# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-225.el10]
changelog:
  - firmware: qcom_scm: Use TASK_IDLE state in wait_for_wq_completion() (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom_scm: Support multiple waitq contexts (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom_scm: Add API to get waitqueue IRQ info (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: allow QSEECOM on Surface Pro 11 (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: tzmem: export shm_bridge create/delete (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: add support for object invocation (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: Allow QSEECOM on Dell Inspiron 7441 / Latitude 7455 (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: Allow QSEECOM on Lenovo Thinkbook 16 (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: Allow QSEECOM on HAMOA-IOT-EVK (Mattijs Korpershoek) [RHEL-170163]
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-169566] {CVE-2025-68724}
  - PCI: hv: Fix double ida_free in hv_pci_probe error path (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: pci-epf-vntb: Fix MSI doorbell IRQ unwind (Myron Stowe) [RHEL-139975]
  - PCI: s32g: Skip Root Port removal during success (Myron Stowe) [RHEL-139975]
  - PCI: Provide pci_free_irq_vectors() stub (Myron Stowe) [RHEL-139975]
  - PCI: meson: Report that link is up while in ASPM L0s and L1 states (Myron Stowe) [RHEL-139975]
  - PCI: qcom: Remove ASPM L0s support for MSM8996 SoC (Myron Stowe) [RHEL-139975]
  - MAINTAINERS: Add Manivannan Sadhasivam as PCI/pwrctrl maintainer (Myron Stowe) [RHEL-139975]
  - PCI: Use max() instead of max_t() to ease static analysis (Myron Stowe) [RHEL-139975]
  - PCI: qcom: Implement .assert_perst() (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Implement .assert_perst() for dwc glue drivers (Myron Stowe) [RHEL-139975]
  - PCI: Add .assert_perst() to control PCIe PERST# (Myron Stowe) [RHEL-139975]
  - MAINTAINERS: Add NXP S32G PCIe controller driver maintainer (Myron Stowe) [RHEL-139975]
  - PCI: s32g: Add NXP S32G PCIe controller driver (RC) (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Add register and bitfield definitions (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: s32g: Add NXP S32G PCIe controller (Myron Stowe) [RHEL-139975]
  - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: amlogic: Fix the register name of the DBI region (Myron Stowe) [RHEL-139975]
  - PCI: mediatek: Add support for Airoha AN7583 SoC (Myron Stowe) [RHEL-139975]
  - PCI: mediatek: Use generic MACRO for TPVPERL delay (Myron Stowe) [RHEL-139975]
  - PCI: mediatek: Convert bool to single quirks entry and bitmap (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: mediatek: Add support for Airoha AN7583 (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: mediatek: Convert to YAML schema (Myron Stowe) [RHEL-139975]
  - PCI: keystone: Add support to build as a loadable module (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Export dw_pcie_allocate_domains() and dw_pcie_ep_raise_msix_irq() (Myron Stowe) [RHEL-139975]
  - PCI: Export pci_get_host_bridge_device() for use by pci-keystone (Myron Stowe) [RHEL-139975]
  - PCI: keystone: Exit ks_pcie_probe() for invalid mode (Myron Stowe) [RHEL-139975]
  - PCI: j721e: Use 'pcie->reset_gpio' directly and drop the local variable (Myron Stowe) [RHEL-139975]
  - PCI: j721e: Use devm_clk_get_optional_enabled() to get and enable the clock (Myron Stowe) [RHEL-139975]
  - PCI: ixp4xx: Guard ARM32-specific hook_fault_code() (Myron Stowe) [RHEL-139975]
  - PCI: dw-rockchip: Simplify regulator setup with devm_regulator_get_enable_optional() (Myron Stowe) [RHEL-139975]
  - PCI: dw-rockchip: Configure L1SS support (Myron Stowe) [RHEL-139975]
  - PCI: tegra194: Remove unnecessary L1SS disable code (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Advertise L1 PM Substates only if driver requests it (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition (Myron Stowe) [RHEL-139975]
  - PCI: brcmstb: Add panic/die handler to driver (Myron Stowe) [RHEL-139975]
  - PCI: brcmstb: Add a way to indicate if PCIe bridge is active (Myron Stowe) [RHEL-139975]
  - PCI: brcmstb: Fix disabling L0s capability (Myron Stowe) [RHEL-139975]
  - PCI: host-generic: Move bridge allocation outside of pci_host_common_init() (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: pci-epf-vntb: Add MSI doorbell support (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: Add pci_epf_assign_bar_space() API (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: Add pci_epf_get_required_bar_size() helper (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: Rename 'epf_bar::aligned_size' to 'epf_bar:mem_size' (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-x1e80100: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8550: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8450: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8350: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8250: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8150: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sc8280xp: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sc7280: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sa8775p: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: Update the email address for Manivannan Sadhasivam (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: amlogic,axg-pcie: Fix select schema (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8550: Add Kaanapali compatible (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: dwc: rockchip: Add RK3528 variant (Myron Stowe) [RHEL-139975]
  - PCI: Fix Resizable BAR restore order (Myron Stowe) [RHEL-139975]
  - PCI: Fix BAR resize rollback path overwriting ret (Myron Stowe) [RHEL-139975]
  - PCI: Validate pci_rebar_size_supported() input (Myron Stowe) [RHEL-139975]
  - PCI: Convert BAR sizes bitmasks to u64 (Myron Stowe) [RHEL-139975]
  - drm/amdgpu: Use pci_rebar_get_max_size() (Myron Stowe) [RHEL-139975]
  - drm/xe/vram: Use pci_rebar_get_max_size() (Myron Stowe) [RHEL-139975]
  - PCI: Add pci_rebar_get_max_size() (Myron Stowe) [RHEL-139975]
  - drm/xe/vram: Use PCI rebar helpers in resize_vram_bar() (Myron Stowe) [RHEL-139975]
  - drm/i915/gt: Use pci_rebar_size_supported() (Myron Stowe) [RHEL-139975]
  - PCI: Add pci_rebar_size_supported() helper (Myron Stowe) [RHEL-139975]
  - PCI: Improve Resizable BAR functions kernel doc (Myron Stowe) [RHEL-139975]
  - PCI: Move pci_rebar_size_to_bytes() and export it (Myron Stowe) [RHEL-139975]
  - PCI: Move pci_rebar_bytes_to_size() and clean it up (Myron Stowe) [RHEL-139975]
  - PCI: Move Resizable BAR code to rebar.c (Myron Stowe) [RHEL-139975]
  - PCI: Prevent restoring assigned resources (Myron Stowe) [RHEL-139975]
  - drm/amdgpu: Remove driver side BAR release before resize (Myron Stowe) [RHEL-139975]
  - drm/i915: Remove driver side BAR release before resize (Myron Stowe) [RHEL-139975]
  - PCI: Add kerneldoc for pci_resize_resource() (Myron Stowe) [RHEL-139975]
  - PCI: Fix restoring BARs on BAR resize rollback path (Myron Stowe) [RHEL-139975]
  - PCI: Free saved list without holding pci_bus_sem (Myron Stowe) [RHEL-139975]
  - PCI: Try BAR resize even when no window was released (Myron Stowe) [RHEL-139975]
  - PCI: Change pci_dev variable from 'bridge' to 'dev' (Myron Stowe) [RHEL-139975]
  - PCI/IOV: Adjust ->barsz[] when changing BAR size (Myron Stowe) [RHEL-139975]
  - PCI: Prevent resource tree corruption when BAR resize fails (Myron Stowe) [RHEL-139975]
  - PCI/PTM: Enable only if device advertises relevant role (Myron Stowe) [RHEL-139975]
  - Documentation: PCI: Amend error recovery doc with pci_save_state() rules (Myron Stowe) [RHEL-139975]
  - treewide: Drop pci_save_state() after pci_restore_state() (Myron Stowe) [RHEL-139975]
  - PCI/ERR: Ensure error recoverability at all times (Myron Stowe) [RHEL-139975]
  - PCI/PM: Stop needlessly clearing state_saved on enumeration and thaw (Myron Stowe) [RHEL-139975]
  - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths (Myron Stowe) [RHEL-139975]
  - PCI: vmd: Switch to pci_bus_find_emul_domain_nr() (Myron Stowe) [RHEL-139975]
  - PCI: Enable host bridge emulation for PCI_DOMAINS_GENERIC platforms (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix device leak at device stop (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix device and OF node leak at bus scan (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix device leak at registration (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix double cleanup on devm_add_action_or_reset() failure (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Add optional slot clock for PCI slots (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Create pwrctrl devices only when CONFIG_PCI_PWRCTRL is enabled (Myron Stowe) [RHEL-139975]
  - arm64: Kconfig: switch to HAVE_PWRCTRL (Myron Stowe) [RHEL-139975]
  - wifi: ath12k: switch to PCI_PWRCTRL_PWRSEQ (Myron Stowe) [RHEL-139975]
  - wifi: ath11k: switch to PCI_PWRCTRL_PWRSEQ (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Rename pwrctrl Kconfig symbols and slot module (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Add pwrctrl driver for PCI slots (Myron Stowe) [RHEL-139975]
  - dt-bindings: vendor-prefixes: Document the 'pciclass' prefix (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Skip scanning for the device further if pwrctrl device is created (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Move pci_pwrctrl_unregister() to pci_destroy_dev() (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Move creation of pwrctrl devices to pci_scan_device() (Myron Stowe) [RHEL-139975]
  - Bluetooth: mgmt: Add idle_timeout to configurable system parameters (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix regressions caused by reusing ident (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: clamp SCO altsetting table indices (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix not tracking outstanding TX ident (David Marlin) [RHEL-157827]
  - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix send LE flow credits in ACL link (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (David Marlin) [RHEL-157827]
  - Bluetooth: hci_ll: Fix firmware leak on error path (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-157827]
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req (David Marlin) [RHEL-157827]
  - Bluetooth: qca: fix ROM version reading on WCN3998 chips (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (David Marlin) [RHEL-157827]
  - Bluetooth: HIDP: Fix possible UAF (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: Fix hci_le_create_conn_sync (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Fix defer tests being unstable (David Marlin) [RHEL-157827]
  - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (David Marlin) [RHEL-157827]
  - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (David Marlin) [RHEL-157827]
  - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (David Marlin) [RHEL-157827]
  - Bluetooth: Fix CIS host feature condition (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: Add LE Channel Sounding HCI Command/event structures (David Marlin) [RHEL-157827]
  - Bluetooth: purge error queues in socket destructors (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: hci_qca: Cleanup on all setup failures (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add device ID for Realtek RTL8761BU (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID for RTL8852CE (David Marlin) [RHEL-157827]
  - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add USB ID 0489:e112 for Realtek 8851BE (David Marlin) [RHEL-157827]
  - Bluetooth: hci_conn: Set link_policy on incoming ACL connections (David Marlin) [RHEL-157827]
  - Bluetooth: hci_qca: Fix SSR (SubSystem Restart) fail when BT_EN is pulled up by hw (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add support for MediaTek7920 0489:e158 (David Marlin) [RHEL-157827]
  - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: report BIS capability flags in supported settings (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (David Marlin) [RHEL-157827]
  - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-157827]
  - drivers/bluetooth: btbcm: Use kmalloc_array() to prevent overflow (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Introduce HCI Driver protocol (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: add new custom firmwares (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 0x13d3/0x3619 for RTL8852BE-VT (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 0x13d3/0x3618 for RTL8852BE-VT (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT (David Marlin) [RHEL-157827]
  - Bluetooth: iso: fix socket matching ambiguity between BIS and CIS (David Marlin) [RHEL-157827]
  - Bluetooth: btrtl: Add the support for RTL8761CUV (David Marlin) [RHEL-157827]
