# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-244.el10]
changelog:
  - x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184788]
  - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-186142]
  - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180777]
  - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180777]
  - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180777]
  - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180777] {CVE-2025-38614}
  - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180777]
  - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180777]
  - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180777]
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180777] {CVE-2026-46242}
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180777]
  - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180777]
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173837] {CVE-2026-43074}
  - epoll: annotate racy check (Ian Kent) [RHEL-180777]
  - ima: Add code comments to explain IMA iint cache atomic_flags (Bruno Meneguele) [RHEL-104343]
  - evm: fix security.evm for a file with IMA signature (Bruno Meneguele) [RHEL-104343]
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183963] {CVE-2026-46316}
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181905] {CVE-2026-46259}
  - mei: late_bind: fix struct intel_lb_component_ops kernel-doc (Steve Best) [RHEL-177639]
  - misc/mei: INTEL_MEI should depend on X86 or DRM_XE (Steve Best) [RHEL-177639]
  - mei: me: reduce the scope on unexpected reset (Steve Best) [RHEL-177639]
  - mei: trace: treat reg parameter as string (Steve Best) [RHEL-177639]
  - misc/mei: gsc_proxy: add dependency on Xe driver (Steve Best) [RHEL-177639]
  - misc/mei: Allow building standalone for compile testing (Steve Best) [RHEL-177639]
  - misc/mei: Decouple ME interfaces from GPU drivers (Steve Best) [RHEL-177639]
  - misc/mei: Allow building Intel ME interface on non-x86 (Steve Best) [RHEL-177639]
  - mei: Fix error handling in mei_register (Steve Best) [RHEL-177639]
  - mei: gsc: add dependency on Xe driver (Steve Best) [RHEL-177639]
  - mei: Remove redundant pm_runtime_mark_last_busy() calls (Steve Best) [RHEL-177639]
  - mei: fix error flow in probe (Steve Best) [RHEL-177639]
  - mei: txe: fix initialization order (Steve Best) [RHEL-177639]
  - mei: late_bind: Fix -Wincompatible-function-pointer-types-strict (Steve Best) [RHEL-177639]
  - redhat/configs: disable CONFIG_INTEL_MEI_LB (Steve Best) [RHEL-177639]
  - mei: late_bind: add late binding component driver [partial] (Steve Best) [RHEL-177639]
  - mei: bus: add mei_cldev_mtu interface (Steve Best) [RHEL-177639]
  - mei: gsc: demote unexpected reset print (Steve Best) [RHEL-177639]
  - mei: bus: demote error on connect (Steve Best) [RHEL-177639]
  - mei: retry connect if interrupted by link reset (Steve Best) [RHEL-177639]
  - mei: make a local copy of client uuid in connect (Steve Best) [RHEL-177639]
  - mei: me: trigger link reset if hw ready is unexpected (Steve Best) [RHEL-177639]
  - mei: gsc: fix remove operations order (Steve Best) [RHEL-177639]
  - mei: hook mei_device on class device (Steve Best) [RHEL-177639]
  - RDMA/irdma: Add support for GEN4 hardware (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Provide scratch buffers to firmware for internal use (Michal Schmidt) [RHEL-186151]
  - RDMA: Don't use %pK through printk (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Harden depth calculation functions (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Return EINVAL for invalid arp index error (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix deadlock during netdev reset with active connections (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Clean up unnecessary dereference of event->cm_node (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Update ibqp state to error if QP is already in error state (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Initialize free_qp completion before using it (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix double free related to rereg_user_mr (Michal Schmidt) [RHEL-186151]
  - RDMA: Complete k[z|m|c]alloc-to-k[z|m]alloc_obj conversion [irdma] (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (Michal Schmidt) [RHEL-186151]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [irdma] (Michal Schmidt) [RHEL-186151]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [irdma] (Michal Schmidt) [RHEL-186151]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [irdma] (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Use kvzalloc for paged memory DMA address array (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Use CQ ID for CEQE context (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Add enum defs for reserved CQs/QPs (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove fixed 1 ms delay during AH wait loop (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove redundant dma_wmb() before writel() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Simplify bool conversion (Michal Schmidt) [RHEL-186151]
  - rtla: Fix parsing of multi-character short options (Tomas Glozar) [RHEL-151369]
  - tracing: Fix potential deadlock in cpu hotplug with osnoise (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Convert links to RST format (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Document SIGINT behavior (Tomas Glozar) [RHEL-151369]
  - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-151369 RHEL-151475]
  - rtla/utils: Fix loop condition in PID validation (Tomas Glozar) [RHEL-151369]
  - rtla/utils: Fix resource leak in set_comm_sched_attr() (Tomas Glozar) [RHEL-151369]
  - rtla/trace: Fix I/O handling in save_trace_to_file() (Tomas Glozar) [RHEL-151369]
  - rtla/trace: Fix write loop in trace_event_save_hist() (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Simplify RTLA_NO_BPF environment variable check (Tomas Glozar) [RHEL-151369]
  - rtla: Use str_has_prefix() for option prefix check (Tomas Glozar) [RHEL-151369]
  - rtla: Enforce exact match for time unit suffixes (Tomas Glozar) [RHEL-151369]
  - rtla: Use str_has_prefix() for prefix checks (Tomas Glozar) [RHEL-151369]
  - rtla: Add str_has_prefix() helper function (Tomas Glozar) [RHEL-151369]
  - rtla: Handle pthread_create() failure properly (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Add bounds check for softirq vector (Tomas Glozar) [RHEL-151369]
  - rtla: Simplify code by caching string lengths (Tomas Glozar) [RHEL-151369]
  - rtla: Replace magic number with MAX_PATH (Tomas Glozar) [RHEL-151369]
  - rtla: Introduce common_threshold_handler() helper (Tomas Glozar) [RHEL-151369]
  - rtla/actions: Simplify argument parsing (Tomas Glozar) [RHEL-151369]
  - rtla: Use strdup() to simplify code (Tomas Glozar) [RHEL-151369]
  - rtla: Exit on memory allocation failures during initialization (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus from for_each_monitored_cpu (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus members (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus arguments (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate nr_cpus usage across all tools (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Document --stack-format option (Tomas Glozar) [RHEL-136812 RHEL-151369]
  - rtla/timerlat: Add --stack-format option (Tomas Glozar) [RHEL-136812 RHEL-151369]
  - tools/rtla: Add unit tests for utils.c (Tomas Glozar) [RHEL-151369]
  - tools/build: Add feature test for libcheck (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Generate optstring from long options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Add hwnoise to main page (Tomas Glozar) [RHEL-151369]
  - rtla: Fix build without libbpf header (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Include defaults for tracer options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Mention default cgroup state (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Mention default priority (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Correct tracer name for common options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in rtla-timerlat-top.rst (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: rename common_xxx.rst files to common_xxx.txt (Tomas Glozar) [RHEL-151369]
  - rtla: Fix parse_cpu_set() bug introduced by strtoi() (Tomas Glozar) [RHEL-151369]
  - rtla: Fix parse_cpu_set() return value documentation (Tomas Glozar) [RHEL-151369]
  - rtla: Ensure null termination after read operations in utils.c (Tomas Glozar) [RHEL-151369]
  - rtla: Make stop_tracing variable volatile (Tomas Glozar) [RHEL-151369]
  - rtla: Add generated output files to gitignore (Tomas Glozar) [RHEL-151369]
  - rtla: Fix NULL pointer dereference in actions_parse (Tomas Glozar) [RHEL-151369]
  - rtla: Remove unused headers (Tomas Glozar) [RHEL-151369]
  - rtla: Remove redundant memset after calloc (Tomas Glozar) [RHEL-151369]
  - rtla: Use standard exit codes for result enum (Tomas Glozar) [RHEL-151369]
  - rtla: Replace atoi() with a robust strtoi() (Tomas Glozar) [RHEL-151369]
  - rtla: Introduce for_each_action() helper (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Deduplicate cgroup path opening code (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -H/--house-keeping option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -P/--priority option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -e/--event option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -d/--duration option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -D/--debug option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -C/--cgroup option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -c/--cpus option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add common_parse_options() (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add common_usage() (Tomas Glozar) [RHEL-151369]
  - rtla: Set stop threshold after all instances are enabled (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unused function declarations (Tomas Glozar) [RHEL-151369]
  - tracing: Fix multiple typos in trace_osnoise.c (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-147742 RHEL-151369]
  - rtla/tests: Don't rely on matching ^1ALL (Tomas Glozar) [RHEL-151369]
  - rtla: Fix -a overriding -t argument (Tomas Glozar) [RHEL-151369]
  - rtla: Fix -C/--cgroup interface (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace osnoise_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace osnoise_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace timerlat_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace timerlat_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add fatal() and replace error handling pattern (Tomas Glozar) [RHEL-151369]
  - rtla/tests: Fix osnoise test calling timerlat (Tomas Glozar) [RHEL-151369]
  - rtla/tests: Extend action tests to 5s (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Fix --on-threshold always triggering (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Fix unassigned nr_cpus (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unused optional option_index (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add for_each_monitored_cpu() helper (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add remaining support for osnoise actions (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Add test engine support for unexpected output (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Fix -A option name in test comment (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Consolidate code between osnoise/timerlat and hist/top (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Create common_apply_config() (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Move top/hist params into common struct (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Consolidate common parameters into shared structure (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tracing: Replace opencoded cpumask_next_wrap() in move_to_next_cpu() (Tomas Glozar) [RHEL-151369]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-245.el10]
changelog:
  - riscv: entry: Split ret_from_fork() into user and kernel (Jennifer Berringer) [RHEL-188766]
  - riscv: entry: Convert ret_from_fork() to C (Jennifer Berringer) [RHEL-188766]
  - ACPICA: actbl2: Add definitions for RIMT (Jennifer Berringer) [RHEL-187991]
  - soc/tegra: Use ARM SMCCC to get chip ID, revision, and platform info (Steve Dunnagan) [RHEL-143339]
  - dma-debug: suppress cacheline overlap warning when arch has no DMA alignment requirement (Jerry Snitselaar) [RHEL-182720]
  - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (Steve Best) [RHEL-182291]
  - redhat/configs: riscv: Enable ARCH_SPACEMIT (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Clear interrupt move state during CPU offlining (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-aplic: Prevent crash when MSI domain is missing (Jennifer Berringer) [RHEL-174301] {CVE-2024-56682}
  - irqchip/riscv-imsic: Adjust the number of available guest irq files (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Add a CPU pm notifier to restore the IMSIC on exit (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Inline imsic_vector_from_local_id() (Jennifer Berringer) [RHEL-174301]
  - irqchip/irq-riscv-imsic-early: Export imsic_acpi_get_fwnode() (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Don't dereference before NULL pointer check (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Add kernel parameter to disable IPIs (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Convert to msi_create_parent_irq_domain() helper (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Start local sync timer on correct CPU (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Avoid interrupt translation in interrupt handler (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Implement irq_force_complete_move() for IMSIC (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv: Ensure ordering of memory writes and IPI writes (Jennifer Berringer) [RHEL-174301]
  - serial: 8250_of: manage bus clock in suspend/resume (Jennifer Berringer) [RHEL-174301]
  - serial: 8250_of: add support for an optional bus clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: mark top_dclk as CLK_IS_CRITICAL (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc() (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: k3: Decouple composite reset lines (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: return -ENOTSUPP for unsupported pin configurations (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: Add SpacemiT K3 reset driver (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: Extract common K1 reset code (Jennifer Berringer) [RHEL-174301]
  - reset: Create subdirectory for SpacemiT drivers (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: fix auxiliary device id (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: Add K3 reset support and IDs (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: support I/O power domain configuration (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: add the clock tree (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: extract common header (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: add plla type clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: add inverted enable gate clock (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: k3: add clock support (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: add platform SoC prefix to reset name (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: extract common ccu functions (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: prepare common ccu header (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: k3: adjust drive strength and schmitter trigger (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: k3: add initial pin support (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Hide common clock driver from user controller (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Respect Kconfig setting when building modules (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Set clk_hw_onecell_data::num before using flex array (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix comment typo (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix i2s clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: introduce pre-div for ddn clock (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: introduce i2s pre-clock to fix i2s clock (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: fix typo in PRI_TDI pin name (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_ddn: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix sspax_clk (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: CLK_SSPA_I2S_BCLK for SSPA (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: remove extra line in debug output (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: add support for SpacemiT CCU resets (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: mark K1 pll1_d8 as critical (Jennifer Berringer) [RHEL-174301] {CVE-2025-38633}
  - clk: spacemit: define three reset-only CCUs (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: set up reset auxiliary devices (Jennifer Berringer) [RHEL-174301]
  - soc: spacemit: create a header for clock/reset registers (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: define spacemit,k1-ccu resets (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: add clock support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k1: Add TWSI8 bus and function clocks (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Add clock support for SpacemiT K1 SoC (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: Add spacemit,k1-pll (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: Add spacemit,k1-syscon (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: PINCTRL_SPACEMIT_K1 should not default to y unconditionally (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: destroy mutex at driver detach (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: enable config option (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: fix double free of map (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: add support for SpacemiT K1 SoC (Jennifer Berringer) [RHEL-174301]
  - reset: amlogic: move drivers to a dedicated directory (Jennifer Berringer) [RHEL-174301]
  - reset: amlogic: convert driver to regmap (Jennifer Berringer) [RHEL-174301]
  - dts: riscv: spacemit: k3: add P1 PMIC regulator tree (Jennifer Berringer) [RHEL-174301]
  - dts: riscv: spacemit: k3: Add i2c nodes (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable PCIe ports on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable USB 3 ports on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable QSPI and add SPI NOR on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add i2c aliases on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add 24c04 eeprom on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add LEDs for Milk-V Jupiter board (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add ethernet device for K3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: drop incorrect pinctrl for combo PHY (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: reorder phy nodes for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add full resource to UART (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add GPIO support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add pinctrl support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add clock tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add 'linux,pci-domain' to PCIe nodes for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: adapt regulator node name to preferred form (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Update PMIC supply properties for BPI-F3 and Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: pcie: fix missing power regulator (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Disable ETH PHY sleep mode for OrangePi (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: pinctrl: update register and IO power (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add K3 Pico-ITX board support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add initial support for K3 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k1: Add "b" ISA extension (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable USB3.0 on BananaPi-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add DWC3 USB 3.0 controller node for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add USB2 PHY node for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: sdhci: add reset support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add reset property (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: PCIe and PHY-related updates (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add a PCIe regulator (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Define the P1 PMIC regulators for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Define fixed regulators for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable i2c8 adapter for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define all missing I2C controller nodes (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: reorder i2c2 node (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add OrangePi R2S board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable K1 SoC QSPI on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add MusePi Pro board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add Ethernet and PDMA to OrangePi RV2 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add i2c aliases on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add 24c02 eeprom on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable the i2c2 adapter on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define regulator constraints (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define fixed regulators (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable the i2c8 adapter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add UART pinctrl combinations (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: uart: remove sec_uart1 device node (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable PDMA on Banana Pi F3 and Milkv Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add PDMA node for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add UART resets for Soc K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add OrangePi RV2 board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Move eMMC under storage-bus for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Move UARTs under dma-bus for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add DMA translation buses for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add pwm14_1 pinctrl setting (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add PWM support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add reset support for the K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable eMMC for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add gpio LED for system heartbeat (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add gpio support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Acquire clocks for UART (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Acquire clocks for pinctrl (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add clock tree for SpacemiT K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Milk-V Jupiter board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: move aliases to board dts (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add pinctrl property to uart0 in BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add Banana Pi BPI-F3 board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: add initial SpacemiT K1 SoC device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: add SpacemiT SoC family Kconfig support (Jennifer Berringer) [RHEL-174301]
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179911] {CVE-2026-46209}
  - platform/x86: intel-hid: disable wakeup_mode during hibernation (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Add Dell 16 Plus 2-in-1 to dmi_vgbs_allow_list (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (Steve Best) [RHEL-176441]
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (Steve Best) [RHEL-176441]
  - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() (Steve Best) [RHEL-176441]
  - platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable (Steve Best) [RHEL-176441]
  - platform/x86: intel_telemetry: Fix PSS event register mask (Steve Best) [RHEL-176441]
  - platform/x86: intel_telemetry: Fix swapped arrays in PSS output (Steve Best) [RHEL-176441]
  - platform/x86: intel: punit_ipc: fix memory corruption (Steve Best) [RHEL-176441]
  - New configs in drivers/platform (Steve Best) [RHEL-176441]
  - platform/x86/intel: Introduce Intel Elkhart Lake PSE I/O (Steve Best) [RHEL-176441]
  - platform/x86/amd: hfi: Remove redundant assignment to .owner (Steve Best) [RHEL-176387]
  - platform/x86/amd: hfi: Remove unused cpumask from cpuinfo struct (Steve Best) [RHEL-176387]
  - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Expose all package CPUs in PMU cpumask (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Remove incorrect CPU check in PMU context (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Add PL4 support for Ice Lake (Steve Best) [RHEL-130025]
  - powercap: Replace sprintf() with sysfs_emit() in sysfs show functions (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Fix possible recursive lock warning (Steve Best) [RHEL-130025]
  - powercap: fix sscanf() error return value handling (Steve Best) [RHEL-130025]
  - powercap: fix race condition in register_control_type() (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Enable MSR-based RAPL PMU support (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Prepare read_raw() interface for atomic-context callers (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (Steve Best) [RHEL-130025]
  - powercap: idle_inject: use us_to_ktime() where appropriate (Steve Best) [RHEL-130025]
  - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting (Jennifer Berringer) [RHEL-174305] {CVE-2026-23287}
  - irqchip/sifive-plic: Handle number of hardware interrupts correctly (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Fix call to __plic_toggle() in M-Mode code path (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Add support for UltraRISC DP1000 PLIC (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Cache the interrupt enable state (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Respect mask state when setting affinity (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Use for_each_present_cpu() instead of for_each_cpu() (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Make use of __assign_bit() (Jennifer Berringer) [RHEL-174305]
