
  Resolves: RHEL-142548
  - Allow systemd-tmpfiles to adjust resource limits
  Resolves: RHEL-139855


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.21-1
changelog:
  - Allow sys_resource on execution of generic executables conditionally
  Resolves: RHEL-141858
  - Label bootloader-migrate-generator with coreos_bootloader_migrate_generator_exec_t
  Resolves: RHEL-156457
  - Label /run/coreos with coreos_installer_var_run_t
  Resolves: RHEL-156456
  - Add systemd_create_generator_unit_file() and systemd_write_generator_unit_file()
  Resolves: RHEL-156456
  - Allow setroubleshoot_fixit_t to touch /.autorelabel and reboot
  Resolves: RHEL-170267
  - Remove 14 permissive domains
  Resolves: RHEL-166039
  - Do not audit iptables attempts to read other process state
  Resolves: RHEL-164304


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.36-1
changelog:
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code
  - browser: Always show "Report Bug" button


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-1
changelog:
  - Migrate from libxml2 to xml.etree.ElementTree
  - Handle ImportError when setroubleshoot.browser is not available
  - Add support for multiple commands in fix_cmd (RHEL-155209)


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.15-1
changelog:
  - restorecon.py: exclude more paths
  - Improve disable_ipv6 plugin then_text
  - Update generated configuration files
  - Update translations


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.22.2-2
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.22.2
  - re-add test file installation to fix tier0 tests
  - Resolves: RHEL-153734


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-2
changelog:
  - use %configure RPM macro instead of bare ./configure to inject
    RPM hardening flags (stack protector, FORTIFY_SOURCE)
  - use %make_build and %make_install RPM macros
  - Resolves: RHEL-152227


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-9
changelog:
  - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-10
changelog:
  - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-12
changelog:
  - Resolves: RHEL-160670 - squid: Squid: Denial of Service via heap
    Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  - Resolves: RHEL-160671 - squid: Squid: Denial of Service via crafted
    ICP traffic (CVE-2026-32748)


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0
  - Drop upstreamed patches


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Make queue_track the default backend
  - Remove LTO build flags
  - Remove the -m64 build flag
  Resolves: RHEL-105604 RHEL-114506


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Alejandro López <allopez@redhat.com> - 1.9.17-3.p2
changelog:
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-4.p2
changelog:
  - Bump release number
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-4
changelog:
  - Add extra SELinux policies.
    Related: RHEL-53967
  - Fix FTBFS, add gmp-devel
    Resolves: RHEL-65460


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Leo Sandoval <lsandova@redhat.com> - 6.04-0.32
changelog:
  - Bump version and include previous resolves ticket number on commit message
  - Resolves: #RHEL-51170


author: Eduard Abdullin <eabdullin@almalinux.org> - 6.04-0.34.alma.2
changelog:
  - Use static syslinux64.exe and syslinux.exe to avoid a difference in the
    checksum in x86_64_v2 arch


author: Josue Hernandez <josherna@redhat.com> - 6.04-0.35
changelog:
  - Update zlib version to zlib-1.2.11
  - Resolves: #RHEL-156979
  - Resolves: CVE-2022-37434 CVE-2018-25032 CVE-2016-9840
  - Resolves: CVE-2016-9841 CVE-2016-9842 CVE-2016-9843


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