  - Bluetooth: Remove redundant pm_runtime_mark_last_busy() calls (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Reclassify Qualcomm WCN6855 debug packets (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Suspend/Resume: Controller doorbell interrupt handling (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Support for S4 (Hibernate) (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Fix not updating BIS sender source address (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: Allow use of Set Device Flags without Add Device (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Attempt to resolve broadcast address (David Marlin) [RHEL-157827]
  - Bluetooth: HCI: Always use the identity address when initializing a connection (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-157827]
  - Bluetooth: hci_core: Introduce HCI_CONN_FLAG_PAST (David Marlin) [RHEL-157827]
  - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-157827]
  - Bluetooth: hci_h5: implement CRC data integrity (David Marlin) [RHEL-157827]
  - Bluetooth: hci_h5: avoid sending two SYNC messages (David Marlin) [RHEL-157827]
  - Bluetooth: mediatek: add gpio pin to reset bt (David Marlin) [RHEL-157827]
  - sfc: add transmit timestamping support (Izabela Bakollari) [RHEL-165819]
  - cpufreq: intel_pstate: Fix crash during turbo disable (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Rearrange variable declaration involving __free() (Steve Best) [RHEL-133082]
  - cpufreq: Pass policy pointer to ->update_limits() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Enable asym capacity only when CPU SMT is not possible (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Eliminate some code duplication (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Use mutex guard for driver locking (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Add Diamond Rapids OOB mode support (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Improve printing of debug messages (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: hybrid: Adjust energy model rules (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Add and use hybrid_has_l3() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Add and use hybrid_get_cpu_type() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Use likely() optimization in intel_pstate_sample() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Enable HWP without EPP if DEC is enabled (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Adjust frequency percentage computations (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Rearrange freq QoS updates using __free() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Remove EPB-related code (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Rearrange variable declaration involving __free() (Steve Best) [RHEL-133082]
  - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164429]
  - x86/resctrl: Fix memory bandwidth counter width for Hygon (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add missing resctrl initialization for Hygon (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Update documentation for telemetry events (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Move RMID initialization to first mount (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Compute number of RMIDs as minimum across resources (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Fix non-contiguous CBM check for Hygon (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Add CPU vendor detection for Hygon (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Define CPU vendor IDs as bits to match usage (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Fix a division by zero error on Hygon (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add energy/perf choices to rdt boot option (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Refactor mkdir_mondata_subdir() (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Read telemetry events (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Find and enable usable telemetry events (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Add architectural event pointer (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Discover hardware telemetry events (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Add and initialize a resource for package scope monitoring (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Add an architectural hook called for first mount (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Support binary fixed point event counters (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Handle events that can be read from any CPU (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Make event details accessible to functions when reading events (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Rename some L3 specific functions (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Split L3 dependent parts out of __mon_event_count() (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Clean up domain_remove_cpu_ctrl() (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Move L3 initialization into new helper function (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Improve domain type checking (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Update bit_usage to reflect io_alloc (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to modify io_alloc capacity bitmasks (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Modify struct rdt_parse_data to pass mode and CLOSID (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to display io_alloc CBMs (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add user interface to enable/disable io_alloc feature (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to display "io_alloc" support (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Implement "io_alloc" enable/disable handlers (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Detect io_alloc feature (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add SDCIAE feature in the command line options (Gavin Shan) [RHEL-163514]
  - x86/cpufeatures: Add support for L3 Smart Data Cache Injection Allocation Enforcement (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Consider sparse masks when initializing new group's allocation (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled (Gavin Shan) [RHEL-163514]
  - MAINTAINERS: resctrl: Add myself as reviewer (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Configure mbm_event mode if supported (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce the interface to switch between monitor modes (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce the interface to modify assignments in a group (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Auto assign counters on mkdir and clean up on group removal (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Provide interface to update the event configurations (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add event configuration directory under info/L3_MON/ (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Support counter read/reset with mbm_event assignment mode (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Pass struct rdtgroup instead of individual members (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add the functionality to unassign MBM events (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add the functionality to assign MBM events (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce event configuration field in struct mon_evt (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add data structures and definitions for ABMC assignment (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to display number of free MBM counters (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add resctrl file to display number of assignable counters (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce the interface to display monitoring modes (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add support to enable/disable AMD ABMC feature (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add ABMC feature in the command line options (Gavin Shan) [RHEL-163514]
  - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Prepare for more monitor events (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Remove the rdt_mon_features global variable (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Replace architecture event enabled checks (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Consolidate monitor event descriptions (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Optimize code in rdt_get_tree() (Gavin Shan) [RHEL-163514]
  - Documentation: Fix filesystems typos (Gavin Shan) [RHEL-163514]
  - ACPI: CPPC: add APIs and sysfs interface for perf_limited (Mark Langsdorf) [RHEL-143330]
  - cpufreq: cppc: Update MIN_PERF/MAX_PERF in target callbacks (Mark Langsdorf) [RHEL-143330]
  - cpufreq: CPPC: Update cached perf_ctrls on sysfs write (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Extend cppc_set_epp_perf() for FFH/SystemMemory (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Warn on missing mandatory DESIRED_PERF register (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Add cppc_get_perf() API to read performance controls (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Rename EPP constants for clarity (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Clean up cppc_perf_caps and cppc_perf_ctrls structs (Mark Langsdorf) [RHEL-143330]
  - cpufreq: CPPC: Add generic helpers for sysfs show/store (Mark Langsdorf) [RHEL-143330]
  - intel_idle: Add C-states validation (Steve Best) [RHEL-129779]
  - intel_idle: Add cmdline option to adjust C-states table (Steve Best) [RHEL-129779]
  - intel_idle: Initialize sysfs after cpuidle driver initialization (Steve Best) [RHEL-129779]
  - intel_idle: Remove the 'preferred_cstates' parameter (Steve Best) [RHEL-129779]
  - intel_idle: Remove unused driver version constant (Steve Best) [RHEL-129779]
  - intel_idle: Remove unnecessary address-of operators (Steve Best) [RHEL-129779]
  - rv: Fix handle_task_newtask prototype (Gabriele Monaco) [RHEL-116706]
  - redhat/configs: Enable additional RV monitors on debug kernels (Gabriele Monaco) [RHEL-116706]
  - redhat/configs: Enable sched and rtapp RV monitors (Gabriele Monaco) [RHEL-116706]
  - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Perform fast check switch only for online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Check _CPC validity for only the online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Detect preferred core availability on online CPUs (Mark Langsdorf) [RHEL-151651]
  - redhat/configs: automotive: enable SPI_OMAP24XX as a module (Jared Kangas) [RHEL-118418]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-226.el10]
changelog:
  - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172216]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172216] {CVE-2026-31431}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172216] {CVE-2026-23060}
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172216]
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172216] {CVE-2026-31677}
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172216] {CVE-2026-31431}
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172216]
  - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171460]
  - drm/i915/dmc: Fix an unlikely NULL pointer deference at probe (Desnes Nunes) [RHEL-161592]
  - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Herbert Xu) [RHEL-154016]
  - s390/mm: Add missing secure storage access fixups for donated memory (Mete Durlu) [RHEL-168792]
  - timers/migration: Exclude isolated cpus from hierarchy (CKI Backport Bot) [RHEL-68981]
  - cpumask: Add initialiser to use cleanup helpers (CKI Backport Bot) [RHEL-68981]
  - sched/isolation: Force housekeeping if isolcpus and nohz_full don't leave any (CKI Backport Bot) [RHEL-68981]
  - cgroup/cpuset: Fail if isolated and nohz_full don't leave any housekeeping (CKI Backport Bot) [RHEL-68981]
  - cgroup/cpuset: Rename update_unbound_workqueue_cpumask() to update_isolation_cpumasks() (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Use scoped_guard on available flag set/clear (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Add mask for CPUs available in the hierarchy (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Rename 'online' bit to 'available' (CKI Backport Bot) [RHEL-68981]
  - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-145403]
  - audit: Use kzalloc() instead of kmalloc()/memset() in audit_krule_to_data() (Ricardo Robaina) [RHEL-145403]
  - audit: fix comment misindentation in audit.h (Ricardo Robaina) [RHEL-145403]
  - audit: fix skb leak when audit rate limit is exceeded (Ricardo Robaina) [RHEL-145403]