  - cache: sifive_ccache: Optimize cache flushes (Jennifer Berringer) [RHEL-174305]
  - PCI: starfive: Use regulator APIs to control the 3v3 power supply of PCIe slots (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Append JH-7110 SoC compatible to VisionFive 2 Lite eMMC board (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Append JH-7110 SoC compatible to VisionFive 2 Lite board (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Orange Pi RV (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add VisionFive 2 Lite eMMC board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add VisionFive 2 Lite board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add common board dtsi for VisionFive 2 Lite variants (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: Move out some nodes to the board dts (Jennifer Berringer) [RHEL-174305]
  - dts: starfive: jh7110-common: split out mmc0 reset pins from common into boards (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Milk-V Mars CM Lite system-on-module (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Milk-V Mars CM system-on-module (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add common board dtsi for Milk-V Mars CM variants (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop mmc post-power-on-delay-ms (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop no-mmc property from mmc1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: bootph-pre-ram hinting needed by boot loader (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: add DMC memory controller (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop no-sdio property from mmc1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add status power led node (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-milkv-mars sort properties (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: bootph-pre-ram hinting needed by boot loader (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add eeprom node to i2c5 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: qspi flash setting read-delay 2 cycles max 100MHz (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add CPU BUS PERH QSPI clocks to syscrg (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: use macros for MMC0 pins (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: fml13v01: enable USB 3.0 port (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-pine64-star64: enable USB 3.0 port (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: pciephy0 USB 3.0 configuration registers (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: fml13v01: enable pcie1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: remove non-existent dac from jh7110 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Unify regulator naming scheme (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-milkv-mars: enable usb0 host function (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-pine64-star64: enable usb0 host function (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add DeepComputing FML13V01 board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: move usb0 config to board dts (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: revised device node (Jennifer Berringer) [RHEL-174305]
  - redhat/configs: enable CONFIG_GPIO_NOVALAKE for x86 on RHEL (Steve Best) [RHEL-117349]
  - gpio: Add Intel Nova Lake ACPI GPIO events driver (Steve Best) [RHEL-117349]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-246.el10]
changelog:
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189498] {CVE-2026-43112}
  - objtool/x86: Reorder ORC register numbering (Yannick Cote) [RHEL-152190]
  - objtool: Support Clang RAX DRAP sequence (Yannick Cote) [RHEL-152190]
  - objtool/klp: Correlate locals to globals (Yannick Cote) [RHEL-152190]
  - objtool/klp: Match symbols based on demangled_name for global variables (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove .llvm suffix in demangle_name() (Yannick Cote) [RHEL-152190]
  - objtool/klp: Also demangle global objects (Yannick Cote) [RHEL-152190]
  - objtool/klp: Use sym->demangled_name for symbol_name hash (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove trailing '_' in demangle_name() (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove redundant strcmp() in correlate_symbols() (Yannick Cote) [RHEL-152190]
  - objtool: Use section/symbol type helpers (Yannick Cote) [RHEL-152190]
  - redhat/configs: disable CONFIG_INET_PSP on RHEL for now (Ivan Vecera) [RHEL-185448]
  - psp: strip variable-length PSP header in psp_dev_rcv() (Ivan Vecera) [RHEL-185448]
  - net: psp: require admin permission for dev-set and key-rotate (Ivan Vecera) [RHEL-185448]
  - net: psp: check for device unregister when creating assoc (Ivan Vecera) [RHEL-185448]
  - psp: add missing device stats to get-stats reply attributes (Ivan Vecera) [RHEL-185448]
  - psp: use sk->sk_hash in psp_write_headers() (Ivan Vecera) [RHEL-185448]
  - net: psp: select CONFIG_SKB_EXTENSIONS (Ivan Vecera) [RHEL-185448]
  - psp: Expand PSP acronym in INET_PSP help description (Ivan Vecera) [RHEL-185448]
  - psp: clarify checksum behavior of psp_dev_rcv() (Ivan Vecera) [RHEL-185448]
  - psp: don't use flags for checking sk_state (Ivan Vecera) [RHEL-185448]
  - psp: fix preemptive inet_twsk() cast in psp_sk_get_assoc_rcu() (Ivan Vecera) [RHEL-185448]
  - psp: make struct sock argument const in psp_sk_get_assoc_rcu() (Ivan Vecera) [RHEL-185448]
  - psp: add stats from psp spec to driver facing api (Ivan Vecera) [RHEL-185448]
  - psp: report basic stats from the core (Ivan Vecera) [RHEL-185448]
  - net: psp: don't assume reply skbs will have a socket (Ivan Vecera) [RHEL-185448]
  - psp: do not use sk_dst_get() in psp_dev_get_for_sock() (Ivan Vecera) [RHEL-185448]
  - psp: rename our psp_dev_destroy() (Ivan Vecera) [RHEL-185448]
  - psp: provide decapsulation and receive helper for drivers (Ivan Vecera) [RHEL-185448]
  - psp: provide encapsulation helper for drivers (Ivan Vecera) [RHEL-185448]
  - psp: track generations of device key (Ivan Vecera) [RHEL-185448]
  - net: psp: update the TCP MSS to reflect PSP packet overhead (Ivan Vecera) [RHEL-185448]
  - net: psp: add socket security association code (Ivan Vecera) [RHEL-185448]
  - net: tcp: allow tcp_timewait_sock to validate skbs before handing to device (Ivan Vecera) [RHEL-185448]
  - net: move sk_validate_xmit_skb() to net/core/dev.c (Ivan Vecera) [RHEL-185448]
  - psp: add op for rotation of device key (Ivan Vecera) [RHEL-185448]
  - tcp: add datapath logic for PSP with inline key exchange (Ivan Vecera) [RHEL-185448]
  - net: modify core data structures for PSP datapath support (Ivan Vecera) [RHEL-185448]
  - psp: base PSP device support (Ivan Vecera) [RHEL-185448]
  - psp: add documentation (Ivan Vecera) [RHEL-185448]
  - scsi: target: iscsi: Validate CHAP_R length before base64 decode (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: tcm_loop: Fix NULL ptr dereference (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: reject invalid size Extended CDB AHS (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Maurizio Lombardi) [RHEL-163760] {CVE-2026-46149}
  - scsi: target: tcm_loop: Drain commands in target_reset handler (Maurizio Lombardi) [RHEL-163760] {CVE-2026-43054}
  - scsi: target: Fix recursive locking in __configfs_open_file() (Maurizio Lombardi) [RHEL-163760] {CVE-2026-23292}
  - scsi: target: Reset t_task_cdb pointer in error case (Maurizio Lombardi) [RHEL-163760] {CVE-2025-68782}
  - scsi: target: Do not write NUL characters into ASCII configfs output (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Maurizio Lombardi) [RHEL-163760] {CVE-2025-68229}
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Maurizio Lombardi) [RHEL-163760] {CVE-2025-39998}
  - scsi: target: iscsi: fix typos and formatting in lio_target messages (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Use int type to store negative value (Maurizio Lombardi) [RHEL-163760]
  - arm64/simd: Add scoped guard API for kernel mode SIMD (CKI Backport Bot) [RHEL-180976]
  - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171143] {CVE-2026-31684}
  - exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case (Oleg Nesterov) [RHEL-95059]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-247.el10]
changelog:
  - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180047] {CVE-2026-46155}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180047]
  - nvme-fc: Do not cancel requests in io target before it is initialized (Utkarsh Singh) [RHEL-178259]
  - tg3: Fix race for querying speed/duplex (Thomas Walsh) [RHEL-182561]
  - EDAC/amd64: Add support for AMD family 1Ah-based newer models (Joel Savitz) [RHEL-100950]
  - EDAC/mc_sysfs: Increase legacy channel support to 16 (Joel Savitz) [RHEL-100950]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [gve] (Michal Schmidt) [RHEL-178516]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [gve] (Michal Schmidt) [RHEL-178516]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [gve] (Michal Schmidt) [RHEL-178516]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [gve] (Michal Schmidt) [RHEL-178516]
  - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-178516]
  - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-178516]
  - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-178516]
  - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-178516]
  - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-178516]
  - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-178516]
  - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-178516]
  - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-178516] {CVE-2026-23386}
  - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-178516]
  - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-178516] {CVE-2026-23262}
  - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-178516]
  - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-178516]
  - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-178516] {CVE-2025-71156}
  - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-178516]
  - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-178516]
  - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-178516]
  - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-178516]
  - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-178516]
  - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-178516]
  - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-178516]
  - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-178516]
  - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-178516]
  - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-178516]
  - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-178516] {CVE-2025-40298}
  - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-178516] {CVE-2025-40299}
  - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-178516]
  - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-178516]
  - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-178516] {CVE-2025-38735}
  - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-178516]
  - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-178516]
  - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-178516]
  - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-178516]
  - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-178516]
  - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-178516]
  - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-178516]
  - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-178516]
  - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-178516]
  - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-178516]
  - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-178516]
  - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-178516]
  - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-178516]
  - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-178516]
  - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-178516]
  - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-178516]
  - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-178516]
  - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-178516]
  - gve: Add initial PTP device support (Michal Schmidt) [RHEL-178516]
  - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-178516]
  - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-178516]
  - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-178516] {CVE-2025-38122}
  - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-178516]
  - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-178516]
  - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-178516]
  - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-178516]
  - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-178516]
  - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-178516]
  - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-178516]
  - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-178516]
  - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-178516]
  - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-178516]
  - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-178516]
  - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-178516]
  - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-178516]
  - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-178516]
  - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-178516]
  - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-178516] {CVE-2024-57933}
  - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-178516] {CVE-2024-57932}
  - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-178516]
  - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-178516]
  - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-178516]
  - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-178516]
  - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-178516]
  - gve: add support for basic queue stats (Michal Schmidt) [RHEL-178516]
  - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-178516]
  - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-178516]
  - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-178516]
  - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-178516]
  - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180077] {CVE-2026-46150}
  - sched: idle: Make skipping governor callbacks more consistent (Mark Langsdorf) [RHEL-176383]
  - cpuidle: menu: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: teo: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: haltpoll: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Skip governor when only one idle state is available (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Refine intercepts-based idle state lookup (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Adjust the classification of wakeup events (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Refine tick_intercepts vs total events check (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Avoid fake intercepts produced by tick (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Avoid selecting states with zero-size bins (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: menu: Always check timers with tick stopped (Mark Langsdorf) [RHEL-176383]
  - cpuidle: zynq: Switch Michal Simek's email to new one (Mark Langsdorf) [RHEL-176383]
  - cpuidle: menu: Remove incorrect unlikely() annotation (Mark Langsdorf) [RHEL-176383]
  - cpuidle: tegra: Export tegra_cpuidle_pcie_irqs_in_use() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: big_little: Simplify with of_machine_device_match() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Warn instead of bailing out if target residency check fails (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Update header inclusion (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Respect the CPU system wakeup QoS limit for cpuidle (Mark Langsdorf) [RHEL-176383]
  - sched: idle: Respect the CPU system wakeup QoS limit for s2idle (Mark Langsdorf) [RHEL-176383]
  - pmdomain: Respect the CPU system wakeup QoS limit for s2idle (Mark Langsdorf) [RHEL-176383]
  - PM: QoS: Introduce a CPU system wakeup QoS limit (Mark Langsdorf) [RHEL-176383]
  - redhat/configs: enable CONFIG_PM_QOS_CPU_SYSTEM_WAKEUP (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Add missing space to the description (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Simplify intercepts-based state lookup (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Fix tick_intercepts handling in teo_update() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Rework the handling of tick wakeups (Mark Langsdorf) [RHEL-176383]
  - cpuidle: psci: Replace deprecated strcpy in psci_idle_init_cpu (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Decay metrics below DECAY_SHIFT threshold (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Use s64 consistently in teo_update() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Drop redundant function parameter (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Drop misguided target residency check (Mark Langsdorf) [RHEL-176383]
  - cpuidle: teo: Use this_cpu_ptr() where possible (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Add sanity check for exit latency and target residency (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Replace deprecated strcpy in sbi_cpuidle_init_cpu (Mark Langsdorf) [RHEL-176383]
  - Revert "cpuidle: menu: Avoid discarding useful information" (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Fail cpuidle device registration if there is one already (Mark Langsdorf) [RHEL-176383]
  - cpuidle: sysfs: Use sysfs_emit()/sysfs_emit_at() instead of sprintf()/scnprintf() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: qcom-spm: drop unnecessary initialisations (Mark Langsdorf) [RHEL-176383]
  - cpuidle: qcom-spm: fix device and OF node leaks at probe (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Drop redundant sync_state support (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Opt-out from genpd's common ->sync_state() support (Mark Langsdorf) [RHEL-176383]
  - dt-bindings: arm: qcom,ids: add SoC ID for IPQ5424/IPQ5404 (Mark Langsdorf) [RHEL-176381]
  - arm64: topology: Fix false warning in counters_read_on_cpu() for same-CPU reads (Mark Langsdorf) [RHEL-176381]
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (Mark Langsdorf) [RHEL-176381]
  - cpufreq: conservative: Reset requested_freq on limits change (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Don't skip cpufreq_frequency_table_cpuinfo() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ondemand: Simplify idle cputime granularity test (Mark Langsdorf) [RHEL-176381]
  - cpufreq: userspace: make scaling_setspeed return the actual requested frequency (Mark Langsdorf) [RHEL-176381]
  - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti-cpufreq: add support for AM62L3 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Add ti,am62l3 to blocklist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: scmi: correct SCMI explanation (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Block the driver from probing on more QC platforms (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Update FIE arch_freq_scale in ticks for non-PCC regs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Factor out cppc_fie_kworker_init() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: add sentinel to qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add Tegra186 and Tegra194 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add new helper function returning cpufreq policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Fix creating device on OPPv1 platforms (Mark Langsdorf) [RHEL-176381]
  - cpufreq: cpufreq_boost_trigger_state() optimization (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Return -EOPNOTSUPP if no policy supports boost (Mark Langsdorf) [RHEL-176381]
  - cpufreq: sun50i: Simplify with of_machine_device_match() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: Simplify with of_machine_get_match_data() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Simplify with of_machine_get_match_data() (Mark Langsdorf) [RHEL-176381]
  - of: Add of_machine_get_match() helper (Mark Langsdorf) [RHEL-176381]
  - of: Add wrappers to match root node with OF device ID tables (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: fix compilation warning for qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ACPI: Replace udelay() with usleep_range() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra194: add WQ_PERCPU to alloc_workqueue users (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: add compatible fallback for ipq806x for no SMEM (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters (Mark Langsdorf) [RHEL-176381]
  - cpufreq: nforce2: fix reference count leak in nforce2 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: add OPP support and set bandwidth (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: fix refcount leak (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Replace deprecated strcpy() in cpufreq_unregister_governor() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: preserve freq_table_sorted across suspend/hibernate (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Initialize all cores to max frequencies (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Set target frequency for all cpus in policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: fix device leak on probe failure (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Replace pointer subtraction with iteration macro (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add defensive check during driver registration (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ACPI: Use on_each_cpu_mask() in drv_write() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: conservative: Replace sscanf() with kstrtouint() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: core: Rearrange variable declarations involving __free() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Use int type to store negative error codes (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Drop redundant freq_table parameter (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: avoid redundant conditions (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: brcmstb-avs: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: use strlen() for governor name comparison (Mark Langsdorf) [RHEL-176381]
  - cpufreq: simplify setpolicy/target check in driver verification (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Allow all silicon revisions to support OPPs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Support more speed grades on AM62Px SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Add support for AM62D2 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Blacklist ti,am62d2 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: don't use error path on NULL fdvfs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Avoid calling get_governor() for first policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: Enable cpufreq for ipq5424 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Remove unused parameter in cppc_perf_from_fbctrs() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-37xx: use max() to calculate target_vm (Mark Langsdorf) [RHEL-176381]
  - cpufreq: airoha: Add support for AN7583 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Add support for MT8196 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Separate per-domain and per-instance data (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Refactor match data into struct (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-8k: make both cpu masks static (Mark Langsdorf) [RHEL-176381]
  - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-171990]
  - selftests: net: add bridge STP mode selection test (Mohammad Heib) [RHEL-171990]
  - docs: net: bridge: document stp_mode attribute (Mohammad Heib) [RHEL-171990]
  - net: bridge: add stp_mode attribute for STP mode selection (Mohammad Heib) [RHEL-171990]
  - selftests: net: bridge_vlan_mcast: wait for h1 before querier check (Mohammad Heib) [RHEL-171990]
  - bridge: guard local VLAN-0 FDB helpers against NULL vlan group (Mohammad Heib) [RHEL-171990]
  - bridge: mrp: reject zero test interval to avoid OOM panic (Mohammad Heib) [RHEL-171990]
  - bridge: br_nd_send: validate ND option lengths (Mohammad Heib) [RHEL-171990]
  - bridge: br_nd_send: linearize skb before parsing ND options (Mohammad Heib) [RHEL-171990]
  - bridge: No DEV_PATH_BR_VLAN_UNTAG_HW for dsa foreign (Mohammad Heib) [RHEL-171990]
  - bridge: cfm: Fix race condition in peer_mep deletion (Mohammad Heib) [RHEL-171990]
  - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (Mohammad Heib) [RHEL-171990]
  - selftests: net: Add bridge VLAN range grouping tests (Mohammad Heib) [RHEL-171990]
  - bridge: Check relevant per-VLAN options in VLAN range grouping (Mohammad Heib) [RHEL-171990]
  - selftests: forwarding: bridge_mdb_max: add tests for mdb_n_entries warning (Mohammad Heib) [RHEL-171990]
  - net: bridge: mcast: always update mdb_n_entries for vlan contexts (Mohammad Heib) [RHEL-171990]
  - net: bridge: use sysfs_emit instead of sprintf (Mohammad Heib) [RHEL-171990]
  - net: bridge: fix static key check (Mohammad Heib) [RHEL-171990]
  - net: bridge: mcast: fix memcpy with u64_stats (Mohammad Heib) [RHEL-171990]
  - u64_stats: Introduce u64_stats_copy() (Mohammad Heib) [RHEL-171990]
  - bus: mhi: ep: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - bus: mhi: host: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - bus: mhi: host: Drop the auto_queue support (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - mhi: host: Add support for loading dual ELF image format (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - net: ethtool: pass genl_info to the ethnl parse_request operation (Mohammad Heib) [RHEL-167299]
  - selftests: rss_drv: Add RSS indirection table resize tests (Mohammad Heib) [RHEL-167299]
  - docs: networking: mention that RSS table should be 4x the queue count (Mohammad Heib) [RHEL-167299]
  - selftests: drv-net: rss: validate min RSS table size (Mohammad Heib) [RHEL-167299]
  - ethtool: Add RSS indirection table resize helpers (Mohammad Heib) [RHEL-167299]
  - ethtool: Track user-provided RSS indirection table size (Mohammad Heib) [RHEL-167299]
  - net: ethtool: re-order local includes (Mohammad Heib) [RHEL-167299]
  - net: ethtool: add ethtool COALESCE_RX_CQE_FRAMES/NSECS (Mohammad Heib) [RHEL-167299]
  - ynl: ethtool: remove duplicated unspec entry (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Update doc for tunable (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Track pause storm events (Mohammad Heib) [RHEL-167299]
  - net: rss: fix reporting RXH_XFRM_NO_CHANGE as input_xfrm for contexts (Mohammad Heib) [RHEL-167299]