  - audit: init ab->skb_list earlier in audit_buffer_alloc() (Ricardo Robaina) [RHEL-145403]
  - audit: add record for multiple object contexts (Ricardo Robaina) [RHEL-145403]
  - audit: add record for multiple task security contexts (Ricardo Robaina) [RHEL-145403]
  - lsm: security_lsmblob_to_secctx module selection (Ricardo Robaina) [RHEL-145403]
  - audit: create audit_stamp structure (Ricardo Robaina) [RHEL-145403]
  - audit: add a missing tab (Ricardo Robaina) [RHEL-145403]
  - audit: fix typo in auditfilter.c comment (Ricardo Robaina) [RHEL-145403]
  - audit: Replace deprecated strcpy() with strscpy() (Ricardo Robaina) [RHEL-145403]
  - audit: fix indentation in audit_log_exit() (Ricardo Robaina) [RHEL-145403]
  - audit: mark audit_log_vformat() with __printf() attribute (Ricardo Robaina) [RHEL-145403]
  - fs: Fix filename init after recent refactoring (Ricardo Robaina) [RHEL-145403]
  - netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error (Ricardo Robaina) [RHEL-145403]
  - fs: dedup handling of struct filename init and refcounts bumps (Ricardo Robaina) [RHEL-145403]
  - audit: Initialize lsmctx to avoid memory allocation error (Ricardo Robaina) [RHEL-145403]
  - net: corrections for security_secid_to_secctx returns (Ricardo Robaina) [RHEL-145403]
  - lsm: replace context+len with lsm_context (Ricardo Robaina) [RHEL-145403]
  - lsm: ensure the correct LSM context releaser (Ricardo Robaina) [RHEL-145403]
  - lsm: remove lsm_prop scaffolding (Ricardo Robaina) [RHEL-145403]
  - netlabel,smack: use lsm_prop for audit data (Ricardo Robaina) [RHEL-145403]
  - audit: change context data from secid to lsm_prop (Ricardo Robaina) [RHEL-145403]
  - lsm: create new security_cred_getlsmprop LSM hook (Ricardo Robaina) [RHEL-145403]
  - audit: use an lsm_prop in audit_names (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_inode_getsecid (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_current_getsecid (Ricardo Robaina) [RHEL-145403]
  - audit: update shutdown LSM data (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_ipc_getsecid (Ricardo Robaina) [RHEL-145403]
  - audit: maintain an lsm_prop in audit_context (Ricardo Robaina) [RHEL-145403]
  - lsm: add lsmprop_to_secctx hook (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_audit_rule_match (Ricardo Robaina) [RHEL-145403]
  - lsm: add the lsm_prop data structure (Ricardo Robaina) [RHEL-145403]
  - KVM: arm64: Account for RESx bits in __compute_fgt() (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Fix typos and stale comments in kvm_util (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Move page_align() to shared header (Sebastian Ott) [RHEL-157318]
  - KVM: riscv: selftests: Fix incorrect rounding in page_align() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Fix incorrect rounding in page_align() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Disable unused TTBR1_EL1 translations (Sebastian Ott) [RHEL-157318]
  - tools headers: Sync UAPI KVM headers with kernel sources (Sebastian Ott) [RHEL-157318]
  - Documentation: KVM: Update GICv3 docs for GICv5 hosts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Discard PC update state on vcpu reset (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Don't reprobe for ICH_VTR_EL2.TDS on CPU hotplug (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Correct test for ICH_HCR_EL2_TDIR cap for GICv5 hosts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert ICH_HCR_EL2_TDIR cap to EARLY_LOCAL_CPU_FEATURE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic: Pick EOIcount deactivations from AP-list tail (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove the redundant ISB in __kvm_at_s1e2() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix vma_shift staleness on nested hwpoison path (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Inject a SEA if failed to read the descriptor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Report addrsz fault at level 0 with a bad VTTBR.BADDR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Check S2 limits based on implemented PA size (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2 fault (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Eagerly init vgic dist/redist on vgic creation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Deduplicate ASID retrieval code (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Revert accidental drop of kvm_uninit_stage2_mmu() for non-NV VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix protected mode handling of pages larger than 4kB (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic: Handle const qualifier from gic_kvm_info allocation type (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove redundant kern_hyp_va() in unpin_host_sve_state() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix ID register initialization for non-protected pKVM guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Optimise away S1POE handling when not supported by host (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Hide S1POE from guests when not supported by the host (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add debugfs file dumping computed RESx values (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add sanitisation to SCTLR_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove all traces of HCR_EL2.MIOCNCE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove all traces of FEAT_TME (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify handling of full register invalid constraint (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Get rid of FIXED_VALUE altogether (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify handling of HCR_EL2.E2H RESx (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Move RESx into individual register descriptors (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add RES1_WHEN_E2Hx constraints as configuration flags (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add REQUIRES_E2H1 constraint as configuration flags (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify FIXED_VALUE handling (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert HCR_EL2.RW to AS_RES1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Correctly handle SCTLR_EL1 RES1 bits for unsupported features (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Allow RES1 bits to be inferred from configuration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inherit RESx bits from FGT register descriptors (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Extend unified RESx handling to runtime sanitisation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce data structure tracking both RES0 and RES1 bits (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce standalone FGU computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove duplicate configuration for SCTLR_EL1.{EE,E0E} (Sebastian Ott) [RHEL-157318]
  - arm64: Convert SCTLR_EL2 to sysreg infrastructure (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Avoid NV stage-2 code when NV is not supported (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use standard seq_file iterator for vgic-debug debugfs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Reimplement vgic-debug XArray iteration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use standard seq_file iterator for idregs debugfs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Set vgic_model before initing private IRQs (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Drop ICH_HFGRTR_EL2.ICC_HAPR_EL1 and make RES1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v3: Switch vGIC-v3 to use generated ICH_VMCR_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix various comments (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Add trap config for DBGWCR<15>_EL1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Enable GICv3 CPUIF trapping on GICv5 hosts if required (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify PAGE_S2_MEMATTR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Kill KVM_PGTABLE_S2_NOFWB (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Switch pKVM host S2 over to KVM_PGTABLE_S2_AS_S1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add KVM_PGTABLE_S2_AS_S1 flag (Sebastian Ott) [RHEL-157318]
  - arm64: Add MT_S2{,_FWB}_AS_S1 encodings (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use kvm_has_mte() in pKVM trap initialization (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inject UNDEF when accessing MTE sysregs with MTE disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Trap MTE access and discovery when MTE is disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove dead code resetting HCR_EL2 for pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Return correct RES0 bits for FGT registers (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Always populate FGT masks at boot time (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix error checking for FFA_VERSION (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Prevent host from managing timer offsets for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Check whether a VM IOCTL is allowed in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Track KVM IOCTLs and their associated KVM caps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Do not allow KVM_CAP_ARM_MTE for any guest in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Include VM type when checking VM capabilities in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce helper to calculate fault IPA offset (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix MTE flag initialization for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix Trace Buffer trap polarity for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix Trace Buffer trapping for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Add a test for FEAT_IDST (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Report optional ID register traps with a 0x18 syndrome (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Add a generic synchronous exception injection primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Force trap of GMID_EL1 when the guest doesn't have MTE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle CSSIDR2_EL1 and SMIDR_EL1 in a generic way (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle FEAT_IDST for sysregs without specific handlers (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add a generic synchronous exception injection primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add trap routing for GMID_EL1 (Sebastian Ott) [RHEL-157318]
  - arm64: Repaint ID_AA64MMFR2_EL1.IDS description (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Honor UX/PX attributes for EL2 S1 mappings (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert VTCR_EL2 to config-driven sanitisation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Account for RES1 bits in DECLARE_FEAT_MAP() and co (Sebastian Ott) [RHEL-157318]
  - arm64: Convert VTCR_EL2 to sysreg infratructure (Sebastian Ott) [RHEL-157318]
  - arm64: Convert ID_AA64MMFR0_EL1.TGRAN{4,16,64}_2 to UnsignedEnum (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix missing <asm/stackpage/nvhe.h> include (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Calculate hyp VA size only once (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Don't blindly set set PSTATE.PAN on guest exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Respect stage-2 write permssion when setting stage-1 AF (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove unused vcpu_{clear,set}_wfx_traps() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove unused parameter in synchronize_vcpu_pstate() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove extra argument for __pvkm_host_{share,unshare}_hyp() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inject UNDEF for a register trap without accessor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Copy FGT traps to unprotected pKVM VCPU on VCPU load (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix EL2 S1 XN handling for hVHE setups (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Check for vGICv3 when clearing TWI (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove ISB after writing FPEXC32_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Shuffle KVM_HOST_DATA_FLAG_* indices (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix comment in fpsimd_lazy_switch_to_host() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: at: Update AF on software walk only if VM has FEAT_HAFDBS (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: at: Use correct HA bit in TCR_EL2 when regime is EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Document KVM_PGTABLE_PROT_{UX,PX} (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix spelling mistake "Unexpeced" -> "Unexpected" (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add break to default case in kvm_pgtable_stage2_pte_prot() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add endian casting to kvm_swap_s[12]_desc() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix compilation when CONFIG_ARM64_USE_LSE_ATOMICS=n (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Add test for AT emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Expose hardware access flag management to NV guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Implement HW access flag management in stage-2 SW PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Implement HW access flag management in stage-1 SW PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Propagate PTW errors up to AT emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add helper for swapping guest descriptor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Use pgtable definitions in stage-2 walk (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle endianness in read helper for emulated PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Stop passing vCPU through void ptr in S2 PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Call helper for reading descriptors directly (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Advertise support for FEAT_XNX (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Teach ptdump about FEAT_XNX permissions (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Consider all 7 possible levels of cache (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Remove ARM64_FEATURE_FIELD_BITS and its last user (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add timer deactivation test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add Group-0 enable test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add asymmetric SPI deaectivation test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Perform EOImode==1 deactivation in ack order (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Remove LR-bound limitation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Exclude timer-controlled interrupts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Change configuration before enabling interrupt (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Fix GUEST_ASSERT_IAR_EMPTY() helper (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: gic_v3: Disable Group-0 interrupts by default (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: gic_v3: Add irq group setting helper (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Always trap GICV_DIR register (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Handle deactivation via GICV_DIR traps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Handle LR overflow when EOImode==0 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Force exit to sync ICH_HCR_EL2.En (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: nv: Plug L1 LR sync into deactivation primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: nv: Resync LRs/VMCR/HCR early for better MI emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Avoid broadcast kick on CPUs lacking TDIR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle in-LR deactivation when possible (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Add SPI tracking to handle asymmetric deactivation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Set ICH_HCR_EL2.TDIR when interrupts overflow LR capacity (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Add GICv2 SGI handling to deactivation primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle deactivation via ICV_DIR_EL1 traps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle LR overflow when EOImode==0 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use MI to detect groups being enabled/disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Move undeliverable interrupts to the end of ap_list (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Invert ap_list sorting to push active interrupts out (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Make vgic_target_oracle() globally available (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Turn kvm_vgic_vcpu_enable() into kvm_vgic_vcpu_reset() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Revamp vgic maintenance interrupt configuration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Eagerly save VMCR on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Compute vgic state irrespective of the number of interrupts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Extract LR computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Extract LR folding primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Decouple GICH_HCR programming from LRs being loaded (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Preserve EOIcount on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Extract LR computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Extract LR folding primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Decouple ICH_HCR_EL2 programming from LRs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Preserve EOIcount on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Drop LPI active state when folding LRs (Sebastian Ott) [RHEL-157318]
  - irqchip/gic: Add missing GICH_HCR control bits (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add LR overflow handling documentation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add tracking of vgic_irq being present in a LR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Repack struct vgic_irq fields (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Detect and work around the lack of ICV_DIR_EL1 trapping (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic-v3: Fix GICv3 trapping in protected mode (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Turn vgic-v3 errata traps into a patched-in constant (Sebastian Ott) [RHEL-157318]
  - irqchip/gic: Expose CPU interface VA to KVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add support for FEAT_XNX stage-2 permissions (Sebastian Ott) [RHEL-157318]
  - arm64: Detect FEAT_XNX (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Reschedule as needed when destroying the stage-2 page-tables (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Split kvm_pgtable_stage2_destroy() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Only drop references on empty tables in stage2_free_walker (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Assert GICR_TYPER.Processor_Number matches selftest CPU number (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: SYNC after guest ITS setup in vgic_lpi_stress (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use kvzalloc() for kvm struct allocation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Drop useless __GFP_HIGHMEM from kvm struct allocation (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Add ICH_VMCR_EL2 (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Move generation of RES0/RES1/UNKN to function (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Support feature-specific fields with 'Prefix' descriptor (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Fix checks for incomplete sysreg definitions (Sebastian Ott) [RHEL-157318]
  - Documentation: kvm: new UAPI for handling SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: selftests: Test for KVM_EXIT_ARM_SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: arm64: VM exit to userspace to handle SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: arm64: vgic-v3: Trap all if no in-kernel irqchip (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v3: Only set ICH_HCR traps for v2-on-v3 or v3 guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Enable nested for GICv5 host with FEAT_GCIE_LEGACY (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use ARM64_HAS_GICV5_LEGACY for GICv5 probing (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v5: Probe for GICv5 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v5: Support GICv3 compat (Sebastian Ott) [RHEL-157318]
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Ricardo Robaina) [RHEL-144438]
  - wifi: ath10k: fix station lookup failure during disconnect (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cw1200: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: correct use sequence of driver_data in skb->info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: pause TCM on fast resume (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: cancel mlo_scan_start_wk (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: correctly decode TTLM with default link map (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: ignore link disabled flag from userspace (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: apply advertised TTLM from association response (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: parse all TTLM entries (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't perform DA check on S1G beacon (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix wrong P2P device link id issue (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix dead lock while flushing management frames (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix scan state stuck in ABORTING after cancel_remain_on_channel (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: cancel scan only on active scan vdev (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: correctly check if CSA is active (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Fix bitrate calculation overflow for HE rates (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: don't force radio frequency check in freq_to_idx() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: collect station statistics earlier when disconnect (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: restore non-chanctx injection behaviour (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211_hwsim: disable BHs for hwsim_radio_lock (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't iterate not running interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: avoid kernel-infoleak from struct iw_point (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Remove blank line after mt792x firmware version dmesg (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: mt76: Strip whitespace from build ddate" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: do not use old MBSSID elements (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't WARN for connections on invalid channels (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: allow sharing identical chanctx for S1G interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: include s1g_primary_2mhz when comparing chandefs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: include s1g_primary_2mhz when sending chandef (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: correct FILS status codes (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Strip whitespace from build ddate (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: skip ieee80211_iter_keys() on scanning link remove (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: skip deflink accounting for offchannel links (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: move mt7996_update_beacons under mt76 mutex (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7925: ensure the 6GHz A-MPDU density cap from the hardware. (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix EMI rings for RRO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix MLO set key and group key issues (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix MLD group index assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: use correct link_id when filling TXD and TXP (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: set link_valid field when initializing wcid (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix teardown command for an MLD peer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: support fixed rate for link station (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix implicit beamforming support for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: no need to wait ACK event for SDO command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix max nss value when getting rx chainmask (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7925: cqm rssi low/high event notify (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: replace use of system_wq with system_percpu_wq (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: adjust BSS conf pointer handling (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: mt76: mt792x: improve monitor interface handling" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mmio_*_copy fix byte order and alignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Use of_reserved_mem_region_to_resource() for "memory-region" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix typos in comments (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Add the capability to set TX token start ID (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Add mt76_dev pointer in mt76_queue struct. (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Move Q_READ/Q_WRITE definitions in dma.h (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Remove useless check in mt7996_msdu_page_get_from_cache() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: relicense to BSD-3-Clause-Clear (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: fix license/copyright of util.h (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: use GFP_DMA32 for page_pool buffer allocation (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7915: add bf backoff limit table support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Fix DTS power-limits on little endian systems (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: connac: Replace memcpy + hard-coded size with strscpy (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Remove unnecessary link_id checks in mt7996_tx (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: stop radar detection in cfg80211_leave() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: use cfg80211_leave() in iftype change (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix channel switching code (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Enable 40 MHz width by default (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix RX channel width reported by RTL8192FU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix the 40 MHz subchannel for RTL8192EU, RTL8723BU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Make RTL8192CU, RTL8723AU TX with 40 MHz width (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852a: correct field mask of reset DAC/ADC FIFO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: refactor CMAC packet handlers (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: refactor CMAC crypt functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: utilize the newly defined CMAC constants (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add generic MMIE struct defines (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix CMAC functions not handling errors (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: replace use of system_unbound_wq with system_dfl_wq (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add support for 6GHz AP role not relevant AP type (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add default ID 0bda:b831 for RTL8831BU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: use separated function to set RX filter (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: correct user macid mask of RX info for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: update format of addr cam H2C command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: add addr cam H2C command v1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fill addr cam H2C command by struct (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: align RA H2C format v1 for RTL8922A (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: print band and port where beacon update on (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: ignore DCFO if not defined in chip_info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: consider type 15 in BB gain table (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: update wcpu_on to download firmware for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: remove undefined bit B_BE_PPDU_MAC_INFO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: calling BB pre-init by chips with/without BB MCU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: separate pre-init code before downloading firmware (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: part size to download firmware by header info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: flush TX queue before deleting key (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: rtw8852bu: Added dev id for ASUS AX57 NANO USB Wifi dongle (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: configure RX antenna if chips can support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: do RF calibration once setting channel when running pure monitor mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: consider data rate/bandwidth/GI for injected packets (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: fix out-of-bounds access in rtw89_phy_read_txpwr_limit() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: add compensation of thermal value from efuse calibration (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: debug: add parser to diagnose along DIAG_MAC fw element (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: parse firmware element of DIAG_MAC (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: pci: add to read PCI configuration space from common code (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: make monitor link info check more specific (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: track MU-MIMO configuration on disabled interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: Add fallback mechanism for INDOOR_SP connection (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: clean up duplicate ap_power handling (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: use a C99 initializer in wiphy_register (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: rtl8188ee: correct allstasleep in P2P PS H2C command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Enable the new rtw89_8852au module (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852au.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852a: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852a_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852a_dle_mem_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Use the correct power sequences for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: fix doc of struct key_params (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove unnecessary vlan NULL check (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: pass frame type to element parsing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove "disabling VHT" message (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add and use chanctx usage iteration (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: simplify ieee80211_recalc_chanctx_min_def() API (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove chanctx to link back-references (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: make link iteration safe for 'break' (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split NAN definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split P2P definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split S1G definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split EHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split HE definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split VHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split HT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split mesh definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix timeout error during beacon stats retrieval (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Make firmware stats reset caller-driven (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: process TX wait skbs for USB via C2H handler (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: provide TX reports for management frames (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: handle IEEE80211_TX_CTL_REQ_TX_STATUS frames for USB (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: anchor TX URBs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fill TX descriptor of FWCMD in shortcut (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: implement C2H TX report handler (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: refine rtw89_core_tx_wait_complete() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: use ieee80211_free_txskb() where appropriate (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: fix leak in rtw89_usb_write_port() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: Add BUFFALO WI-U3-866DHP to the USB ID list (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: 8822c: use fixed rate and bandwidth to reply CSI packets (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Enable the new rtw89_8852cu module (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852cu.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852c_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852c_dle_mem_usb{2,3} (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: Fix rtw8852c_pwr_{on,off}_func() for USB (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Fix rtw89_mac_dmac_func_pre_en_ax() for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_post_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_pre_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Move bulk out map to new struct rtw89_usb_info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw89_core_get_ch_dma_v2() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8832cu: turn off TX partial mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: use = {} to initialize bmi_target_info instead of memset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: use = {} to initialize pm_qos_request instead of memset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: unassign arvif on scan vdev create failure (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: enforce vdev limit in ath12k_mac_vdev_create() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Set EHT fixed rates for associated STAs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add EHT rates to ath12k_mac_op_set_bitrate_mask() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add EHT fixed GI/LTF (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add EHT MCS/NSS rates to Peer Assoc (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add EHT rate handling to existing set rate functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: generalize GI and LTF fixed rate functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix error handling in creating hardware group (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix reusing m3 memory (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: Allow HT Action frame processing on 6 GHz when HE is supported (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rt2x00: add nvmem eeprom support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add RX flag to report radiotap VHT information (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: check for NULL pointer after kmalloc (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: cfg: fix a few device names (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: Move EMLSR prints to IWL_DL_EHT (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: disable EHT if the device doesn't allow it (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: use FW_CHECK on bad ROC notification (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm/mld: report non-HT frames as 20 MHz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fix build when mvm/mld not configured (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: check the validity of noa_len (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: stop checking the firmware's error pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: be more chatty when we fail to find a wifi7 device (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fw: remove support of several iwl_lari_config_change_cmd versions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: include raw PHY notification in radiotap (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: update to new sniffer API (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: set wiphy::iftype_ext_capab dynamically (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: support get/set_antenna (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: cleanup unsupported phy command versions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fix remaining kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: tests: check listed PCI IDs have configs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: cfg: add new device names (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: iwlmld is always used for wifi7 devices (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: move rate conversions to utils.