  - ethtool: remove ETHTOOL_GRXRINGS fallback through get_rxnfc (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Add support for 80Gbps speed (Mohammad Heib) [RHEL-167299]
  - ethtool: uapi: Use UAPI definition of INT_MAX (Mohammad Heib) [RHEL-167299]
  - uapi: add INT_MAX and INT_MIN constants (Mohammad Heib) [RHEL-167299]
  - ethtool: Clarify len/n_stats fields in/out semantics (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Introduce ETHTOOL_LINK_MEDIUM_* values (Mohammad Heib) [RHEL-167299]
  - ethtool: Avoid overflowing userspace buffer on stats query (Mohammad Heib) [RHEL-167299]
  - ethtool: fix incorrect kernel-doc style comment in ethtool.h (Mohammad Heib) [RHEL-167299]
  - ethtool: netlink: add ETHTOOL_MSG_MSE_GET and wire up PHY MSE access (Mohammad Heib) [RHEL-167299]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-248.el10]
changelog:
  - ipv4: account for fraggap on the paged allocation path (Íñigo Huguet) [RHEL-191369]
  - ipv6: account for fraggap on the paged allocation path (Íñigo Huguet) [RHEL-191369] {CVE-2026-53362}
  - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Sabrina Dubroca) [RHEL-192922]
  - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177855] {CVE-2026-46323}
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-178627] {CVE-2026-43503}
  - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176055] {CVE-2026-46300}
  - Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (David Marlin) [RHEL-184635]
  - Bluetooth: MGMT: Fix backward compatibility with userspace (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync (David Marlin) [RHEL-184635]
  - Bluetooth: fix memory leak in error path of hci_alloc_dev() (David Marlin) [RHEL-184635]
  - Bluetooth: bnep: reject short frames before parsing (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (David Marlin) [RHEL-184635]
  - Bluetooth: RFCOMM: validate skb length in MCC handlers (David Marlin) [RHEL-184635]
  - Bluetooth: MGMT: validate advertising TLV before type checks (David Marlin) [RHEL-184635]
  - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: Reset device counters in hci_dev_close_sync() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (David Marlin) [RHEL-184635]
  - Bluetooth: hci_core: Rework hci_dev_do_reset() to use hci_sync functions (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: fix UAF in iso_recv_frame (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM loading (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (David Marlin) [RHEL-184635]
  - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Allow firmware re-download when version matches (David Marlin) [RHEL-184635]
  - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (David Marlin) [RHEL-184635]
  - Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() (David Marlin) [RHEL-184635]
  - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (David Marlin) [RHEL-184635]
  - Bluetooth: MGMT: validate Add Extended Advertising Data length (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: fix urb->setup_packet leak in error paths (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Fix incorrect MAC access programming (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE (David Marlin) [RHEL-184635]
  - Bluetooth: bnep: Fix UAF read of dev->name (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Convert timeout from jiffies to ms (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (David Marlin) [RHEL-184635]
  - Bluetooth: serialize accept_q access (David Marlin) [RHEL-184635]
  - Bluetooth: HIDP: serialise l2cap_unregister_user via hidp_session_sem (David Marlin) [RHEL-184635]
  - Bluetooth: hci_event: fix memset typo (David Marlin) [RHEL-184635]
  - Bluetooth: RFCOMM: pull credit byte with skb_pull_data() (David Marlin) [RHEL-184635]
  - Bluetooth: virtio_bt: validate rx pkt_type header length (David Marlin) [RHEL-184635]
  - Bluetooth: virtio_bt: clamp rx length before skb_put (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: validate WMT event SKB length before struct access (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (David Marlin) [RHEL-184635]
  - Bluetooth: ISO: Fix data-race on dst in iso_sock_connect() (David Marlin) [RHEL-184635]
  - Bluetooth: hci_uart: Fix NULL deref in recv callbacks when priv is uninitialized (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: treat boot stage bit 12 as warning (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: hold sk properly in sco_conn_ready (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: defer conn param update to avoid conn->lock/hdev->lock inversion (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: fix MPS check in l2cap_ecred_reconf_req (David Marlin) [RHEL-184635]
  - Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (David Marlin) [RHEL-184635]
  - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt (David Marlin) [RHEL-184635]
  - Bluetooth: hci_conn: fix potential UAF in create_big_sync (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Fix missing wakeup during SSR memdump handling (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: use strscpy to copy plain strings (David Marlin) [RHEL-184635]
  - Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Align shared DMA memory to 128 bytes (David Marlin) [RHEL-184635]
  - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (David Marlin) [RHEL-184635]
  - Bluetooth: hci_ll: Enable BROKEN_ENHANCED_SETUP_SYNC_CONN for WL183x (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: MediaTek MT7922: Add VID 0489 & PID e11d (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: hide unused btmtk_mt6639_devs[] array (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for ASUS X870E / ProArt X870E-Creator (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for TP-Link Archer TBE550E (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for MSI X870E Ace Max (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for Gigabyte Z790 AORUS MASTER X (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for Lenovo Legion Pro 7 16ARX9 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add MT7927 ID for ASUS ROG Crosshair X870E Hero (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: fix ISO interface setup for single alt setting (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: Add MT6639 (MT7927) Bluetooth support (David Marlin) [RHEL-184635]
  - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: refactor endpoint lookup (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: refactor endpoint lookup (David Marlin) [RHEL-184635]
  - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (David Marlin) [RHEL-184635]
  - Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: disable power control for WCN7850 when bt_en is not defined (David Marlin) [RHEL-184635]
  - bluetooth: btusb: Fix whitespace in btusb.c (David Marlin) [RHEL-184635]
  - Bluetooth: qca: enable pwrseq support for WCN39xx devices (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pci: Fix btintel_pcie_read_hwexp code style (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add device id of Scorpious2, Nova Lake-PCD-S (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add device id of Scorpius Peak2, Nova Lake-PCD-H (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2F (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add support for Scorpious Peak2F support (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2 (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add DSBR support for ScP2 onwards (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add support for Scorpious Peak2 support (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Replace CNVi id with hardware variant (David Marlin) [RHEL-184635]
  - Bluetooth: btintel: Add support for hybrid signature for ScP2 onwards (David Marlin) [RHEL-184635]
  - Bluetooth: L2CAP: CoC: Disconnect if received packet size exceeds MPS (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: add MT7902 SDIO support (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 0e8d/1ede for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3596 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3594 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3580 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add new VID/PID 13d3/3579 for MT7902 (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: add MT7902 MCU support (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Use struct_size to improve hci_drv_read_info (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: Add Lite-On 04ca:3807 for MediaTek MT7921 (David Marlin) [RHEL-184635]
  - Bluetooth: btintel_pcie: Replace snprintf("%s") with strscpy (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Fix BT not getting powered-off on rmmod (David Marlin) [RHEL-184635]
  - Bluetooth: hci_qca: Fix confusing shutdown() and power_off() naming (David Marlin) [RHEL-184635]
  - Bluetooth: btbcm: Add entry for BCM4343A2 UART Bluetooth (David Marlin) [RHEL-184635]
  - Bluetooth: qca: Refactor code on the basis of chipset names (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: Add reset mechanism if downloading firmware failed (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: add status check in mt79xx firmware setup (David Marlin) [RHEL-184635]
  - Bluetooth: btmtk: improve mt79xx firmware setup retry flow (David Marlin) [RHEL-184635]
  - Bluetooth: btbcm: remove done label in btbcm_patchram (David Marlin) [RHEL-184635]
  - Bluetooth: hci_core: Rate limit the logging of invalid ISO handle (David Marlin) [RHEL-184635]
  - Bluetooth: btusb: MT7922: Add VID/PID 0489/e174 (David Marlin) [RHEL-184635]
  - klp-build: Fix patch cleanup on interrupt (Yannick Cote) [RHEL-152194]
  - selftests/livepatch: add test for module function patching (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: report patch validation fuzz (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: add terminal color output (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: provide friendlier error messages (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: improve short-circuit validation (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: fix shellcheck complaints (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: add Makefile with check target (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: add grep-override function (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: switch to GNU patch and recountdiff (Yannick Cote) [RHEL-152194]
  - livepatch/klp-build: support patches that add/remove files (Yannick Cote) [RHEL-152194]
  - selftests: livepatch: test-ftrace: livepatch a traced function (Yannick Cote) [RHEL-152194]
  - crypto: asymmetric_keys - Remove unused key_being_used_for[] (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - call cond_resched() directly (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - optimize initializing skcipher_walk fields (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - clean up initialization of skcipher_walk::flags (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - fold skcipher_walk_skcipher() into skcipher_walk_virt() (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove redundant check for SKCIPHER_WALK_SLOW (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove redundant clamping to page size (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove unnecessary page alignment of bounce buffer (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - document skcipher_walk_done() and rename some vars (Thomas Huth) [RHEL-186630]
  - crypto: omap - switch from scatter_walk to plain offset (Thomas Huth) [RHEL-186630]
  - crypto: powerpc/p10-aes-gcm - simplify handling of linear associated data (Thomas Huth) [RHEL-186630]
  - crypto: bcm - Drop unused setting of local 'ptr' variable (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/qm - support new function communication (Thomas Huth) [RHEL-186630]
  - crypto: proc - Use str_yes_no() and str_no_yes() helpers (Thomas Huth) [RHEL-186630]
  - crypto: ahash - make hash walk functions private to ahash.c (Thomas Huth) [RHEL-186630]
  - redhat: Remove CONFIG_CRYPTO_KEYWRAP setting (Thomas Huth) [RHEL-186630]
  - crypto: keywrap - remove unused keywrap algorithm (Thomas Huth) [RHEL-186630]
  - crypto: fips - Use str_enabled_disabled() helper in fips_enable() (Thomas Huth) [RHEL-186630]
  - crypto: lib/aesgcm - Reduce stack usage in libaesgcm_init (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - additional optimizations (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - more code size optimizations (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - change len parameter to int (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - improve some comments (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - make the register aliases per-function (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-xts - use .irp when useful (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-gcm - tune better for AMD CPUs (Thomas Huth) [RHEL-186630]
  - crypto: x86/aes-gcm - code size optimization (Thomas Huth) [RHEL-186630]
  - crypto: lib/gf128mul - Remove some bbe deadcode (Thomas Huth) [RHEL-186630]
  - crypto: keywrap - remove assignment of 0 to cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: aegis - remove assignments of 0 to cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: x86 - remove assignments of 0 to cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: seed - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: khazad - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: tea - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: aria - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: anubis - stop using cra_alignmask (Thomas Huth) [RHEL-186630]
  - crypto: skcipher - remove support for physical address walks (Thomas Huth) [RHEL-186630]
  - crypto: n2 - remove Niagara2 SPU driver (Thomas Huth) [RHEL-186630]
  - crypto: sig - Set maskset to CRYPTO_ALG_TYPE_MASK (Thomas Huth) [RHEL-186630]
  - crypto: caam - use JobR's space to access page 0 regs (Thomas Huth) [RHEL-186630]
  - crypto: api - Call crypto_schedule_test outside of mutex (Thomas Huth) [RHEL-186630]
  - crypto: api - Fix boot-up self-test race (Thomas Huth) [RHEL-186630]
  - lib/crc32: drop leading underscores from __crc32c_le_base (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/debugfs - fix the struct pointer incorrectly offset problem (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Copy source data for SG list (Thomas Huth) [RHEL-186630]
  - s390/ap: Replace xchg() with WRITE_ONCE() (Thomas Huth) [RHEL-186630]
  - crypto: marvell/cesa - fix uninit value for struct mv_cesa_op_ctx (Thomas Huth) [RHEL-186630]
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Thomas Huth) [RHEL-186630]
  - crypto: aesni - Move back to module_init (Thomas Huth) [RHEL-186630]
  - crypto: lib/mpi - Export mpi_set_bit (Thomas Huth) [RHEL-186630]
  - crypto: arm/crct10dif - Implement plain NEON variant (Thomas Huth) [RHEL-186630]
  - crypto: arm/crct10dif - Macroify PMULL asm code (Thomas Huth) [RHEL-186630]
  - crypto: arm/crct10dif - Use existing mov_l macro instead of __adrl (Thomas Huth) [RHEL-186630]
  - crypto: bcm - add error check in the ahash_hmac_init function (Thomas Huth) [RHEL-186630]
  - crypto: caam - add error check to caam_rsa_set_priv_key_form (Thomas Huth) [RHEL-186630]
  - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Reinstate support for legacy protocols (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/qm - disable same error report before resetting (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon - support querying the capability register (Thomas Huth) [RHEL-186630]
  - crypto: asymmetric_keys - Remove unused functions (Thomas Huth) [RHEL-186630]
  - crypto: starfive - remove unneeded crypto_engine_stop() call (Thomas Huth) [RHEL-186630]
  - crypto: api - move crypto_simd_disabled_for_test to lib (Thomas Huth) [RHEL-186630]
  - crypto: cavium - Fix the if condition to exit loop after timeout (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - remove unneeded RETs (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - remove unneeded FRAME_BEGIN and FRAME_END (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - take advantage of block-aligned len (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - optimize partial block handling using SSE4.1 (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - improve assembly function prototypes (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - optimize length block preparation using SSE4.1 (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - don't bother with special code for aligned data (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - eliminate some indirect calls (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - remove no-op init and exit functions (Thomas Huth) [RHEL-186630]
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Thomas Huth) [RHEL-186630]
  - crypto: crc32c - Provide crc32c-arch driver for accelerated library code (Thomas Huth) [RHEL-186630]
  - crypto: crc32 - Provide crc32-arch driver for accelerated library code (Thomas Huth) [RHEL-186630]
  - crypto: nx - Fix invalid wait context during kexec reboot (Thomas Huth) [RHEL-186630]
  - crypto: nx - Rename devdata_mutex to devdata_spinlock (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Update Kconfig help text for NIST P521 (Thomas Huth) [RHEL-186630]
  - crypto: sig - Fix oops on KEYCTL_PKEY_QUERY for RSA keys (Thomas Huth) [RHEL-186630]
  - s390/crypto: Switch over to sysfs_emit() (Thomas Huth) [RHEL-186630]
  - crypto: crypto4xx - use devm in probe (Thomas Huth) [RHEL-186630]
  - crypto: crypto4xx - avoid explicit resource (Thomas Huth) [RHEL-186630]
  - crypto: cesa - use devm_platform_get_and_ioremap_resource (Thomas Huth) [RHEL-186630]
  - crypto: cesa - remove irq_set_affinity_hint (Thomas Huth) [RHEL-186630]
  - crypto: cesa - use enabled variants for clk_get (Thomas Huth) [RHEL-186630]
  - crypto: cesa - add COMPILE_TEST (Thomas Huth) [RHEL-186630]
  - crypto: doc - Fix akcipher title reference (Thomas Huth) [RHEL-186630]
  - crypto: x86/cast5 - Remove unused cast5_ctr_16way (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/qm - fix the coding specifications issue (Thomas Huth) [RHEL-186630]
  - crypto: drivers - Correct multiple typos in comments (Thomas Huth) [RHEL-186630]
  - crypto: ccree - Fix typo in comment (Thomas Huth) [RHEL-186630]
  - crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Thomas Huth) [RHEL-186630]
  - crypto: caam - Slightly simplify platform_device() (Thomas Huth) [RHEL-186630]
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Thomas Huth) [RHEL-186630]
  - crypto: hisilicon/hpre - enable all clusters clock gating (Thomas Huth) [RHEL-186630]
  - crypto: mxs-dcp - Fix AES-CBC with hardware-bound keys (Thomas Huth) [RHEL-186630]
  - crypto: amlogic - Remove redundant assignment and error messages (Thomas Huth) [RHEL-186630]
  - crypto: ecrdsa - Fix signature size calculation (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Support P1363 signature decoding (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Move X9.62 signature size calculation into template (Thomas Huth) [RHEL-186630]
  - crypto: sig - Rename crypto_sig_maxsize() to crypto_sig_keysize() (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Move X9.62 signature decoding into template (Thomas Huth) [RHEL-186630]
  - ASN.1: Clean up include statements in public headers (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Avoid signed integer overflow on signature decoding (Thomas Huth) [RHEL-186630]
  - crypto: sig - Move crypto_sig_*() API calls to include file (Thomas Huth) [RHEL-186630]
  - redhat: Disable signing ALG again after code has been reworked (Thomas Huth) [RHEL-186630]
  - crypto: akcipher - Drop sign/verify operations (Thomas Huth) [RHEL-186630]
  - crypto: drivers - Drop sign/verify operations (Thomas Huth) [RHEL-186630]
  - crypto: virtio - Drop sign/verify operations (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Avoid copying hash prefix (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Harden digest length verification (Thomas Huth) [RHEL-186630]
  - crypto: rsassa-pkcs1 - Migrate to sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: rsa-pkcs1pad - Deduplicate set_{pub,priv}_key callbacks (Thomas Huth) [RHEL-186630]
  - crypto: ecrdsa - Migrate to sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Migrate to sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: sig - Introduce sig_alg backend (Thomas Huth) [RHEL-186630]
  - crypto: ecdsa - Drop unused test vector elements (Thomas Huth) [RHEL-186630]
  - crypto: testmgr: Include <linux/prandom.h> instead of <linux/random.h> (Thomas Huth) [RHEL-186630]
  - IB/IPoIB: ndo_set_rx_mode_async conversion (Michal Schmidt) [RHEL-186369]
  - selftests: net: use ip commands instead of teamd in team rx_mode test (Michal Schmidt) [RHEL-186369]
  - selftests: net: add team_bridge_macvlan rx_mode test (Michal Schmidt) [RHEL-186369]
  - net: warn ops-locked drivers still using ndo_set_rx_mode (Michal Schmidt) [RHEL-186369]
  - netkit: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - dummy: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - netdevsim: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - iavf: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - bnxt: use snapshot in bnxt_cfg_rx_mode (Michal Schmidt) [RHEL-186369]
  - bnxt: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - mlx5: convert to ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - net/mlx5e: Allow set_rx_mode on uplink representor (Michal Schmidt) [RHEL-186369]
  - net: move promiscuity handling into netdev_rx_mode_work (Michal Schmidt) [RHEL-186369]
  - net: cache snapshot entries for ndo_set_rx_mode_async (Michal Schmidt) [RHEL-186369]
  - net: introduce ndo_set_rx_mode_async and netdev_rx_mode_work (Michal Schmidt) [RHEL-186369]
  - net: add address list snapshot and reconciliation infrastructure (Michal Schmidt) [RHEL-186369]
  - selftests: net: validate team flags propagation (Michal Schmidt) [RHEL-186369]
  - Revert "fs: don't block i_writecount during exec" (Abhi Das) [RHEL-159585]
  - lib/Kconfig.debug: fix BOOTPARAM_HUNG_TASK_PANIC comment (Luiz Capitulino) [RHEL-146067]
  - powerpc/watchdog: add support for hardlockup_sys_info sysctl (Luiz Capitulino) [RHEL-146067]
  - hung_task: explicitly report I/O wait state in log output (Luiz Capitulino) [RHEL-146067]
  - hung_task: increment the global counter immediately (Luiz Capitulino) [RHEL-146067]
  - hung_task: enable runtime reset of hung_task_detect_count (Luiz Capitulino) [RHEL-146067]
  - hung_task: refactor detection logic and atomicise detection count (Luiz Capitulino) [RHEL-146067]
  - sysctl: add SYSCTL_{USER_TO_KERN,KERN_TO_USER} macros (Luiz Capitulino) [RHEL-146067]
  - sys_info: add a default kernel sys_info mask (Luiz Capitulino) [RHEL-146067]
  - watchdog: add sys_info sysctls to dump sys info on system lockup (Luiz Capitulino) [RHEL-146067]
  - hung_task: add hung_task_sys_info sysctl to dump sys info on task-hung (Luiz Capitulino) [RHEL-146067]
  - panic: sys_info: align constant definition names with parameters (Luiz Capitulino) [RHEL-146067]
  - kernel/hung_task: unexport sysctl_hung_task_timeout_secs (Luiz Capitulino) [RHEL-146067]
  - redhat/configs: update CONFIG_BOOTPARAM_HUNG_TASK_PANIC (Luiz Capitulino) [RHEL-146067]
  - hung_task: panic when there are more than N hung tasks at the same time (Luiz Capitulino) [RHEL-146067]
  - hung_task: fix warnings caused by unaligned lock pointers (Luiz Capitulino) [RHEL-146067]
  - hung_task: dump blocker task if it is not hung (Luiz Capitulino) [RHEL-146067]
  - hung_task: extend hung task blocker tracking to rwsems (Luiz Capitulino) [RHEL-146067]
  - locking/rwsem: make owner helpers globally available (Luiz Capitulino) [RHEL-146067]
  - hung_task: show the blocker task if the task is hung on semaphore (Luiz Capitulino) [RHEL-146067]
  - hung_task: replace blocker_mutex with encoded blocker (Luiz Capitulino) [RHEL-146067]
  - redhat/configs: add new hung task configs (Luiz Capitulino) [RHEL-146067]
  - samples: add hung_task detector mutex blocking sample (Luiz Capitulino) [RHEL-146067]
  - hung_task: show the blocker task if the task is hung on mutex (Luiz Capitulino) [RHEL-146067]
  - hung_task: add docs for hung_task_detect_count (Luiz Capitulino) [RHEL-146067]
  - hung_task: add detect count for hung tasks (Luiz Capitulino) [RHEL-146067]
  - wifi: ath11k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-180129] {CVE-2026-46125}
  - wifi: mac80211: drop stray 'static' from fast-RX rx_result (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-180059] {CVE-2026-46152}
  - wifi: mac80211: use safe list iteration in radar detect work (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-180023] {CVE-2026-46166}
  - wifi: ath12k: prepare REO update element only for primary link (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rt2x00: allocate anchor with rt2x00dev (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix error unwind on arch_init() failure in PCI probe (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix peer_id usage in normal RX path (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: restrict LMR feedback check to TB and non-TB ranging (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: snoc: select POWER_SEQUENCING (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211: fix UHR capability validation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - net: rfkill: prevent unlimited numbers of rfkill events from being created (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31670}
  - wifi: rt2x00usb: fix devres lifetime (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31672}
  - wifi: brcmfmac: validate bsscfg indices in IF events (Jose Ignacio Tornos Martinez) [RHEL-171410 RHEL-173865] {CVE-2026-43110}
  - wifi: brcmsmac: Fix dma_free_coherent() size (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31661}
  - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31779}
  - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31780}
  - wifi: ath12k: Pass the correct value of each TID during a stop AMPDU session (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: correctly set wifi generation data (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: don't send a 6E related command when not supported (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43325}
  - wifi: iwlwifi: mld: Fix MLO scan timing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23444}
  - wifi: mac80211: fix NULL deref in mesh_matches_local() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23396}
  - wifi: mac80211: check tdls flag in ieee80211_tdls_oper (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43052}
  - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31548}
  - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31551}
  - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-31394}
  - wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove keys after disabling beaconing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211_hwsim: fully initialise PMSR capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23315}
  - wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23363}
  - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23325}
  - wifi: mac80211: fix missing ieee80211_eml_params member initialization (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix station lookup failure when disconnecting from AP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: use correct pdev id when requesting firmware stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23279}
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23246}
  - wifi: mac80211: set default WMM parameters on all links (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mwifiex: Fix dev_alloc_name() return value check (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmfmac: Fix potential kernel oops when probe fails (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43144}
  - wifi: radiotap: reject radiotap with unknown bits (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23367}
  - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-23336}
  - wifi: cfg80211: wext: fix IGTK key ID off-by-one (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmsmac: phy: Remove unreachable error handling code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - net: remove unnecessary module_init/exit functions [wireless] (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: Add eMLSR/eMLMR action frame parsing support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: add initial UHR support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add initial UHR support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ieee80211: add some initial UHR definitions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: use wiphy_hrtimer_work for CAC timeout (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: correct ieee80211-{s1g/eht}.h include guard comments (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: clear stale link mapping of ahvif->links_map (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add support TX hardware queue stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add support RX PDEV stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Fix index decrement when array_len is zero (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: support OBSS PD configuration for AP mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add WMI support for spatial reuse parameter configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - dt-bindings: net: wireless: ath11k-pci: deprecate 'firmware-name' property (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: add usecase firmware handling based on device compatible (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath10k: snoc: support powering on the device via pwrseq (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: warn if SPS OCP happens for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: restore LDO setting after device resume (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set MU group membership and position to registers (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: disable interrupt before swapping FW for 8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: tweak Wi-Fi 7 SER L0/L1 simulation methods (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: rename mac/ctrl error to L0/L1 error (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: regd: update regulatory map to R73-R54 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: validate release report content before using for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43176}
  - wifi: rtw89: get designated link to replace link instance 0 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: configure FW version for SIM_SER_L0L1_BY_HALT_H2C (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add PHY C2H event dummy handler for func 1-7 and 2-10 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: correct content of DACK H2C command (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: update RFK report format of IQK, DACK and TXGAPK (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add to print debug log of CIM3K (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add firmware command to do CIM3K (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add to print debug log of TX IQK (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add firmware command to do TX IQK (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: use u64_stats_t with u64_stats_sync properly (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: treat deprecated INDOOR_SP_AP_OLD control value as LPI mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rsi: sdio: Migrate to use sdio specific shutdown function (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - sdio: Provide a bustype shutdown function (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: sdio: Migrate to use sdio specific shutdown function (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: support operating as RSTA in PMSR FTM request (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: add negotiated burst period to FTM result (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: clarify periodic FTM parameters for non-EDCA based ranging (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211/cfg80211: add new FTM capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: add digital compensation for 2GHz (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set force MBA duration to 0 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: clear DTOP disable excluding CID7090 variant for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update TSSI flow for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add firmware element of digital TX power compensation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update edcca log parsing for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add H2C command to send detail RX gain and link parameters for PS mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: handle C2H event for PS mode report (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add chip_ops to calculate RX gain from efuse to support PS mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: Fix memory leak in __print_txpwr_map() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: Add default ID 28de:2432 for RTL8832CU (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fix unable to receive probe responses under MLO connection (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: fix incorrect power limit by mac_id (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: refine initial flow of BB wrapper (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: write BB wrapper registers with flush (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update BB wrapper RFSI (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: update bb wrapper TPU init (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: abstract BB wrap registers to share initial flow (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: extend register to read history 2 of PHY env_monitor (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: abstract start address and EHT of PHY status bitmap (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add ops rtw89_phy_gen_be_v1 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: phy: add {read,write}_rf_v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: clear global interrupt right after power-on (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: rename struct iwl_mcc_allowed_ap_type_cmd::offset_map (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: Remove link_id from time_events (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: change cluster_id type to u8 array (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: support V13 of iwl_lari_config_change_cmd (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: split bios_value_u32 to separate the header (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: uefi: cache the DSM functions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: acpi: cache the DSM functions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: Cleanup MLO code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: move iwl_get_lari_config_bitmap to the op_mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: move lari helper functions to the op_mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: prevent EMLSR when NAN is active (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: add an helper to update an EMLSR blocker (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Fix primary link selection logic (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: cfg: remove iwl_be221_name (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: fix chandef start calculation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: remove unused variable in d3.c (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fw: api: add HE type for UHR ELR (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: cfg: move the MODULE_FIRMWARE to the per-rf file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: fix HE SIG-B MCS/DCM/compression (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fw: api: add UHR data definitions (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: add UHR TLC mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: adjust LINK context NPCA API (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: refactor AP power type setting (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fix 22000 series SMEM parsing (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43172}
  - wifi: iwlwifi: mld: support TLC command version 6 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: trigger a dump upon notification if needed (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: fw: fix documentation reference for ap_type field (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: check the validity of noa_len (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mvm: Remove few redundant 6 GHz scan chan params (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Remove wrong channel flags in scan cmd (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: decode VHT information for sniffer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Advertise support for multicast RX registration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Support changing NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Extend the NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Declare support for NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Handle rate selection for NAN interface (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: iwlwifi: mld: Add support for NAN (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: mark iface work SKBs as consumed (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove RX_DROP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211: ignore cluster id after NAN started (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: cleanup cluster_id when stopping NAN (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: limit NAN func management APIs to offloaded DE (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: stop NAN and P2P in cfg80211_leave (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: allow only one NAN interface, also in multi radio (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: enable QCC2072 support (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix PCIE_LOCAL_REG_QRTR_NODE_ID definition for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: send peer meta data version to firmware (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: limit number of channels per WMI command (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: handle REO status ring for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: handle REO CMD ring for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add hardware ops support for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add HAL descriptor and ops for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: support downloading auxiliary ucode image for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: support LPASS_SHARED target memory type (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add hardware parameters for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add hardware registers for QCC2072 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix mac phy capability parsing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor 320 MHz bandwidth support parsing (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: fix preferred hardware mode calculation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor REO status ring handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor REO CMD ring handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: refactor PCI window register access (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: move .max_tx_ring to struct ath11k_hw_hal_params (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register handler for CFR capture event (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register DBR event handler for CFR data (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - MAINTAINERS: add RELAY entry (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register relayfs entries for CFR dump (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Add support unassociated client CFR (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Register debugfs for CFR configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Add initialization and deinitialization sequence for CFR module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: do WoW offloads only on primary link (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: clean up on error in ath12k_dp_setup() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: remove redundant pci_set_drvdata() call (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: fix comment typo in monitor mode handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: Fix failure to connect to a 6 GHz AP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath9k: add OF dependency to AHB (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath9k: fix kernel-doc warnings in common-debug.h (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath9k: debug.h: fix kernel-doc bad lines and struct ath_tx_stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: consider RTL8922D in PCI common flow (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: consider RTL8922D in MAC common flow (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: correct page number for CSI response (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: align CUSTID defined by firmware (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: disable EHT protocol by chip capabilities (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: support EHT GI/LTF setting (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pci: validate sequence number of TX release report (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43213}
  - wifi: mac80211: add support for encryption/decryption of (Re)Association frames (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: add support for EPPKE authentication protocol in non-AP STA mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: Check for MLE before appending in Authentication frame (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: allow key installation before association (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: nl80211: Add support for EPP peer indication (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add support for key configuration before association (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add feature flag for (re)association frame encryption (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add support for EPPKE Authentication Protocol (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: don't apply HT flags to S1G channels (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: Add support for D-Link VR Air Bridge (DWA-F18) (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: Add support for MSI AX1800 Nano (GUAX18N) (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set EDCCA configurations for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: add an entry to enable MAC function in preinit (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: separate functions of CMAC power and function enable (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: configure DMA_STOP1 by predefined mask (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: define preload_init for generations (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: update WP quota for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: update MPDU quota according to chip DLE definition (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: set quota 13 for PLE SNRPT (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: add dle_mem and ple_{min,max}_qt quota for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: remove unnecessary return from rtw89_fwdl_secure_idmem_share_mode() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: coex: update coex software control for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: coex: update scoreboard value according to power state for two BT (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: coex: make coex scoreboard as chip info (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: remove width argument from ieee80211_parse_bitrates (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211_hwsim: remove NAN by default (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: improve station iteration ergonomics (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: improve interface iteration ergonomics (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: include S1G_NO_PRIMARY flag when sending channel (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: unexport ieee80211_get_bssid() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: don't send an unused argument to ieee80211_check_combinations (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: set RACK bit every 4 H2C command for WiFi 6 chips only (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: consider hardware AID for firmware elements (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for punctured for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for TX time for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for TX AMPDU for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command for association for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add CMAC H2C command to initialize default value for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: add DMAC v3 H2C command for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: update query RXDESC v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: update TXWD v3 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mwifiex: Allocate dev name earlier for interface workqueue name (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: Fix use_for flag update on BSS refresh (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmfmac: rename function that frees vif (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: brcmfmac: fix/add kernel-doc comments (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: mac80211: Update csa_finalize to use link_id (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: cfg80211: add cfg80211_stop_link() for per-link teardown (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8852b: refine hardware parameters for RFE type 5 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fix potential zero beacon interval in beacon tracking (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2026-43267}
  - wifi: rtw89: rfk: update rtw89_fw_h2c_rf_pre_ntfy_mcc format (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: change WITH_RFK_PRE_NOTIFY to be a FW feature group (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: refine mis-ordered entries in FW feature table (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: tweak RFK_PRE_NOTIFY FW feature configuration to align handling (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: introduce helper for disabling FW feature configuration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: fw: change FW feature map to a BITMAP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: pre-handle RF calibration on link when needed (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: add rtw89_fw_h2c_rf_pre_ntfy_mcc for new WiFi 7 firmware (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: rfk: update RFK pre info V2 for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: enhance connection stability when triggering beacon loss (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: regd: 6 GHz power type marks default when inactive (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8922a: configure FW version for SCAN_OFFLOAD_EXTRA_OP feature (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: refine TX nulldata judgement when scan with 2 OP channels (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: add default quirks as features to chip_info (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: read chip ID for RTL8922D variants (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: efuse: read hardware version from efuse for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: define TX/RX aggregation and MPDU capability per chip (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: abstract DMA check register for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: add WOW_CAM update function for 8922D (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: change type of WoWLAN pattern mask to __le32 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: wow: use struct style to fill WOW CAM H2C command (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71234}
  - wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71273}
  - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71229}
  - wifi: rtw88: Increase the RX gain before scanning (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mcc: reset probe counter when receiving beacon (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: setting TBTT AGG number when mac port initialization (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: warn unexpected polling value of XTAL SI (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: refine C2H reg event polling timeout for LPS (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: support SER L0/L1 simulation via halt H2C (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: debug: add ser_counters dbgfs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: ser: L1 skip polling status if FW runs event mode (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: ser: enable error IMR after recovering from L1 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mac: reset power state before switching to power on (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mlo: fix incorrect link address in management frames (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: mlo: fix missing TX null-data 1 during link switch (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8852b: increase beacon loss to 6 seconds (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtlwifi: fix typo 'received' in comment (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: 8852au: add support for TP TX30U Plus (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw89: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() (Jose Ignacio Tornos Martinez) [RHEL-171410] {CVE-2025-71297}
  - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Merge branch 'ath12k-ng' into ath-next (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Skip DP peer creation for scan vdev (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: move firmware stats request outside of atomic context (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: add the missing RCU lock in ath12k_dp_tx_free_txbuf() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove Wi-Fi 7 header dependencies from common ath12k module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move MSDU END TLV processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move MU user processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move remaining SIG TLV parsing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move EHT SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HE SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HT/VHT SIG processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move TX monitor functionality to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move RX status TLV parsing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move MPDU pop functionality to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move monitor status processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move monitor ring processing to Wi-Fi 7 module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Replace lock/unlock with guard() (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Use dp objects in performance critical paths (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Build all the files in wifi7 directory into ath12k_wifi7.ko (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove arch-specific HAL dependencies from common DP (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_rx_get_peer_id API to Wi-Fi 7 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_rx_frags_cleanup API to Wi-Fi 7 (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove the wifi7 header inclusions in common code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ieee80211_ops callback to the arch specific module (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add helper to free DP link peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move DP specific link stats to DP link peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move DP device stats to ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add callbacks in arch_ops for rx APIs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add lockdep warn for RCU (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Use ath12k_dp_peer in per packet Tx & Rx paths (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Attach and detach ath12k_dp_link_peer to ath12k_dp_peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Define ath12k_dp_peer structure & APIs for create & delete (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add hash table for ath12k_dp_link_peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_link_peer list from ath12k_base to ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add hash table for ath12k_link_sta in ath12k_base (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename ath12k_peer to ath12k_dp_link_peer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move DP related functions from peer.c to dp_peer.c file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Drop hal_ prefix from hardware register names (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename hal_ops to ops (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove the unused ring inits in wcn (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Segregate the common and wifi7 specific structures (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL Cookie Conversion and RBM related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL REO and Rx buf related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL Tx, REO and link idle setup related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL CE status and set link desc addr APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL CE desc related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL SRNG shadow config and get ring id APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL CE setup and SRNG related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Use hal handle instead of ab handle (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add direct HAL pointer in ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_params and regs to hal from hw (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move wbm_rbm_map to hw specific hal files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Initialize hal_ops through hal_init (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Initialize desc_size through hal_init (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move srng config and hal_ops to hw specific hal files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rearrange PPDU radio stats (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Refactor data path pdev struct (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Refactor ath12k_vif structure (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add framework for hardware specific DP interrupt handler (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add framework for hardware specific ieee80211_ops registration (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rearrange DP fields in ath12k_hw_group struct (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Support arch-specific DP device allocation (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Convert ath12k_dp member in ath12k_base to pointer (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Change the API prefixes to ath12k_wifi7 in tx/rx (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove hal_rx_ops and merge into hal_ops (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Add new infra for the rx path (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_rx_ops callbacks to hal_ops (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Replace ops with direct calls for rxdma ring mask (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: unify HAL ops naming across chips (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move the hal APIs to hardware specific files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove non-compact TLV support from QCN (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT specific code from dp.c to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT Tx specific code to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT Rx specific code to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HTT code in dp.h to newly introduced files (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move ath12k_dp_tx and related APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move arch specific tx APIs to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move arch specific rx tid and related functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move arch specific REO functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Separate arch specific part of RX APIs (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move srng processing to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move regular msdu processing functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move rx error and defrag functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move rxdma ring config functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move rx_desc.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_desc.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Rx error related functions to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move HAL Rx wrapper APIs to dp_rx.h (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_rx.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_tx.h file to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hal_tx and hal_rx to wifi7 directory (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove HAL define dependencies from shared AHB code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Remove HAL defines from shared PCI code (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename ath12k_* symbols to ath12k_wifi7_* for clarity (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Modularize driver into common and Wi-Fi 7 specific components (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move hw_init invocation to target-specific probe (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Wi-Fi 7 specific init routines to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Restructure ahb.c into common and Wi-Fi 7 specific modules (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename ahb_hif_ops to reflect generic usage (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Rename hw.c to Wi-Fi 7 specific implementation file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Wi-Fi 7 MHI configuration to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Wi-Fi 7 WMI configuration to dedicated file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Move Copy Engine configuration to Wi-Fi 7 specific file (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - wifi: ath12k: Restructure PCI code to common and Wi-Fi 7 specific logic (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - spinlock: extend guard with spinlock_bh variants (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-171410]
  - perf metrics: Make common stalled metrics conditional on having the event (Trevor Allison) [RHEL-140195]
  - perf stat: Fix crash on arm64 (Trevor Allison) [RHEL-140195]
  - tools build: Correct link flags for libopenssl (Trevor Allison) [RHEL-140195]
  - perf test parse-metric: Ensure aggregate counts appear to have run (Trevor Allison) [RHEL-140195]
  - perf/x86: Move event pointer setup earlier in x86_pmu_enable() (Trevor Allison) [RHEL-140195] {CVE-2026-23435}
  - perf metricgroup: Fix metricgroup__has_metric_or_groups() (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Optimize PEBS extended config (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Check PEBS dyn_constraints (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Add a check for dynamic constraints (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Add counter group support for arch-PEBS (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Setup PEBS data configuration and enable legacy groups (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Update dyn_constraint base on PEBS event precise level (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Process arch-PEBS records or record fragments (Trevor Allison) [RHEL-140195]
  - perf record: Make logs more readable for event open failures (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync sound/asound.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/vhost.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync asm/cpufeatures.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/perf_event.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/neighbour.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/kvm.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync linux/if_addr.h with kernel (Trevor Allison) [RHEL-140195]
  - tools headers UAPI: sync drm/drm.h with kernel (Trevor Allison) [RHEL-140195]
  - perf tools: Add the legacy-cache.json to .gitignore (Trevor Allison) [RHEL-140195]
  - Revert "perf tool_pmu: More accurately set the cpus for tool events" (Trevor Allison) [RHEL-140195]
  - perf jevents: Handle deleted JSONS in out of source builds (Trevor Allison) [RHEL-140195]
  - perf metricgroup: Don't early exit if no CPUID table exists (Trevor Allison) [RHEL-140195]
  - perf stat-shadow: In prepare_metric fix guard on reading NULL perf_stat_evsel (Trevor Allison) [RHEL-140195]
  - perf tests kallsyms: Fix missed map__put() (Trevor Allison) [RHEL-140195]
  - perf test: Fix test perf evlist for z/VM s390x (Trevor Allison) [RHEL-140195]
  - perf test: Fix test case perf evlist tests for s390x (Trevor Allison) [RHEL-140195]
  - perf parse-events: Fix evsel allocation failure (Trevor Allison) [RHEL-140195]
  - tools build: Fix the common set of features test wrt libopenssl (Trevor Allison) [RHEL-140195]
  - perf tests top: Make the test exclusive (Trevor Allison) [RHEL-140195]
  - perf tests kvm: Avoid leaving perf.data.guest file around (Trevor Allison) [RHEL-140195]
  - perf symbol: Fix ENOENT case for filename__read_build_id (Trevor Allison) [RHEL-140195]
  - perf tools: Disable BPF skeleton if no libopenssl found (Trevor Allison) [RHEL-140195]
  - tools/build: Add a feature test for libopenssl (Trevor Allison) [RHEL-140195]
  - libperf: Use 'extern' in LIBPERF_API visibility macro (Trevor Allison) [RHEL-140195]
  - perf stat: Improve handling of termination by signal (Trevor Allison) [RHEL-140195]
  - perf tests stat: Add test for error for an offline CPU (Trevor Allison) [RHEL-140195]
  - perf test kvm: Add some basic perf kvm test coverage (Trevor Allison) [RHEL-140195]
  - perf tests evlist: Add basic evlist test (Trevor Allison) [RHEL-140195]
  - perf tests script dlfilter: Add a dlfilter test (Trevor Allison) [RHEL-140195]
  - perf tests kallsyms: Add basic kallsyms test (Trevor Allison) [RHEL-140195]
  - perf tests timechart: Add a perf timechart test (Trevor Allison) [RHEL-140195]
  - perf tests top: Add basic perf top coverage test (Trevor Allison) [RHEL-140195]
  - perf tests c2c: Add a basic c2c (Trevor Allison) [RHEL-140195]
  - perf c2c: Clean up some defensive gets and make asan clean (Trevor Allison) [RHEL-140195]
  - perf timechart: Add record support for output perf.data path (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update sierraforest events from 1.12 to 1.13 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update pantherlake events from 1.00 to 1.02 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update meteorlake events from 1.17 to 1.18 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update lunarlake events from 1.18 to 1.19 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update icelakex events from 1.28 to 1.30 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update graniterapids events from 1.15 to 1.16 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update cascadelakex metric units (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update arrowlake events from 1.13 to 1.14 (Trevor Allison) [RHEL-140195]
  - perf vendor events intel: Update alderlake events from 1.34 to 1.35 (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Add CPU variants supporting common data source packet (Trevor Allison) [RHEL-140195]
  - perf auxtrace: Include sys/types.h for pid_t (Trevor Allison) [RHEL-140195]
  - perf test: Add kallsyms split test (Trevor Allison) [RHEL-140195]
  - perf tools: Use machine->root_dir to find /proc/kallsyms (Trevor Allison) [RHEL-140195]
  - perf tools: Fallback to initial kernel map properly (Trevor Allison) [RHEL-140195]
  - perf jevents: Skip optional metrics in metric group list (Trevor Allison) [RHEL-140195]
  - perf jevents: Drop duplicate pending metrics (Trevor Allison) [RHEL-140195]
  - perf jevents: Move json encoding to its own functions (Trevor Allison) [RHEL-140195]
  - perf jevents: Add threshold expressions to Metric (Trevor Allison) [RHEL-140195]
  - perf jevents: Term list fix in event parsing (Trevor Allison) [RHEL-140195]
  - perf jevents: Support parsing negative exponents (Trevor Allison) [RHEL-140195]
  - perf jevents: Allow metric groups not to be named (Trevor Allison) [RHEL-140195]
  - perf jevents: Add descriptions to metricgroup abstraction (Trevor Allison) [RHEL-140195]
  - perf jevents: Update metric constraint support (Trevor Allison) [RHEL-140195]
  - perf jevents: Allow multiple metricgroups.json files (Trevor Allison) [RHEL-140195]
  - perf ilist: Be tolerant of reading a metric on the wrong CPU (Trevor Allison) [RHEL-140195]
  - perf python: Correct copying of metric_leader in an evsel (Trevor Allison) [RHEL-140195]
  - perf test: Add python JIT dump test (Trevor Allison) [RHEL-140195]
  - perf test: Fix hybrid testing of event fallback test (Trevor Allison) [RHEL-140195]
  - perf tools: Remove a trailing newline in the event terms (Trevor Allison) [RHEL-140195]
  - perf trace: Skip internal syscall arguments (Trevor Allison) [RHEL-140195]
  - perf tools: Don't read build-ids from non-regular files (Trevor Allison) [RHEL-140195]
  - perf vendor events riscv: add T-HEAD C920V2 JSON support (Trevor Allison) [RHEL-140195]
  - perf pmu: fix duplicate conditional statement (Trevor Allison) [RHEL-140195]
  - perf docs: arm-spe: Document new SPE filtering features (Trevor Allison) [RHEL-140195]
  - perf tools: Add support for perf_event_attr::config4 (Trevor Allison) [RHEL-140195]
  - perf: replace strcpy() with strncpy() in util/jitdump.c (Trevor Allison) [RHEL-140195]
  - perf list: Support filtering in JSON output (Trevor Allison) [RHEL-140195]
  - perf list: Share print state with JSON output (Trevor Allison) [RHEL-140195]
  - perf list: Print matching PMU events for --unit (Trevor Allison) [RHEL-140195]
  - perf test all metrics: Fully ignore Default metric failures (Trevor Allison) [RHEL-140195]
  - perf evsel: Skip store_evsel_ids for non-perf-event PMUs (Trevor Allison) [RHEL-140195]
  - perf pmu: Add PMU kind to simplify differentiating (Trevor Allison) [RHEL-140195]
  - perf header: Switch "cpu" for find_core_pmu in caps feature writing (Trevor Allison) [RHEL-140195]
  - perf test maps: Additional maps__fixup_overlap_and_insert tests (Trevor Allison) [RHEL-140195]
  - perf maps: Avoid RC_CHK use after free (Trevor Allison) [RHEL-140195]
  - perf stat: Read tool events last (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Synthesize memory samples for SIMD operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Expose SIMD information in other operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report GCS in record (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report memset and memcpy in records (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report associated info for SVE / SME operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report extended memory operations in records (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report MTE allocation tag in record (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Report register access in record (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Introduce data processing macro for SVE operations (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Consolidate operation types (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Remove unused operation types (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Decode SME data processing packet (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Decode ASE and FP fields in other operation (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Rename SPE_OP_PKT_IS_OTHER_SVE_OP macro (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Decode GCS operation (Trevor Allison) [RHEL-140195]
  - perf arm_spe: Unify operation naming (Trevor Allison) [RHEL-140195]
  - perf tool_pmu: More accurately set the cpus for tool events (Trevor Allison) [RHEL-140195]
  - perf stat: Reduce scope of walltime_nsecs_stats (Trevor Allison) [RHEL-140195]
  - perf stat: Reduce scope of ru_stats (Trevor Allison) [RHEL-140195]
  - perf stat-shadow: Read tool events directly (Trevor Allison) [RHEL-140195]
  - perf tool_pmu: Use old_count when computing count values for time events (Trevor Allison) [RHEL-140195]
  - perf pmu: perf_cpu_map__new_int to avoid parsing a string (Trevor Allison) [RHEL-140195]
  - libperf cpumap: Reduce allocations and sorting in intersect (Trevor Allison) [RHEL-140195]
  - perf stat: Display metric-only for 0 counters (Trevor Allison) [RHEL-140195]
  - perf test: Don't fail if user rdpmc returns 0 when disabled (Trevor Allison) [RHEL-140195]
  - perf parse-events: Add debug logging to perf_event (Trevor Allison) [RHEL-140195]
  - perf test: Be tolerant of missing json metric none value (Trevor Allison) [RHEL-140195]
  - perf sample: Fix the wrong format specifier (Trevor Allison) [RHEL-140195]
  - perf script: Fix build by removing unused evsel_script() (Trevor Allison) [RHEL-140195]
  - perf vendor metrics s390: Avoid has_event(INSTRUCTIONS) (Trevor Allison) [RHEL-140195]
  - perf auxtrace: Remove errno.h from auxtrace.h and fix transitive dependencies (Trevor Allison) [RHEL-140195]
  - tool build: Remove __get_cpuid feature test (Trevor Allison) [RHEL-140195]
  - perf build: Don't add NO_AUXTRACE if missing feature-get_cpuid (Trevor Allison) [RHEL-140195]
  - perf intel-pt: Use the perf provided "cpuid.h" (Trevor Allison) [RHEL-140195]
  - perf test: Add a perf event fallback test (Trevor Allison) [RHEL-140195]
  - perf stat: Align metric output without events (Trevor Allison) [RHEL-140195]
  - perf tool_pmu: Make core_wide and target_cpu json events (Trevor Allison) [RHEL-140195]
  - perf test stat csv: Update test expectations and events (Trevor Allison) [RHEL-140195]
  - perf test stat: Update test expectations and events (Trevor Allison) [RHEL-140195]
  - perf test stat: Update shadow test to use metrics (Trevor Allison) [RHEL-140195]
  - perf test metrics: Update all metrics for possibly failing default metrics (Trevor Allison) [RHEL-140195]
  - perf test stat: Update std_output testing metric expectations (Trevor Allison) [RHEL-140195]
  - perf test stat: Ignore failures in Default[234] metricgroups (Trevor Allison) [RHEL-140195]
  - perf test stat+json: Improve metric-only testing (Trevor Allison) [RHEL-140195]
  - perf stat: Remove "unit" workarounds for metric-only (Trevor Allison) [RHEL-140195]
  - perf stat: Sort default events/metrics (Trevor Allison) [RHEL-140195]
  - perf stat: Fix default metricgroup display on hybrid (Trevor Allison) [RHEL-140195]
  - perf stat: Remove hard coded shadow metrics (Trevor Allison) [RHEL-140195]
  - perf script: Change metric format to use json metrics (Trevor Allison) [RHEL-140195]
  - perf stat: Add detail -d,-dd,-ddd metrics (Trevor Allison) [RHEL-140195]
  - perf jevents: Add metric DefaultShowEvents (Trevor Allison) [RHEL-140195]
  - perf jevents: Add set of common metrics based on default ones (Trevor Allison) [RHEL-140195]
  - perf expr: Add #target_cpu literal (Trevor Allison) [RHEL-140195]
  - perf metricgroup: Add care to picking the evsel for displaying a metric (Trevor Allison) [RHEL-140195]
  - perf symbol: Remove unneeded semicolon (Trevor Allison) [RHEL-140195]
  - perf test: Add test that command line period overrides sysfs/json values (Trevor Allison) [RHEL-140195]
  - perf pmu: Make pmu_alias_terms weak again (Trevor Allison) [RHEL-140195]
  - perf tool: Add a delegate_tool that just delegates actions to another tool (Trevor Allison) [RHEL-140195]
  - perf tool: Add the perf_tool argument to all callbacks (Trevor Allison) [RHEL-140195]
  - perf vendor events arm64:: Add i.MX94 DDR Performance Monitor metrics (Trevor Allison) [RHEL-140195]
  - perf stat: Add ScaleUnit to {cpu,task}-clock JSON description (Trevor Allison) [RHEL-140195]
  - perf record: Make sure to update build-ID cache (Trevor Allison) [RHEL-140195]
  - perf jevents: Make all tables static (Trevor Allison) [RHEL-140195]
  - perf metricgroup: When copy metrics copy default information (Trevor Allison) [RHEL-140195]
  - perf metricgroup: Missed free on error path (Trevor Allison) [RHEL-140195]
  - perf evsel: Remove unused metric_events variable (Trevor Allison) [RHEL-140195]
  - perf tools: Cache counter names for raw samples on s390 (Trevor Allison) [RHEL-140195]
  - perf trace: Increase syscall handler map size to 1024 (Trevor Allison) [RHEL-140195]
  - perf test workload: Add thread count argument to thloop (Trevor Allison) [RHEL-140195]
  - perf auxtrace: Add auxtrace_synth_id_range_start() helper (Trevor Allison) [RHEL-140195]
  - perf stat: Add/fix bperf cgroup max events workarounds (Trevor Allison) [RHEL-140195]
  - perf cs-etm: Mute enumeration value warning (Trevor Allison) [RHEL-140195]
  - tools: arm64: Add Cortex-A720AE definitions (Trevor Allison) [RHEL-140195]
  - perf annotate: Fix Clang build by adding block in switch case (Trevor Allison) [RHEL-140195]
  - perf annotate: Invalidate register states for untracked instructions (Trevor Allison) [RHEL-140195]
  - perf annotate: Save pointer offset in stack state (Trevor Allison) [RHEL-140195]
  - perf annotate: Track arithmetic instructions on pointers (Trevor Allison) [RHEL-140195]
  - perf annotate: Track address registers via TSR_KIND_POINTER (Trevor Allison) [RHEL-140195]
  - perf annotate: Skip annotating data types to lea instructions (Trevor Allison) [RHEL-140195]
  - perf annotate: Fix build with NO_SLANG=1 (Trevor Allison) [RHEL-140195]
  - perf jevents: Suppress circular dependency warnings (Trevor Allison) [RHEL-140195]
  - perf jevents: Remove unused makefile variable (Trevor Allison) [RHEL-140195]
  - perf jevents: Fix build when there are other json files in the tree (Trevor Allison) [RHEL-140195]
  - perf c2c annotate: Start from the contention line (Trevor Allison) [RHEL-140195]
  - perf c2c: Add annotation support to perf c2c report (Trevor Allison) [RHEL-140195]
  - perf stat bperf cgroup: Increase MAX_EVENTS from 32 to 1024 (Trevor Allison) [RHEL-140195]
  - perf ilist: Add PMU information to metrics (Trevor Allison) [RHEL-140195]
  - perf python: Add PMU argument to parse_metrics (Trevor Allison) [RHEL-140195]
  - perf ilist: Don't display deprecated events (Trevor Allison) [RHEL-140195]
  - perf trace: Don't synthesize mmaps unless callchains are enabled (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Add evsel test helper (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Add evlist test helper (Trevor Allison) [RHEL-140195]
  - perf test: Clean up test_..config helpers (Trevor Allison) [RHEL-140195]
  - perf test: Switch cycles event to cpu-cycles (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Remove cpu PMU requirement (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Without a PMU use cpu-cycles rather than cycles (Trevor Allison) [RHEL-140195]
  - perf test parse-events: Use evsel__match for legacy events (Trevor Allison) [RHEL-140195]
  - perf evsel: Improvements to __evsel__match (Trevor Allison) [RHEL-140195]
  - perf evlist: Avoid scanning all PMUs for evlist__new_default (Trevor Allison) [RHEL-140195]
  - perf top: Use evlist__new_default when no events specified (Trevor Allison) [RHEL-140195]
  - perf record: Use evlist__new_default when no events specified (Trevor Allison) [RHEL-140195]
  - perf parse-events: Remove hard coded legacy hardware and cache parsing (Trevor Allison) [RHEL-140195]
  - perf print-events: Remove print_symbol_events (Trevor Allison) [RHEL-140195]
  - perf print-events: Remove print_hwcache_events (Trevor Allison) [RHEL-140195]
  - perf jevents: Add legacy-hardware and legacy-cache json (Trevor Allison) [RHEL-140195]
  - perf pmu: Add and use legacy_terms in alias information (Trevor Allison) [RHEL-140195]
  - perf jevents: Add legacy json terms and default_core event table helper (Trevor Allison) [RHEL-140195]
  - perf parse-events: Add terms for legacy hardware and cache config values (Trevor Allison) [RHEL-140195]
  - perf pmu: Factor term parsing into a perf_event_attr into a helper (Trevor Allison) [RHEL-140195]
  - perf pmu: Use fd rather than FILE from new_alias (Trevor Allison) [RHEL-140195]
  - perf parse-events: Remove unused FILE input argument to scanner (Trevor Allison) [RHEL-140195]
  - perf pmu: Don't eagerly parse event terms (Trevor Allison) [RHEL-140195]
  - perf jevents: Support copying the source json files to OUTPUT (Trevor Allison) [RHEL-140195]
  - perf record: Skip don't fail for events that don't open (Trevor Allison) [RHEL-140195]
  - perf stat: Avoid wildcarding PMUs for default events (Trevor Allison) [RHEL-140195]
  - perf perf_api_probe: Avoid scanning all PMUs, try software PMU first (Trevor Allison) [RHEL-140195]
  - perf build python: Don't leave a.out file when building with clang (Trevor Allison) [RHEL-140195]
  - perf stat: Additional verbose details for <not supported> events (Trevor Allison) [RHEL-140195]
  - perf tests: use strdup() in "Object code reading" (Trevor Allison) [RHEL-140195]
  - perf: sched: Fix perf crash with new is_user_task() helper (Trevor Allison) [RHEL-140195] {CVE-2026-23159}
  - perf/x86/intel: Do not enable BTS for guests (Trevor Allison) [RHEL-140195]
  - perf: Fix refcount warning on event->mmap_count increment (Trevor Allison) [RHEL-140195] {CVE-2026-23127}
  - perf: Ensure swevent hrtimer is properly destroyed (Trevor Allison) [RHEL-140195] {CVE-2026-23014}
  - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() (Trevor Allison) [RHEL-140195]
  - perf/core: Fix missing read event generation on task exit (Trevor Allison) [RHEL-140195]
  - perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error (Trevor Allison) [RHEL-140195]
  - perf/uprobes: Remove <space><Tab> whitespace noise (Trevor Allison) [RHEL-140195]
  - perf: arm_spe: Add support for filtering on data source (Trevor Allison) [RHEL-140195]
  - perf: Add perf_event_attr::config4 (Trevor Allison) [RHEL-140195]
  - perf/x86/intel/ds: Factor out PEBS group processing code to functions (Trevor Allison) [RHEL-140195]
  - perf/x86/intel/ds: Factor out PEBS record processing code to functions (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Initialize architectural PEBS (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Correct large PEBS flag check (Trevor Allison) [RHEL-140195]
  - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call (Trevor Allison) [RHEL-140195]
  - perf/x86: Fix NULL event access and potential PEBS record loss (Trevor Allison) [RHEL-140195] {CVE-2025-68375}
  - perf/x86: Remove redundant is_x86_event() prototype (Trevor Allison) [RHEL-140195]
  - perf/x86/intel/cstate: Remove PC3 support from LunarLake (Trevor Allison) [RHEL-140195]


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel


author: Dodji Seketeli <dodji@redhat.com> - 2.8-1
changelog:
  - Update to upstream 2.8 tarball
  - Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
    that is applied upstream.
  - Update to changing SONAME (libabigail.so.7.0.0)
  - Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
    depending on it at runtime


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.9-1
changelog:
  - Rebase to upstream 2.9 tarball
  - Update to changing SONAME (libabigail.so.8.0.0)
  - Simplify %check section to run both test targets in single invocation
  - Resolves: RHEL-121667


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4 tarball
  - Drop patches
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch and
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
  - Enable build with support for BTF
  - Added BuildRequires: libbpf-devel
  - Support soname bumped to libabigail.so.3.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Fix sourceware.org/PR31045
    "Don't try setting translation unit for unique types"
    Apply patch
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch.
    That patch is applied in upstream mainline and will be available in
    libabigail 2.5.
  - Use %autosetup instead of the previous %setup and %patch macros.
  - Add git as a build requirement


author: Dodji Seketeli <dodji@redhat.com> - 2.4-3
changelog:
  - Fix sourceware.org/PR31017
    "Support Flex array conversion suppression"
    Apply patch 0002-suppression-Add-has_strict_flexible_array_data_membe.patch


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Enable abidb
  - Add BuildRequires: python3-devel
  - Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
    * Update ignore list for source tarball generation
    * Added new assert macros to compare 2 double given an epsilon
    * Added meson build system
    * Added header with version to TAP13 output
    * Fixed issues with MSVC
    * Fixed TAP output for skipped tests
    * Fixed issue with fail_msg
    * CMake generated configs for find_package(cmocka)
    * Documentation improvements


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Ales Matej <amatej@redhat.com> - 0.73.1-14
changelog:
  - Mark all protected packages as user installed for all transactions (RHEL-128445)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-146507)
  - Clearer error for protected package broken dependencies


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: Eduard Abdullin <eabdullin@almalinux.org> - 14.3.1-4.4.alma.2
changelog:
  - Change to almalinux bugtracker
  - Set --with-arch_64=x86-64-v2 on v2 arch
  - Fix sysroot packages for i686 architecture


author: Joseph Myers <josmyers@redhat.com> - 14.4.1-1
changelog:
  - update from releases/gcc-14 branch (RHEL-174638)
    - GCC 14.4 release
    - PRs ada/107475, ada/123060, ada/123138, ada/123289, ada/123867,
  	ada/124226, ada/124285, ada/124607, ada/124836, ada/125044,
  	ada/125695, c/101312, c/105555, c/123018, c/123156, c/123365,
  	c/123882, c/124830, c++/65271, c++/91388, c++/97740, c++/98930,
  	c++/101670, c++/120224, c++/120685, c++/120876, c++/121445,
  	c++/121822, c++/122070, c++/122318, c++/122494, c++/122550,
  	c++/122658, c++/122772, c++/122834, c++/123346, c++/123529,
  	c++/123578, c++/123597, c++/123667, c++/123676, c++/123684,
  	c++/123814, c++/123818, c++/123845, c++/123889, c++/124489,
  	c++/124632, c++/124850, c++/125315, c++/125376, d/119799, d/120096,
  	d/121477, d/123046, d/123264, d/123349, d/123407, d/123419, d/123422,
  	d/123798, d/124026, d/125089, debug/121964, debug/123886,
  	fortran/79524, fortran/82721, fortran/84245, fortran/85352,
  	fortran/93715, fortran/93814, fortran/93832, fortran/94978,
  	fortran/95338, fortran/95879, fortran/96087, fortran/96986,
  	fortran/98203, fortran/100155, fortran/100194, fortran/102430,
  	fortran/102459, fortran/102596, fortran/102619, fortran/105168,
  	fortran/106546, fortran/106946, fortran/107425, fortran/107968,
  	fortran/109788, fortran/115260, fortran/116829, fortran/119273,
  	fortran/120286, fortran/120723, fortran/121616, fortran/122046,
  	fortran/122206, fortran/124161, fortran/124450, fortran/124482,
  	fortran/124751, ipa/106260, ipa/111036, ipa/114790, ipa/116296,
  	ipa/122856, ipa/123416, ipa/125699, libstdc++/90192, libstdc++/102259,
  	libstdc++/105580, libstdc++/105857, libstdc++/109965,
  	libstdc++/114153, libstdc++/114865, libstdc++/118088,
  	libstdc++/118681, libstdc++/120029, libstdc++/120293,
  	libstdc++/120390, libstdc++/120789, libstdc++/121771,
  	libstdc++/122062, libstdc++/122567, libstdc++/122661,
  	libstdc++/122726, libstdc++/122821, libstdc++/122842,
  	libstdc++/123100, libstdc++/123147, libstdc++/123875,
  	libstdc++/123991, libstdc++/124024, libstdc++/124124,
  	libstdc++/124363, libstdc++/124568, libstdc++/125369, lto/121588,
  	lto/122515, lto/122620, middle-end/111817, middle-end/116772,
  	middle-end/120052, middle-end/120564, middle-end/121581,
  	middle-end/122624, middle-end/122689, middle-end/123175,
  	middle-end/123386, middle-end/123573, middle-end/123575,
  	middle-end/123703, middle-end/123775, middle-end/123876,
  	middle-end/123887, middle-end/123978, middle-end/124056,
  	middle-end/124250, middle-end/124491, middle-end/125146,
  	middle-end/125621, pch/14940, preprocessor/105412,
  	preprocessor/123273, rtl-optimization/106859, rtl-optimization/116053,
  	rtl-optimization/116600, rtl-optimization/120182,
  	rtl-optimization/121773, rtl-optimization/122215,
  	rtl-optimization/123121, rtl-optimization/123294,
  	rtl-optimization/124454, target/99930, target/105192, target/112400,
  	target/117575, target/117771, target/119079, target/119130,
  	target/120250, target/120645, target/122000, target/122097,
  	target/122223, target/122323, target/122446, target/122516,
  	target/122527, target/122695, target/122867, target/123102,
  	target/123155, target/123217, target/123271, target/123285,
  	target/123457, target/123460, target/123484, target/123521,
  	target/123548, target/123607, target/123624, target/123742,
  	target/123766, target/123779, target/123807, target/124126,
  	target/124133, target/124138, target/124236, target/124315,
  	target/124316, target/124335, target/124365, target/124366,
  	target/124705, target/124712, target/124933, target/125049,
  	target/125351, target/125409, target/125611, target/125670,
  	target/125751, target/125752, target/125795, target/125992,
  	testsuite/123004, testsuite/123353, testsuite/124682,
  	tree-optimization/107997, tree-optimization/109410,
  	tree-optimization/110043, tree-optimization/117217,
  	tree-optimization/119532, tree-optimization/119568,
  	tree-optimization/120341, tree-optimization/120560,
  	tree-optimization/120987, tree-optimization/121104,
  	tree-optimization/121776, tree-optimization/121844,
  	tree-optimization/122126, tree-optimization/122394,
  	tree-optimization/122408, tree-optimization/122793,
  	tree-optimization/122943, tree-optimization/122976,
  	tree-optimization/123061, tree-optimization/123300,
  	tree-optimization/123351, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123537,
  	tree-optimization/123596, tree-optimization/123602,
  	tree-optimization/123636, tree-optimization/123645,
  	tree-optimization/123729, tree-optimization/123736,
  	tree-optimization/123741, tree-optimization/123864,
  	tree-optimization/124130, tree-optimization/124132,
  	tree-optimization/124135, tree-optimization/124151,
  	tree-optimization/124288, tree-optimization/124358,
  	tree-optimization/124555, tree-optimization/124627,
  	tree-optimization/124677, tree-optimization/124826,
  	tree-optimization/124868, tree-optimization/125019,
  	tree-optimization/125025, tree-optimization/125039,
  	tree-optimization/125079, tree-optimization/125431,
  	tree-optimization/125501, tree-optimization/125774