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: reschedule check_tpt_wk also not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: remove support from of alive notif version 6 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: align the name of iwl_alive_ntf_v6 to the convention (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: improve scan time on 6 GHz band (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: restart hardware to recover firmware if power-save becomes abnormal (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: fix ADC oscillation in 160MHz affecting RX performance (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: regd: apply ACPI policy even if country code is programmed (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: support EHT rate pattern via bitrate mask (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mlo: handle needed H2C when link switching is requested by stack (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: use skb_dequeue() for queued ROC packets to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: splice C2H events queue to local to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add parameters to radio-specific debugfs directories (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add debugfs support for multi-radio wiphy (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: default S1G chandef width to 1MHz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: get probe response chan via ieee80211_get_channel_khz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: reset CRC valid after CSA (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211_hwsim: advertise puncturing feature support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: validate radio frequency range for monitor mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rt2x00: check retval for of_get_mac_address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Assert base_lock is held before allocating REO update element (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add support for BSS color change (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: Correctly use "ab" macro parameter (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: advertise NL80211_FEATURE_TX_POWER_INSERTION (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: add support for Tx Power insertion in RRM action frame (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: wrap ath11k_mac_op_get_txpower() with lock-aware internal helper (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: relocate some Tx power related functions in mac.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: fix peer HE MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: Support for FTM TLV test commands (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Use correct power off sequence for RTL8192CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Dump the efuse right after reading it (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Report the signal strength only if it's known (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Replace hardcoded strings with helper functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add MODULE_FIRMWARE() entries (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix TX and RX MCS rate configurations in HE mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix NSS value update in ext_rx_stats (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Defer vdev bring-up until CSA finalize to avoid stale beacon (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: track dropped MSDU buffer type packets in REO exception ring (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix MSDU buffer types handling in RX error path (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: move recovery check logic into a new work (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - selftests: net: unify the Makefile formats (Hangbin Liu) [RHEL-155384]
  - selftests: net: sort configs (Hangbin Liu) [RHEL-155384]
  - lib/test_vmalloc.c: minor fixes to test_vmalloc.c (Audra Mitchell) [RHEL-151432]
  - kselftest: mm: fix typos in test_vmalloc.sh (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc: remove xfail condition check (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc: add no_block_alloc_test case (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: introduce xfail for failing tests (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: restrict default test mask to avoid test warnings (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: use late_initcall() if built-in for init ordering (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: allow built-in execution (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: replace RWSEM to SRCU for setup (Audra Mitchell) [RHEL-151432]
  - bus: mhi: host: pci_generic: Add Foxconn T99W760 modem (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: ep: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: ep: Make mhi_ep_bus_type const (Jose Ignacio Tornos Martinez) [RHEL-151312]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-227.el10]
changelog:
  - PCI/PTM: Drop pci_enable_ptm() granularity parameter (CKI Backport Bot) [RHEL-172222]
  - x86/mce: Remove the redundant mce_hygon_feature_init() (Steve Best) [RHEL-130026]
  - x86/mce: Ensure user polling settings are honored when restarting timer (Steve Best) [RHEL-130026]
  - x86/mce/amd: Fix threshold limit reset (Steve Best) [RHEL-130026]
  - x86/mce/apei: Handle variable SMCA BERT record size (Steve Best) [RHEL-130026]
  - x86/mce/mcelog: Use xchg() to get and clear the flags (Steve Best) [RHEL-130026]
  - x86/mce/inject: Remove call to mce_notify_irq() (Steve Best) [RHEL-130026]
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Steve Best) [RHEL-130026]
  - x86/mce/threshold: Remove the redundant this_cpu_dec_return() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Filter bogus hardware errors on Zen3 clients (Steve Best) [RHEL-130026]
  - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs (Steve Best) [RHEL-130026]
  - x86/mce: Handle AMD threshold interrupt storms (Steve Best) [RHEL-130026]
  - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Add support for physical address valid bit (Steve Best) [RHEL-130026]
  - EDAC/mce_amd: Add support for FRU text in MCA (Steve Best) [RHEL-130026]
  - x86/mce: Save and use APEI corrected threshold limit (Steve Best) [RHEL-130026]
  - x86/mce/amd: Define threshold restart function for banks (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove redundant reset_block() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Support SMCA Corrected Error Interrupt (Steve Best) [RHEL-130026]
  - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD DFR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD THR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/mce: Add a clear_bank() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' (Steve Best) [RHEL-130026]
  - x86/mce: Move machine_check_poll() status checks to helper functions (Steve Best) [RHEL-130026]
  - x86/mce: Separate global and per-CPU quirks (Steve Best) [RHEL-130026]
  - x86/mce: Convert family/model mixed checks to VFM-based checks (Steve Best) [RHEL-130026]
  - x86/mce: Do 'UNKNOWN' vendor check early (Steve Best) [RHEL-130026]
  - x86/mce: Break up __mcheck_cpu_apply_quirks() (Steve Best) [RHEL-130026]
  - x86/mce: Make four functions return bool (Steve Best) [RHEL-130026]
  - x86/mce: Add wrapper for struct mce to export vendor specific info (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only SMCA init (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only init (Steve Best) [RHEL-130026]
  - x86/mce: Set CR4.MCE last during init (Steve Best) [RHEL-130026]
  - x86/mce: Remove __mcheck_cpu_init_early() (Steve Best) [RHEL-130026]
  - x86/mce: Cleanup bank processing on init (Steve Best) [RHEL-130026]
  - x86/mce/amd: Put list_head in threshold_bank (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove smca_banks_map (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Rename threshold restart function (Steve Best) [RHEL-130026]
  - x86/msr: Convert __rdmsr() uses to native_rdmsrq() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Convert __wrmsr() uses to native_wrmsr{,q}() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Add the native_rdmsrq() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'native_wrmsrl()' to 'native_wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' (Steve Best) [RHEL-130026]
  - x86/msr: Add explicit includes of <asm/msr.h> [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_on_cpu()' to 'rdmsrq_on_cpu()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl()' to 'wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl()' to 'rdmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on 'u32' MSR indices in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on u64 in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Harmonize the prototype and definition of do_trace_rdpmc() (Steve Best) [RHEL-130026]
  - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161187]
  - io_uring/kbuf: limit legacy provided buffer lists to USHRT_MAX (Jeff Moyer) [RHEL-161187]
  - redhat/configs: Enable FFA for TPM on AArch64 (Marcin Juszkiewicz) [RHEL-167985]
  - platform/x86/intel/pmc: Remove double empty line (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Enable substate residencies for multiple PMCs (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Move LPM mode attributes to PMC (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Change LPM mode fields to u8 (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Wildcat Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Add Wildcat Lake support to Intel PMC SSRAM Telemetry (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Remove redundant has_die_c6 variable (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Rename PMC index variable to pmc_idx (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add DMU GUID to Arrow Lake U/H (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add support for multiple DMU GUIDs (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Replace dev_warn() with dev_dbg() (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Panther Lake (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Show substate requirement for S0ix blockers (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Improve function to show substate header (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Move telemetry endpoint register handling (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Lunar Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: use kcalloc() instead of kzalloc() (Steve Best) [RHEL-129781]
  - redhat: configs: Enable CONFIG_SENSORS_SPD5118 (Jennifer Berringer) [RHEL-168906]
  - i3c: master: dw-i3c: Balance PM runtime usage count on probe failure (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Detect and support 16-bit register addressing (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Support 16-bit addressing for NVMEM accesses (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Name chips taking the specification literally (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Split into common and I2C specific code (Jennifer Berringer) [RHEL-168906]
  - hwmon: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Disable runtime PM on Agilex5 to avoid bus hang on IBI (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add shutdown support to dw_i3c_master driver (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add quirk to address OD/PP timing issue on AMD platform (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add support for AMDI0015 ACPI ID (Jennifer Berringer) [RHEL-168906]
  - i3c: simplify combined i3c/i2c dependencies (Jennifer Berringer) [RHEL-168906]
  - i3c: Move device name assignment after i3c_bus_init (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Simplify with scoped for each OF child loop (Jennifer Berringer) [RHEL-168906]
  - i3c: fix refcount inconsistency in i3c_master_register (Jennifer Berringer) [RHEL-168906]
  - device property: Add scoped fwnode child node iterators (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Drop duplicate check before calling OF APIs (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Improve initialization of numbered I2C adapters (Jennifer Berringer) [RHEL-168906]
  - thermal: intel: int340x: soc_slider: Set offset only for balanced mode (Steve Best) [RHEL-130009]
  - thermal: int340x: Fix sysfs group leak on DLVR registration failure (Steve Best) [RHEL-130009]
  - drivers: thermal: intel: tcc_cooling: Drop redundant local variable (Steve Best) [RHEL-130009]
  - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature (Steve Best) [RHEL-130009]
  - thermal: intel: Use sysfs_emit() in a sysfs show function (Steve Best) [RHEL-130009]
  - thermal: intel: fix typo "nagative" in comment for cpu argument (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use sysfs_emit{_at}() in sysfs show functions (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Enable slow workload type hints (Steve Best) [RHEL-130009]