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.9-1
changelog:
  - Rebase to libguestfs 1.59.9
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.25-1
changelog:
  - New upstream release
  - Fix PMTUd issues
  - Update docs and upstream URLs
  - Fix spec file for test suite build conditional
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-7
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
  - nfsrahead: zero-initialise device_info struct (RHEL-158528)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Phil Sutter <psutter@redhat.com> [1.3.0-3.el10]
changelog:
  - src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
  - Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
  - udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
  - data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
  - data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
  - Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
  - expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
  - expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
  - set_elem: Review debug output (Phil Sutter) [RHEL-119650]


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Sumit Bose <sbose@redhat.com> - 2.13.1-1
changelog:
  - Resolves: RHEL-183331 Rebase SSSD for RHEL 10.3
  - Resolves: RHEL-178180 'sssctl analyze --help' shows incorrect command in usage field
  - Resolves: RHEL-173663 [Regression] Cannot log in to FreeIPA account with password immediately after boot
  - Resolves: RHEL-173660 SSSD 2.13 doesn't work in offline mode, generates plenty of Permission denied errors
  - Resolves: RHEL-172303 SSSD: LDAP backend ('sssd_be') initialization fails if DNS in unresponsive
  - Resolves: RHEL-151491 SSSD kerberos plugins export symbols which clash
  - Resolves: RHEL-133013 /etc/hosts containing an entry with a name and alias but no IPv4 address results in sssd_be crash
  - Resolves: RHEL-5054 Smart card reader with pinpad fails C_Login. (CKF_PROTECTED_AUTHENTICATION_PATH not handled correctly)


author: Madhuri Upadhye <mupadhye@redhat.com> - 2.13.1-2
changelog:
  - Resolves: RHEL-190529 CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process
  - Resolves: RHEL-185008 Regression in IPA + Idp authentication with keycloak
  - Resolves: RHEL-111571 'sssctl config-check' does not work correctly for "Accessing AD with a MSA"
  - Resolves: RHEL-192054 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192069 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-9
changelog:
  - backport documentation change for CVE-2023-52355 (RHEL-179103)
  - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.1-1
changelog:
  - Version 2.11.1 (RHEL-150897)
  - udiskslinuxnvmecontroller: Fix sanitize job start (RHEL-69113)
  - udiskslinuxpartitiontable: Fix missing job completion (RHEL-124987)
  - udiskslinuxdevice: multipath handling fixes (RHEL-128598)
  - lvm2: Prevent a segfault on discarded probe output (RHEL-138293)
  - udisksmodulemanager: Silence console warnings when requested module is not available (RHEL-144145)
  - tests: Make sure to load sr_mod for cdrom tests (RHEL-153132)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-74200, RHEL-80679, RHEL-104216, RHEL-104427, RHEL-113843
      RHEL-118671, RHEL-122751, RHEL-126854, RHEL-126945, RHEL-128105
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-104238)


author: Jiri Denemark <jdenemar@redhat.com> - 12.2.0-1
changelog:
  - Rebased to libvirt-12.2.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-147660
      RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832, RHEL-154252
      RHEL-154292, RHEL-154549, RHEL-156689, RHEL-156800, RHEL-156804
      RHEL-159134


author: Jiri Denemark <jdenemar@redhat.com> - 12.4.0-1
changelog:
  - Rebased to libvirt-12.4.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-145937
      RHEL-147660, RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832
      RHEL-154252, RHEL-154292, RHEL-154549, RHEL-155804, RHEL-155809
      RHEL-156689, RHEL-156800, RHEL-156804, RHEL-159134, RHEL-164023
      RHEL-169588, RHEL-170773, RHEL-170993, RHEL-174300, RHEL-176438


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-1
changelog:
  - Rebased to libvirt-12.5.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-180448, RHEL-181350, RHEL-185108, RHEL-186015, RHEL-187057


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Michal Ruprich <mruprich@redhat.com> - 2.1.148-4
changelog:
  - DoS or arbitrary code execution via maliciously crafted LYB binary blob
  - Resolves: RHEL-177026 - CVE-2026-44673


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Koichiro Iwao <meta@almalinux.org> - 24.2.8-2.alma.1
changelog:
  - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in
    AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32)


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
changelog:
  - Update to 2.82.2
  - RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
  - RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.0-1
changelog:
  - Update to 2.87.0
  - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.5-1
changelog:
  - RHEL-159874 - Rebase mingw-glib2 to 2.87.5
  - RHEL-159187 - CVE-2025-14087 mingw-glib2: GLib: Buffer underflow in GVariant parser leads to heap corruption
  - Drop 0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch see https://bugzilla.redhat.com/show_bug.cgi?id=2431179


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-4.el10]
changelog:
  - spec: Require libnftnl-1.3.0-3 for nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - tests: py: Adjust payloads to changed userdata printing (Phil Sutter) [RHEL-128553]
  - tests: py: Update payload records (Phil Sutter) [RHEL-128553]
  - tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-128553]
  - tests: py: tools: Add regen_payloads.sh (Phil Sutter) [RHEL-128553]
  - netlink: Make use of nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - netlink: No need to reference array when passing as pointer (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::sizes (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::byteorder (Phil Sutter) [RHEL-128553]
  - expression: Set range expression 'len' field (Phil Sutter) [RHEL-128553]
  - intervals: Convert byte order implicitly (Phil Sutter) [RHEL-128553]
  - mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-128553]
  - mergesort: Fix sorting of string values (Phil Sutter) [RHEL-128553]
  - segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-128553]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-6
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: pdancak <pdancak@redhat.com> - 2:1.26.3-7
changelog:
  - RHEL-159548 - CVE-2026-27654 nginx: NGINX: Denial of Service or file
    modification via buffer overflow in ngx_http_dav_module


author: pdancak <pdancak@redhat.com> - 2:1.26.3-8
changelog:
  - RHEL-159527 - CVE-2026-27784 nginx: NGINX: Denial of Service due to
    memory corruption via crafted MP4 file


author: pdancak <pdancak@redhat.com> - 2:1.26.3-9
changelog:
  - RHEL-159435 - CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: pdancak <pdancak@redhat.com> - 2:1.26.3-10
changelog:
  - RHEL-157876 CVE-2026-32647 nginx: NGINX: Denial of Service or Code
    Execution via specially crafted MP4 files


author: Jonathan Wright <jonathan@almalinux.org> - 2:1.26.3-10.alma.1
changelog:
  - AlmaLinux changes: Fix CVE-2026-42945 Buffer overrun in rewrite module
    via arguments in replacement strings


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-1417
  - alt-name: Remove alt-names when interface marked as absent. RHEL-126481
  - hsr: Automatically disable IP on hsr port. RHEL-100774
  - hsr: add support for configuring "interlink" property. RHEL-100766
  - Support referring alternative-name as port/parent/next-hop-interface.
    RHEL-126508
  - Support referring interface name using its alternative name. RHEL-126510


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.59-1
changelog:
  - Upgrade to 2.2.59
  - route: add support for lock-mtu option. RHEL-151844
  - iptunnel: introduce support for ipip/sit/ip6ip6/ipip6 tunnels. RHEL-79801
  - nm: Fix error when modify port list of down interface. RHEL-52334


author: Jan Vaclav <jvaclav@redhat.com> - 2.2.60-1
changelog:
  - Upgrade to 2.2.60
  - Add support for configuring ipip tunnel in nmstate RHEL-79801
  - Fix error when modify port list of down interface RHEL-52334
  - Add support for mtu-lock route option RHEL-151844
  - ipv4: Add new parameter prefix-route-metric RHEL-147209


author: Richard W.M. Jones <rjones@redhat.com> - 5.2.0-5
changelog:
  - Fix remote code execution via buffer over-read in Marshal deserialization
    CVE-2026-28364
    Resolves: RHEL-152488


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Paul Howarth <paul@city-fan.org> - 2.14-1
changelog:
  - Update to 2.14 (rhbz#2161420)
    - Remove Test::Fatal and Test::Needs from test prereqs (GH#7, GH#8)
  - Use SPDX-format license tag


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 0.14-21
changelog:
  - Use SPDX-format license tag
  - Use author-independent source URL
  - Drop redundant buildroot cleaning in %install section
  - Drop support for old Perl versions needing XS helper


author: Michal Josef Špaček <mspacek@redhat.com> - 6.16-1
changelog:
  - 6.16 bump
  - Fix minimal version of IO::Socket::IP
  - Fix requires/provided modules in *tests package


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 20220807.0-1
changelog:
  - Update to 20220807.0
    - If your applications rely on portability to Windows, see new documentation
      sections "argument-passing rules are program-specific" and "batch files"
      - This release fixes bugs in runs of Windows programs that use standard
        command line parsing rules
      - Runs of non-standard programs may require changes; notable non-standard
        programs include cmd.exe, cscript.exe, and Cygwin programs
    - Skip t/pty.t test on NetBSD too (GH#140)
    - Add strict/warnings
    - Follow Windows argument quoting rules (GH#142)
    - Allow win32_newlines.t to actually run (GH#146)
    - Make t/pty.t test pass on OpenBSD (GH#150)
    - Support Win32 commands having non-standard command line parsing rules
      (GH#148)
    - Support executing Win32 batch files
    - Add IPC::Run::Win32Process, for delivering non-standard command lines
    - Fix reporting of Win32::Process::Create() errors
    - On Windows, avoid hang when closing read end of pipe (GH#156)
    - Ignore known test failure on msys - t/windows_search_path.t (GH#155)
    - Avoid warning with IPCRUNDEBUG, in Windows spawned children
    - Use $^X, not 'perl', in tests
    - Thanks to the new active developer: Noah Misch!


author: Paul Howarth <paul@city-fan.org> - 20231003.0-1
changelog:
  - Update to 20231003.0 (rhbz#2241845)
    - On Windows, avoid hang under IPCRUNDEBUG (GH#157)
    - Refresh "cpanfile" from Makefile.PL, to allow use on Windows
    - Normalize shebangs to /usr/bin/perl (GH#163)
    - Fix or skip all tests recently seen to fail on Windows
    - Include t/result.t in releases
    - Make full_result() and result() Windows behavior match non-Windows (GH#168)


author: Paul Howarth <paul@city-fan.org> - 0.142-1
changelog:
  - Update to 0.142
    Deprecations
    - Tilde expansion is deprecated due to inconsistent and bug-prone behavior
    Bug fixes
    - Prevent expansion of tildes that are not the very first character (e.g.
      "./~foo")
    - Prevent unintentional tilde expansion during internal path processing
    - Escape non-tilde glob characters before tilde expansion
    - Fixed spew/edit to a long filename approaching the filesystem length limit
    - Internal calls to 'print' are checked for possible errors
    - Internal read calls are checked for errors
    Changes
    - Path stringification now adds "./" in front of paths starting with literal
      tilde so they will round-trip; FREEZE updated to use this stringification
      rule as well
    - 'move' now uses File::Copy::move internally instead of the built-in
      'rename', allowing it to work across filesystems; it also returns an object
      for the moved location, allowing chaining
    - edit_lines_raw now uses a buffered raw I/O layer
    - edit_lines_utf8 now prefers PerlIO::utf8_strict, if available
    - lines_utf8 now consistently uses a buffered I/O layer
    - open*_utf8 now prefers PerlIO::utf8_strict, if available
    - slurp_utf8 now consistently uses an unbuffered I/O layer
    Documented
    - Changed all raw/UTF-8 layer descriptions in method documentation to match
      the code
    - Fixed SYNOPSIS syntax
    - Documented how to disable TMPDIR when making temp files/dirs
    Testing
    - Add additional tilde stringification testing
    - Fixed tilde expansion tests on Windows
    - Skip a problematic test case on Cygwin


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010 (rhbz#2138013)
    - Re-release with updated ppport.h for 5.8.5 compatibility
  - Use SPDX-format license tag


author: Michal Josef Špaček <mspacek@redhat.com> - 1.65-4
changelog:
  - Rewrite to use of /builddir/build/BUILDROOT/perl-Pod-Parser-1.67-4.el10.s390x macro
  - Update license to SPDX format


author: Michal Josef Špaček <mspacek@redhat.com> - 1.65-4
changelog:
  - Rewrite to use of /builddir/build/BUILDROOT/perl-Pod-Parser-1.67-5.el10.s390x macro
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 0.001013-21
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.202-1
changelog:
  - Update to 1.202 (rhbz#2158345)
    - Converted to Dist::Zilla
    - Test::Deep will now require v5.12, and this may go up; this change allows
      simplification of the Makefile.PL, which was coping with a mistake made
      twelve years ago
  - Use SPDX-format license tag
  - Package LICENSE file


author: Paul Howarth <paul@city-fan.org> - 1.204-1
changelog:
  - Update to 1.204 (rhbz#2159015)
    - Try to avoid clobbering global error variables when loading test libraries
    - hash_each now enumates keys in sort() order, to make errors more consistent


author: Paul Howarth <paul@city-fan.org> - 0.7000-1
changelog:
  - Update to 0.70
    - Stop pointless use of taint-mode in tests, so tests pass when perl is
      built without taint support


author: Paul Howarth <paul@city-fan.org> - 0.7100-1
changelog:
  - Update to 0.71
    - Document and test different behavior regarding Booleans in perl 5.38.0
      compared to earlier versions (GH#21)


author: Paul Howarth <paul@city-fan.org> - 0.43-23
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Fix permissions verbosely
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.37-1
changelog:
  - Update to 0.37 (#2118006)
    - Allow duplicate warnings when using warnings_exist (GH#8)
  - Use author-independent source URL
  - Use SPDX license expression


author: Paul Howarth <paul@city-fan.org> - 0.032-1
changelog:
  - Update to 0.032
    - New config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for
      temporarily turning failures into reports


author: Paul Howarth <paul@city-fan.org> - 0.033-1
changelog:
  - Update to 0.033
    - Add Test2 compatibility in the test triggered by done_testing()
    - New long-awaited feature (!!!) "allow_patterns", to either
      temporarily or globally exempt particular warning patterns


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Marek Kasik <mkasik@redhat.com> - 24.02.0-9
changelog:
  - Revert previous commit as it is incomplete yet
  - and other fixes need to go in
  - Reverts: RHEL-145379


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Jan Rybar <jrybar@redhat.com> - 4.0.4-11
changelog:
  - ps: etime overflow reappeared with rewritten library
  - uptime, w: report user sessions only; upstream backport of 734930e47
  - Resolves: RHEL-60826
  - Resolves: RHEL-141839


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Miro Hrončok <mhroncok@redhat.com> - 1:7.2.6-2
changelog:
  - Weaken the runtime dependency on:
    - python3-sphinxcontrib-applehelp
    - python3-sphinxcontrib-devhelp
    - python3-sphinxcontrib-jsmath
    - python3-sphinxcontrib-htmlhelp
    - python3-sphinxcontrib-serializinghtml
    - python3-sphinxcontrib-qthelp
  - Packages that want to use them during build need to BuildRequire them explicitly


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat
  Related: RHEL-167886, RHEL-168120


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-167886, RHEL-168120


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0-3
changelog:
  - Fork python-flit-core from the python-flit package
  - Adjust the License tag to include flit_core/versionno.py's regex (BSD-2-Clause)


author: Karolina Surma <ksurma@redhat.com> - 1.4.1-5
changelog:
  - License verified according to the SPDX specification
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
changelog:
  - Resolves: RHEL-105973 Include fixes in python3-ipatests package
  - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101708 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-95733 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-27
changelog:
  - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
  - Resolves: RHEL-119628 Include fixes in python3-ipatests
  - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
  - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
  - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
  - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
  - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
  - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-113778 Command that retrieve and install new CA certificates
  - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-119339 Memory leaks in IPA plugins


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
  - Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
  - Resolves:  RHEL-4895 ipa use systemd-sysusers
  - Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-3.1
changelog:
  - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
  - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
  - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.1-1
changelog:
  - Update to 7.4.1
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-1-2023-09-02
  - Fixes: rhbz#2236995


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.2-1
changelog:
  - Update to 7.4.2
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-2-2023-09-07
  - Fixes: rhbz#2237942


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.3-1
changelog:
  - Update to 7.4.3
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-3-2023-10-24
  - Fixes: rhbz#2245983


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-168121, RHEL-167887


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-168121, RHEL-167887


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-176147


author: Tomáš Hrnčiar <thrciar@redhat.com> - 1.6.0-3
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <mhroncok@redhat.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Priscila Gutierres <pgutier@redhat.com>
        Thomas Moschny <thomas.moschny@gmx.de>
        Tomas Orsava <torsava@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Cristian Le <git@lecris.dev> - 2.13.6-7
changelog:
  - Refactor the build script
  - Drop the python3-python2 distinction
  - Use standard cmake and pyproject macros (rhbz#2377381)
  - Allow to build with arbitrary generator (rhbz#2381106)


author: Lukáš Zachar <lzachar@redhat.com> - 78.1.1-3
changelog:
  - Adjust gating
  - Generic gating.yaml for all rhel
  - Use CS repos instead of Fedora
  - Remove python versions not available on c10s
  - Test with python-isort


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladislav Dronov <vdronov@redhat.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0 @ 686d209b (RHEL-91079)
  - Add autoconf-archive as a dependency
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code
  - Add sysusers.d config file to allow rpm to create users/groups automatically


author: Vladislav Dronov <vdronov@redhat.com> - 26.02.0-1
changelog:
  - Update to qatlib 26.02.0 @ fe4bb4b6 (RHEL-115466)
  - Add patch to force 32 bit MMIO CSR reads for GCC 16.1


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba (RHEL-73092, RHEL-50462)
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-12
changelog:
  - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
    Resolves: RHEL-171246


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-34
changelog:
  - Upgrade to Ruby 4.0.3.
    Resolves: RHEL-170933
  - Fix ERB: Arbitrary code execution via deserialization bypass
   (CVE-2026-41316)
    Resolves: RHEL-170911
  - Fix JSON: Denial of Service or Information Disclosure via format string injection
   (CVE-2026-33210)
   Resolves: RHEL-169964


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.16-1
changelog:
  - Allow sshd-session inherit limits from its parent sshd process
  Resolves: RHEL-136673
  - Revert "Allow sshd-session inherit limits from its parent process"
  Resolves: RHEL-136673
  - Allow tlshd write generic certificates
  Resolves: RHEL-123737
  - Allow systemd-hostnamed to create its Varlink socket
  Resolves: RHEL-139385
  - Update gpg_role() interface with unix_stream_socket permissions
  Resolves: RHEL-128555
  - Label /etc/aliases.cdb with etc_aliases_t
  Resolves: RHEL-109976
  - Add aliases.lmdb to mta_filetrans_named_content()
  Resolves: RHEL-140884
  - Update policy for bootupd
  Resolves: RHEL-141391


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.17-1
changelog:
  - Allow rhsmcertd read anaconda run files
  Resolves: RHEL-141391
  - Allow mdadm to use CAP_BPF during RAID monitoring
  Resolves: RHEL-135765
  - Allow mdadm the CAP_SYS_PTRACE capability
  Resolves: RHEL-135765
  - Allow staff and sysadm execute iotop using sudo
  Resolves: RHEL-134940
  - Allow kernel_t to read/write all domains' pipes
  Resolves: RHEL-124442
  - Allow nfsd_t domain setuid and setgid capability for rpc.mountd
  Resolves: RHEL-148107


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.18-1
changelog:
  - Allow NetworkManager list bpf directories
  Resolves: RHEL-142171
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  Resolves: RHEL-114886
  - Allow pkcsslotd read files in /proc and /sys
  Resolves: RHEL-130812
  - Allow pkcsslotd map its private tmpfs files
  Resolves: RHEL-130812
  - Allow tlshd communication to unconfined_t over a tcp socket
  Resolves: RHEL-125106
  - Label /run/insights-client.ppid with insights_client_run_t
  Resolves: RHEL-146687
  - Allow NM nvme dispatcher script start systemd services
  Resolves: RHEL-140760
  - Allow tlshd write generic certificate dirs
  Resolves: RHEL-127023
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  Resolves: RHEL-121479
  - Allow plasma login manager stop login services
  Resolves: RHEL-140911
  - Rebuild selinux policy after installation of the extra package
  Resolves: RHEL-135875
  Resolves: RHEL-143926
  - Move triggerin scriptlets to the parent packages
  Resolves: RHEL-141813
  - Rebuild policy before running {binsbin|varrun}-convert.sh
  Resolves: RHEL-141813


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.19-1
changelog:
  - Label the greetd login manager framework as a display manager
  Resolves: RHEL-147638
  - Allow sysadm user connect to lvm over a unix stream socket
  Resolves: RHEL-153729
  - Allow virtqemud map vhost net device
  Resolves: RHEL-141541
  - Allow virtqemud_t send kill signal to svirt_tcg_t
  Resolves: RHEL-69913
  - Allow virtqemud_t get priority of a svirt_t process
  Resolves: RHEL-69920
  - Dontaudit tlshd write generic certificate dirs
  Resolves: RHEL-152619
  - Allow redis_t to create netlink_rdma_socket
  Resolves: RHEL-154814
  - Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
  Resolves: RHEL-140212


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.20-1
changelog:
  - Do not backslash-escape underscores in file context specifications
  Resolves: RHEL-140921
  - Policy for go-fdo-server
  Resolves: RHEL-145754
  - Allow iptables_t read state of some processes
  Resolves: RHEL-164304
  - Allow iptables read firewalld process state
  Resolves: RHEL-164304
  - Allow systemd-machined read virtd process state
  Resolves: RHEL-164304
  - Allow systemd-machined read svirt process state
  Resolves: RHEL-164304
  - Label /dev/HID-SENSOR-.* with hid_sensor_device_t
  Resolves: RHEL-168417
  - Allow NetworkManager_dispatcher_nvme_t check status of systemd services
  Resolves: RHEL-164864
  - Dontaudit setroubleshootd read root's home files like .rpmmacros
  Resolves: RHEL-142548
  - Allow systemd-tmpfiles to adjust resource limits
  Resolves: RHEL-139855


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.21-1
changelog:
  - Allow sys_resource on execution of generic executables conditionally
  Resolves: RHEL-141858
  - Label bootloader-migrate-generator with coreos_bootloader_migrate_generator_exec_t
  Resolves: RHEL-156457
  - Label /run/coreos with coreos_installer_var_run_t
  Resolves: RHEL-156456
  - Add systemd_create_generator_unit_file() and systemd_write_generator_unit_file()
  Resolves: RHEL-156456
  - Allow setroubleshoot_fixit_t to touch /.autorelabel and reboot
  Resolves: RHEL-170267
  - Remove 14 permissive domains
  Resolves: RHEL-166039
  - Do not audit iptables attempts to read other process state
  Resolves: RHEL-164304


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.22-1
changelog:
  - Allow virtqemud execute kmod in the kmod domain
  Resolves: RHEL-99904
  - Allow qatlib map kernel modules
  Resolves: RHEL-133797
  - Allow init nnp domain transition do dirsrv_t and dirsrv_snmp_t
  Resolves: RHEL-167849
  - Allow go-fdo-server to read system information
  Resolves: RHEL-145754


author: Veronika Syncakova <vsyncako@redhat.com> - 42.1.23-1
changelog:
  - Bring back execmem permission for svirt_tcg_t
  - Leave content of virtqemud_use_execmem empty
  - Dontaudit libvirt-daemons execmem
  - Allow virtstoraged to setattr fixed disk devices
  Resolves: RHEL-44901


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.24-1
changelog:
  - Apply the systemd system generator template to the kdump-dep generator
  Resolves: RHEL-155963
  - Allow staff user mounton /var/lib dirs
  Resolves: RHEL-171123
  - Allow staff user read nsfs files
  Resolves: RHEL-171123
  - Allow staff user additional sandboxing permissions
  Resolves: RHEL-171123
  - Allow staff_sudo_t read PID1's process state
  Resolves: RHEL-171123
  - Allow staff_sudo_t read logind sessions files
  Resolves: RHEL-171123
  - Allow staff user delete thump_tmp_t files
  Resolves: RHEL-171123
  - Allow staff user connect to systemd-logind over a unix stream socket
  Resolves: RHEL-171123
  - Allow staff user mount /proc
  Resolves: RHEL-171123
  - Support confined users usage of bubblewrap
  Resolves: RHEL-171123
  - Allow staff role read/write cockpit-session unix stream sockets
  Resolves: RHEL-171123
  - Allow some confined users read and map generic log files
  Resolves: RHEL-171123
  - Add files_mounton_generic_tmp_dirs() interface
  Resolves: RHEL-171123
  - Apply the systemd system generator template to the anaconda generator
  Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2417835
  - Support new sanlock features - using libdm and SG_IO
  Resolves: RHEL-171586
  - Allow pcm-sensor-server the sys_admin capability
  Resolves: RHEL-171325
  - Allow the kernel to execute also special files
  Resolves: https://redhat.atlassian.net/browse/RHEL-72728
  - Split using dirsrv_ and dirsrvadmin_ interfaces into separate blocks
  Resolves: RHEL-62706
  - Dontaudit virt_driver_domain execmem
  Resolves: RHEL-44901


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.25-1
changelog:
  - Allow kernel write to unconfined and sysadm users' keys
  Resolves: RHEL-156860
  - Allow logwatch to getattr nsfs files
  Resolves: RHEL-160897
  - Support systemtap on a UEFI+SecureBoot system
  Resolves: RHEL-178490
  - Remove extra parameters from interface headers
  Resolves: RHEL-129394
  - Add missing interface requirements
  Resolves: RHEL-135488


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Paul Evans <pevans@redhat.com> - 1.48-8
changelog:
  - rescan-scsi-bus.sh: Correctly read RMB bit on enquiry (RHEL-153277)
  - rescan-scsi-bus.sh: Replace 'which' with build in 'command -v' (RHEL-70693)
  - sg_safte: update short option of version (RHEL-125869)
  - sg_rdac: accept --help or -h without error (RHEL-69439)
  - sg_inq: fix issing output fields in --export format (RHEL-119246, RHEL-123748)
  - sg_inq: re-add Unit serial number field (RHEL-119246, RHEL-123748)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-11
changelog:
  - passwd.c: lock, open, close and unlock passwd database
    Resolves: RHEL-151055
    Resolves: RHEL-150955


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-12
changelog:
  - groupmod.c: delete gr_free_members(&grp) to avoid double free
    Resolves: RHEL-135902
  - subordinateio.c: list_owner_ranges(): Fix duplicate range when
    username matches ID. Resolves: RHEL-114226


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Andreas Schneider <asn@redhat.com> - 1.3.4-1
changelog:
  - Update to version 1.3.4
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.3.4/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1:1.6.0-8
changelog:
  - migrated to SPDX license
  - resolves: rhbz#2219549* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.6.0-5

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit <hello@packit.dev> - 0.17.17-1
changelog:
  - Fix race with worker thread accessing $UMOCKDEV_DIR
  - Disable -Wincompatible-function-pointer-types for clang


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


author: Jens Petersen <petersen@redhat.com> - 15.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode15.0.0/ (#2126234)
  - http://blog.unicode.org/2022/09/announcing-unicode-standard-version-150.html


author: Jens Petersen <petersen@redhat.com> - 15.1.0-0.1
changelog:
  - update to draft 15.1.0: https://unicode.org/versions/Unicode15.1.0/
  - do not add copyright.html file from website
  - add missing Unicode-TOU license tag


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Luboš Uhliarik <luhliari@redhat.com> - 7.6.0-3
changelog:
  - Resolves: RHEL-59267 - varnish rebase to 7.6.0
  - Resolves: RHEL-30333 CVE-2024-30156 varnish: HTTP/2 Broken Window
    Attack may result in denial of service


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-7
changelog:
  - cloner: Sync <uuid> and <sysinfo> system uuid (RHEL-34608)
  - virtinstall: fix regression with --boot and no install method (RHEL-34608)
  - progress: Fix showing correct final total (RHEL-34608)
  - virtinstall: Fix the allocating disk size printed by the progress bar (RHEL-34608)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (RHEL-34608)
  - virt-install: Recommend '--boot uefi' (RHEL-34608)
  - virt-install: Document Secure Boot setups (RHEL-34608)
  - tests: Add more cloud-init and TPM test cases (RHEL-34608)
  - installer: drop default TPM for --cloud-init install phase (RHEL-34608)
  - Add gating for centos stream 10 (RHEL-34608)
  - xmleditor: make gtksourceview optional (RHEL-35859)


author: Pavel Hrdina <phrdina@redhat.com> - 5.0.0-1
changelog:
  - Rebased to virt-manager-5.0.0 (RHEL-46783)
  - The rebase also fixes the following bugs:
      RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371
      RHEL-65189, RHEL-66768


author: Pavel Hrdina <phrdina@redhat.com> - 5.1.0-1
changelog:
  - Rebased to virt-manager-5.1.0 (RHEL-119228)
  - The rebase also fixes the following bugs:
      RHEL-105818


author: Pavel Hrdina <phrdina@redhat.com> - 5.1.0-2
changelog:
  - virtinst: interface: add support for backend.hostname and backend.fqdn (RHEL-95370)
  - maint: use constants instead of strings for boot devices (RHEL-71842)
  - virtinst: rework get_boot_order (RHEL-71842)
  - virtinst: guest: introduce can_use_device_boot_order (RHEL-71842)
  - virtinst: remove legacy attribute from set_boot_order/get_boot_order (RHEL-71842)
  - installer: add support to use device boot order (RHEL-71842)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-5
changelog:
  - RHEL patches:
    * Select correct qemu binary for -o qemu mode
    * Disable the --qemu-boot / -oo qemu-boot option
    * Fix list of supported sound cards to match RHEL qemu
    * Fixes for libguestfs-winsupport
    * -i disk: force VNC as display
    * point to KB for supported v2v hypervisors/guests
    * Remove -o glance
    * Remove the --in-place option
    * tests: Remove btrfs test
    * Remove --block-driver option
  - Remove input from Xen
    resolves: RHEL-37687
  - Remove -o rhv, -o rhv-upload and -o vdsm modes
    resolves: RHEL-36712


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-78505
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-78657


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-9
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313
  - Remove virt-v2v -io vddk-noextents=true option
    resolves: RHEL-102619
  - Add -o kubevirt -oo disk and -oo create options
    resolves: RHEL-101599
  - Fix escaping of nbdkit-vddk-plugin export parameter
    resolves: RHEL-102734
  - Fix installation of drivers on firstboot with pending reboots
    resolves: RHEL-103356
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104018
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109130
  - Set boot order for Linux guests based on grub location
    resolves: RHEL-108991


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-5
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938
  - Expose XFS version in virt-v2v-inspector
    resolves: RHEL-144075
  - Fix Debian 12 UEFI conversions
    resolves: RHEL-144467
  - Fix import when datastore name has characters like '+'
    resolves: RHEL-133729
  - Replace /etc/crypttab /dev/sdX with UUID
    resolves: RHEL-93583
  - Replace '/' in output name with '_'
    resolves: RHEL-136479


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.8-1
changelog:
  - Rebase to virt-v2v 2.11.8
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.9-1
changelog:
  - Rebase to virt-v2v 2.11.9
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121, RHEL-178432
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312
  - Skip fsck after conversion for RHEL 7
    resolves: RHEL-191749
  - Add new --collect option to collect pre-conversion information
    resolves: RHEL-188772
  - Add disk boot-order to inspector and in-place XML output
    resolves: RHEL-184508
  - Allow conversion with immutable resolv.conf
    related: RHEL-178556
  - Add note about PowerShell ExecutionPolicy AllSigned (MTV-4424)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.9-2
changelog:
  - Rebase to virt-v2v 2.11.9
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121, RHEL-178432
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312
  - Skip fsck after conversion for RHEL 7
    resolves: RHEL-191749
  - Add new --collect option to collect pre-conversion information
    resolves: RHEL-188772
  - Add disk boot-order to inspector and in-place XML output
    resolves: RHEL-184508
  - Allow conversion with immutable resolv.conf
    related: RHEL-178556
  - Add note about PowerShell ExecutionPolicy AllSigned (MTV-4424)
  - Retry qemu-guest-agent MSI installer on failure
    resolves: RHEL-186301


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-3
changelog:
  - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
    Resolves: https://redhat.atlassian.net/browse/RHEL-169759


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-4
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163190
    Resolves: https://redhat.atlassian.net/browse/RHEL-163286
    Resolves: https://redhat.atlassian.net/browse/RHEL-163244


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-5
changelog:
  - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
                 CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
                 CVE-2026-50262, CVE-2026-50263
    Resolves: https://redhat.atlassian.net/browse/RHEL-182444


author: José Expósito <jexposit@redhat.com> - 1.20.0-6
changelog:
  - Rebuilt to include the package in CRB. See:
    https://bugzilla.redhat.com/show_bug.cgi?id=2309121
    https://issues.redhat.com/browse/RHEL-57593
    https://issues.redhat.com/browse/ENGCMP-4434


author: Daniel P. Berrangé <berrange@redhat.com> - 2.1.0-21
changelog:
  - Switch to using git for managing patches
  - Fix potential buffer overread (CVE-2017-16516)
  - Fix integer overflow leading to heap corruption (CVE-2022-24795)
  - Fix multiple memory leaks (CVE-2023-33460)


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