  - thermal: intel: intel_pch_thermal: Drop explicit driver data clearing (Steve Best) [RHEL-130009]
  - thermal: intel: intel_tcc_cooling: Add CPU models in the support list (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Wildcat Lake (Steve Best) [RHEL-130009]
  - ACPI: DPTF: Support Nova Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add DLVR support for Nova Lake (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Add Nova Lake processor thermal device (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use symbolic constant for UUID comparison (Steve Best) [RHEL-130009]
  - thermal: intel: Select INT340X_THERMAL from INTEL_SOC_DTS_THERMAL (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Power Slider: Validate slider_balance range (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter to change slider offset (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter for balanced Slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Panther Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add support for power slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Remove redundant acpi_has_method() call (Steve Best) [RHEL-130009]
  - tools/power/x86/intel-speed-select: v1.25 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Allow non root users (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Optimize suspend/resume callbacks (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Check for admin capability for write commands (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Store and restore all domains data (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Add missing write block check (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Use pkg-config for libnl-3.0 detection (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: v1.24 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Reset isst_turbo_freq_info for invalid buckets (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Check feature status (Krzysztof Pawlinski) [RHEL-133093]
  - rh_message.h: update support status of mlx5 devices (Scott Weaver) [RHEL-142605 RHEL-142608 RHEL-166116]
  - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults (Charles Mirabile) [RHEL-154155]
  - x86/resctrl: Fix SNC detection (Phil Auld) [RHEL-147186]
  - x86/topo: Fix SNC topology mess (Phil Auld) [RHEL-147186]
  - x86/topo: Replace x86_has_numa_in_package (Phil Auld) [RHEL-147186]
  - x86/topo: Add topology_num_nodes_per_package() (Phil Auld) [RHEL-147186]
  - x86/numa: Store extra copy of numa_nodes_parsed (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Phil Auld) [RHEL-145610]
  - sched/core: Fix wakeup_preempt's next_class tracking (Phil Auld) [RHEL-147186]
  - sched/fair: Only set slice protection at pick time (Phil Auld) [RHEL-147186]
  - sched/eevdf: Update se->vprot in reweight_entity() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix lag clamp (Phil Auld) [RHEL-147186]
  - sched/fair: Fix zero_vruntime tracking (Phil Auld) [RHEL-147186]
  - sched/clock: Avoid false sharing for sched_clock_irqtime (Phil Auld) [RHEL-147186]
  - sched/rt: Skip currently executing CPU in rto_next_cpu() (Phil Auld) [RHEL-147186]
  - sched/cpufreq: Use %pe format for PTR_ERR() printing (Phil Auld) [RHEL-147186]
  - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups (Phil Auld) [RHEL-147186]
  - sched/debug: Fix dl_server (re)start conditions (Phil Auld) [RHEL-147186]
  - sched/debug: Add support to change sched_ext server params (Phil Auld) [RHEL-147186]
  - sched_ext: Add a DL server for sched_ext tasks (Phil Auld) [RHEL-147186]
  - sched/debug: Stop and start server based on if it was active (Phil Auld) [RHEL-147186]
  - sched/deadline: Clear the defer params (Phil Auld) [RHEL-147186]
  - sched/debug: Fix updating of ppos on server write ops (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix 'stuck' dl_server (Phil Auld) [RHEL-147186]
  - sched/fair: Revert force wakeup preemption (Phil Auld) [RHEL-147186]
  - sched/fair: Disable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched: Update rq->avg_idle when a task is moved to an idle CPU (Phil Auld) [RHEL-147186]
  - sched/debug: Convert copy_from_user() + kstrtouint() to kstrtouint_from_user() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix pelt clock sync when entering idle (Phil Auld) [RHEL-147186]
  - sched/fair: Remove nohz.nr_cpus and use weight of cpumask instead (Phil Auld) [RHEL-147186]
  - sched/fair: Change likelyhood of nohz.nr_cpus (Phil Auld) [RHEL-147186]
  - sched/fair: Fix math notation errors in avg_vruntime comment (Phil Auld) [RHEL-147186]
  - sched/fair: Move checking for nohz cpus after time check (Phil Auld) [RHEL-147186]
  - sched: Audit MOVE vs balance_callbacks (Phil Auld) [RHEL-147186]
  - sched: Deadline has dynamic priority (Phil Auld) [RHEL-147186]
  - sched/deadline: Use ENQUEUE_MOVE to allow priority change (Phil Auld) [RHEL-147186]
  - sched/deadline: Ensure get_prio_dl() is up-to-date (Phil Auld) [RHEL-147186]
  - sched/deadline: Avoid double update_rq_clock() (Phil Auld) [RHEL-147186]
  - sched: Fold rq-pin swizzle into __balance_callbacks() (Phil Auld) [RHEL-147186]
  - sched: Provide idle_rq() helper (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix server stopping with runnable tasks (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix potential race in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/deadline: Remove unnecessary comment in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Drop useless cpumask_empty() in find_energy_efficient_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Simplify task_numa_find_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Use cpumask_weight_and() in sched_balance_find_dst_group() (Phil Auld) [RHEL-147186]
  - sched: Reorder some fields in struct rq (Phil Auld) [RHEL-147186]
  - sched/fair: Fix sched_avg fold (Phil Auld) [RHEL-147186]
  - sched: Fix faulty assertion in sched_change_end() (Phil Auld) [RHEL-147186]
  - sched/core: Rework sched_class::wakeup_preempt() and rq_modified_*() (Phil Auld) [RHEL-147186]
  - sched_ext: Rename pnt_seq to kick_sync (Phil Auld) [RHEL-147186]
  - sched_ext: Don't kick CPUs running higher classes (Phil Auld) [RHEL-147186]
  - sched_ext: Fix SCX_KICK_WAIT to work reliably (Phil Auld) [RHEL-147186]
  - sched_ext: Allow forcibly picking an scx task (Phil Auld) [RHEL-147186]
  - sched_ext: fix flag check for deferred callbacks (Phil Auld) [RHEL-147186]
  - sched/ext: Fold balance_scx() into pick_task_scx() (Phil Auld) [RHEL-147186]
  - sched_ext: defer queue_balance_callback() until after ops.dispatch (Phil Auld) [RHEL-147186]
  - sched_ext: Move internal type and accessor definitions to ext_internal.h (Phil Auld) [RHEL-147186]
  - sched_ext: Make explicit scx_task_iter_relock() calls unnecessary (Phil Auld) [RHEL-147186]
  - sched/fair: Join two #ifdef CONFIG_FAIR_GROUP_SCHED blocks (Phil Auld) [RHEL-147186]
  - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics (Phil Auld) [RHEL-147186]
  - sched/fair: Sort out 'blocked_load*' namespace noise (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight (Phil Auld) [RHEL-147186]
  - sched/fair: Clean up comments in 'struct cfs_rq' (Phil Auld) [RHEL-147186]
  - sched/fair: Fold the sched_avg update (Phil Auld) [RHEL-147186]
  - <linux/compiler_types.h>: Add the __signed_scalar_typeof() helper (Phil Auld) [RHEL-147186]
  - sched/fair: Remove superfluous rcu_read_lock() (Phil Auld) [RHEL-147186]
  - sched/fair: Avoid rq->lock bouncing in sched_balance_newidle() (Phil Auld) [RHEL-147186]
  - sched/fair: Switch to rcu_dereference_all() (Phil Auld) [RHEL-147186]
  - sched/headers: Rename rcu_dereference_check_sched_domain() => rcu_dereference_sched_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Limit hrtick work (Phil Auld) [RHEL-147186]
  - sched/core: Add assertions to QUEUE_CLASS (Phil Auld) [RHEL-147186]
  - sched/core: Fix psi_dequeue() for Proxy Execution (Phil Auld) [RHEL-147186]
  - sched/headers: Remove whitespace noise from kernel/sched/sched.h (Phil Auld) [RHEL-147186]
  - sched/rt: Remove a preempt-disable section in rt_mutex_setprio() (Phil Auld) [RHEL-147186]
  - sched/deadline: Walk up cpuset hierarchy to decide root domain when hot-unplug (Phil Auld) [RHEL-147186]
  - cgroup/cpuset: Introduce cpuset_cpus_allowed_locked() (Phil Auld) [RHEL-147186]
  - sched/fair: Enable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched/fair: Reimplement NEXT_BUDDY to align with EEVDF goals (Phil Auld) [RHEL-147186]
  - sched/deadline: Use cpumask_weight_and() in dl_bw_cpus (Phil Auld) [RHEL-147186]
  - sched/deadline: Minor cleanup in select_task_rq_dl() (Phil Auld) [RHEL-147186]
  - sched/deadline: Document dl_server (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server stop condition (Phil Auld) [RHEL-147186]
  - sched/eevdf: Fix min_vruntime vs avg_vruntime (Phil Auld) [RHEL-147186]
  - sched: Fix proxy/current (push,pull)ability (Phil Auld) [RHEL-147186]
  - sched: Start blocked_on chain processing in find_proxy_task() (Phil Auld) [RHEL-147186]
  - sched: Add an initial sketch of the find_proxy_task() function (Phil Auld) [RHEL-147186]
  - sched: Fix runtime accounting w/ split exec & sched contexts (Phil Auld) [RHEL-147186]
  - sched: Move update_curr_task logic into update_curr_se (Phil Auld) [RHEL-147186]
  - configs: Make sure PROXY_EXEC is off (Phil Auld) [RHEL-147186]
  - sched: Add CONFIG_SCHED_PROXY_EXEC & boot argument to enable/disable (Phil Auld) [RHEL-147186]
  - locking/mutex: Rework task_struct::blocked_on (Phil Auld) [RHEL-147186]
  - sched/core: Remove double update_rq_clock() in __set_cpus_allowed_ptr_locked() (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-147186]
  - sched/core: Optimize core cookie matching check (Phil Auld) [RHEL-147186]
  - sched/core: Add comment explaining force-idle vruntime snapshots (Phil Auld) [RHEL-147186]
  - sched/proxy: Yield the donor task (Phil Auld) [RHEL-147186]
  - sched: Fix the do_set_cpus_allowed() locking fix (Phil Auld) [RHEL-147186]
  - sched: Remove never used code in mm_cid_get() (Phil Auld) [RHEL-147186]
  - sched: Detect per-class runqueue changes (Phil Auld) [RHEL-147186]
  - sched: Add support to pick functions to take rf (Phil Auld) [RHEL-147186]
  - sched: Match __task_rq_{,un}lock() (Phil Auld) [RHEL-147186]
  - sched: Mandate shared flags for sched_change (Phil Auld) [RHEL-147186]
  - sched: Cleanup the sched_change NOCLOCK usage (Phil Auld) [RHEL-147186]
  - sched: Make __do_set_cpus_allowed() use the sched_change pattern (Phil Auld) [RHEL-147186]
  - sched: Rename do_set_cpus_allowed() (Phil Auld) [RHEL-147186]
  - sched: Add locking comments to sched_class methods (Phil Auld) [RHEL-147186]
  - sched: Move sched_class::prio_changed() into the change pattern (Phil Auld) [RHEL-147186]
  - sched: Fix do_set_cpus_allowed() locking (Phil Auld) [RHEL-147186]
  - sched: Fix migrate_disable_switch() locking (Phil Auld) [RHEL-147186]
  - sched/deadline: Prepare for switched_from() change (Phil Auld) [RHEL-147186]
  - sched: Cleanup sched_delayed handling for class switches (Phil Auld) [RHEL-147186]
  - sched: Fold sched_class::switch{ing,ed}_{to,from}() into the change pattern (Phil Auld) [RHEL-147186]
  - sched/fair: Only update stats for allowed CPUs when looking for dst group (Phil Auld) [RHEL-147186]
  - sched: Employ sched_change guards (Phil Auld) [RHEL-147186]
  - cleanup: Fix documentation build error for ACQUIRE updates (Phil Auld) [RHEL-147186]
  - tools/testing: add linux/args.h header and fix radix, VMA tests (Phil Auld) [RHEL-147186]
  - cleanup: Introduce ACQUIRE() and ACQUIRE_ERR() for conditional locks (Phil Auld) [RHEL-147186]
  - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Phil Auld) [RHEL-147186]
  - sched: Re-arrange the {EN,DE}QUEUE flags (Phil Auld) [RHEL-147186]
  - sched/topology,x86: Fix build warning (Phil Auld) [RHEL-147186]
  - sched/topology: Fix sched domain build error for GNR, CWF in SNC-3 mode (Phil Auld) [RHEL-147186]
  - sched/fair: Forfeit vruntime on yield (Phil Auld) [RHEL-147186]
  - sched/deadline: only set free_cpus for online runqueues (Phil Auld) [RHEL-147186]
  - sched: Create architecture specific sched domain distances (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix race in push_dl_task() (Phil Auld) [RHEL-147186]
  - vfio/nvgrace-gpu: register device memory for poison handling (Aristeu Rozanski) [RHEL-73608]
  - mm: add stubs for PFNMAP memory failure registration functions (Aristeu Rozanski) [RHEL-73608]
  - mm: fixup pfnmap memory failure handling to use pgoff (Aristeu Rozanski) [RHEL-73608]
  - mm: handle poisoning of pfn without struct pages (Aristeu Rozanski) [RHEL-73608]
  - mm: change ghes code to allow poison of non-struct pfn (Aristeu Rozanski) [RHEL-73608]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-228.el10]
changelog:
  - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - s390/barrier: Make array_index_mask_nospec() __always_inline (Ramesh Chhetri) [RHEL-174629]
  - s390/entry: Scrub r12 register on kernel entry (Ramesh Chhetri) [RHEL-174629]
  - bitmap: introduce bitmap_weighted_xor() (Michal Schmidt) [RHEL-174745]
  - bitmap: add test_zero_nbits() (Michal Schmidt) [RHEL-174745]
  - bitmap: exclude nbits == 0 cases from bitmap test (Michal Schmidt) [RHEL-174745]
  - bitmap: test bitmap_weight() for more (Michal Schmidt) [RHEL-174745]
  - bitmap: add bitmap_weight_from() (Michal Schmidt) [RHEL-174745]
  - bitmap: align test_bitmap output (Michal Schmidt) [RHEL-174745]
  - bitmap: switch test to scnprintf("%*pbl") (Michal Schmidt) [RHEL-174745]
  - bitmap: Add test for out-of-boundary modifications for scatter & gather (Michal Schmidt) [RHEL-174745]
  - cpumask: Introduce cpumask_weighted_or() (Michal Schmidt) [RHEL-174745]
  - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Michal Schmidt) [RHEL-174745]
  - bitmap: remove _check_eq_u32_array (Michal Schmidt) [RHEL-174745]
  - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-172305]
  - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-172305]
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172748] {CVE-2026-43051}
  - redhat/configs: Enable MPAM options (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Make resctrl_mon_ctx_waiters static (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix the check for no monitor components found (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix MBA CDP alloc_capable handling on unmount (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add initial MPAM documentation (Gavin Shan) [RHEL-164228]
  - arm_mpam: Quirk CMN-650's CSU NRDY behaviour (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-6 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-4 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-1 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add quirk framework (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Call resctrl_init() on platforms that can support resctrl (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Select ARCH_HAS_CPU_RESCTRL (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add empty definitions for assorted resctrl functions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Update the rmid reallocation limit (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_rmid_read() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Allow resctrl to allocate monitors (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for csu counters (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add monitor initialisation and domain boilerplate (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add kunit test for control format conversions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for 'MB' resource (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Wait for cacheinfo to be ready (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add rmid index helpers (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Convert to/from MPAMs fixed-point formats (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Hide CDP emulation behind CONFIG_EXPERT (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add CDP emulation (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add plumbing against arm64 task and cpu hooks (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement helpers to update configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_get_config() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement resctrl_arch_reset_all_ctrls() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Pick the caches we will use as resctrl resources (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add boilerplate cpuhp and domain allocation (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Force guest EL1 to use user-space's partid configuration (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add helpers to change a task or cpu's MPAM PARTID/PMG values (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Initialise and context switch the MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Advertise the CPUs MPAM limits to the driver (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Drop the CONFIG_EXPERT restriction (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Re-initialise MPAM regs when CPU comes online (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Context switch the MPAM registers (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Make MPAMSM_EL1 accesses UNDEF (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Preserve host MPAM configuration when changing traps (Gavin Shan) [RHEL-164228]
  - arm64/sysreg: Add MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm_mpam: Reset when feature configuration bit unset (Gavin Shan) [RHEL-164228]
  - arm_mpam: Ensure in_reset_state is false after applying configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: Force __iomem casts (Gavin Shan) [RHEL-100932]
  - arm_mpam: Disable preemption when making accesses to fake MSC in kunit test (Gavin Shan) [RHEL-100932]
  - arm_mpam: Fix null pointer dereference when restoring bandwidth counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use non-atomic bitops when modifying feature bitmap (Gavin Shan) [RHEL-100932]
  - arm_mpam: Remove duplicate linux/srcu.h header (Gavin Shan) [RHEL-100932]
  - arm_mpam: Stop using uninitialized variables in __ris_msmon_read() (Gavin Shan) [RHEL-100932]
  - MAINTAINERS: new entry for MPAM Driver (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit tests for props_mismatch() (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit test for bitmap reset (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helper to reset saved mbwu state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use long MBWU counters if supported (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe for long/lwd mbwu counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Consider overflow in bandwidth counter state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Track bandwidth counter state for power management (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add mpam_msmon_read() to read monitor value (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers to allocate monitors (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe and reset the rest of the features (Gavin Shan) [RHEL-100932]
  - arm_mpam: Allow configuration to be applied and restored during cpu online (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use a static key to indicate when mpam is enabled (Gavin Shan) [RHEL-100932]
  - arm_mpam: Register and enable IRQs (Gavin Shan) [RHEL-100932]
  - arm_mpam: Extend reset logic to allow devices to be reset any time (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add a helper to touch an MSC from any CPU (Gavin Shan) [RHEL-100932]
  - arm_mpam: Reset MSC controls from cpuhp callbacks (Gavin Shan) [RHEL-100932]
  - arm_mpam: Merge supported features during mpam_enable() into mpam_class (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe the hardware features resctrl supports (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers for managing the locking around the mon_sel registers (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe hardware to find the supported partid/pmg values (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add cpuhp callbacks to probe MSC hardware (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add MPAM MSC register layout definitions (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add the class and component structures for firmware described ris (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate (Gavin Shan) [RHEL-100932]
  - ACPI / MPAM: Parse the MPAM table (Gavin Shan) [RHEL-100932]
  - ACPI: Define acpi_put_table cleanup handler and acpi_get_table_pointer() helper (Gavin Shan) [RHEL-100932]
  - platform: Define platform_device_put cleanup handler (Gavin Shan) [RHEL-100932]
  - arm64: kconfig: Add Kconfig entry for MPAM (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Find cache level by cache-id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add acpi_pptt_cache_v1_full to use pptt cache as one structure (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Stop acpi_count_levels() expecting callers to clear levels (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (Gavin Shan) [RHEL-100932]
  - s390/pfault: Fix virtual vs physical address confusion (Mircea Dragan) [RHEL-170908]
  - lib/vsprintf: Add specifier for printing struct timespec64 (CKI Backport Bot) [RHEL-172105]
  - RDMA/rw: Fix MR pool exhaustion in bvec RDMA READ path (Kamal Heib) [RHEL-163515]
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Import DMA-BUF module in uverbs_std_types_dmabuf file (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check id_priv->restricted_node_type in cma_listen_on_dev() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: select CONFIG_DMA_SHARED_BUFFER (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add DMABUF object type and operations (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Support external FD uobjects (Kamal Heib) [RHEL-163515]
  - RDMA/core: introduce rdma_restrict_node_type() (Kamal Heib) [RHEL-163515]
  - RDMA/umem: don't abuse current->group_leader (Kamal Heib) [RHEL-163515]
  - IB/core: Extend rate limit support for RC QPs (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Kamal Heib) [RHEL-163515]
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Kamal Heib) [RHEL-163515]
  - RDMA/core: add MR support for bvec-based RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: use IOVA-based DMA mapping for bvec RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: add bio_vec based RDMA read/write API (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Kamal Heib) [RHEL-163515]
  - RDMA/iwcm: Fix workqueue list corruption by removing work_list (Kamal Heib) [RHEL-163515]
  - RDMA/core: Avoid exporting module local functions and remove not-used ones (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Remove redundant DMABUF ops check (Kamal Heib) [RHEL-163515]
  - IB/core: Add query_port_speed verb (Kamal Heib) [RHEL-163515]
  - IB/core: Refactor rate_show to use ib_port_attr_to_rate() (Kamal Heib) [RHEL-163515]
  - IB/core: Add helper to convert port attributes to data rate (Kamal Heib) [RHEL-163515]
  - IB/core: Add async event on device speed change (Kamal Heib) [RHEL-163515]
  - IB/cache: update gid cache on client reregister event (Kamal Heib) [RHEL-163515]
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Fix rdma_ucm_query_ib_service_resp struct padding (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Fix leaking the multicast GID table reference (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Kamal Heib) [RHEL-163515]
  - RDMA/core: Reduce cond_resched() frequency in __ib_umem_release (Kamal Heib) [RHEL-163515]
  - RDMA/core: Add new IB rate for XDR (8x) support (Kamal Heib) [RHEL-163515]
  - RDMA/core: Prevent soft lockup during large user memory region cleanup (Kamal Heib) [RHEL-163515]
  - RDMA/restrack: Fix typos in the comments (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Correct typedef and bad line warnings (Kamal Heib) [RHEL-163515]
  - IB/isert: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/iser: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/rdmavt: rdmavt_qp.h: clean up kernel-doc comments (Kamal Heib) [RHEL-163515]
  - RDMA/core: WQ_PERCPU added to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Base cm_id destruction timeout on CMA values (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: fix some kernel-doc warnings (Kamal Heib) [RHEL-163515]
  - RDMA/core: let rdma_connect_locked() call lockdep_assert_held(&id_priv->handler_mutex) (Kamal Heib) [RHEL-163515]
  - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-163515]
  - IB/ipoib: Ignore L3 master device (Kamal Heib) [RHEL-163515]
  - RDMA/core: Use route entry flag to decide on loopback traffic (Kamal Heib) [RHEL-163515]
  - RDMA/core: Squash a single user static function (Kamal Heib) [RHEL-163515]
  - RDMA/core: fix "truely"->"truly" (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support write an event into a CM (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support query resolved service records (Kamal Heib) [RHEL-163515]
  - RDMA/cma: Support IB service record resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Support IB service records resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Add RMPP support for SA queries (Kamal Heib) [RHEL-163515]
  - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-165161]
  - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-171979]
  - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-159000]
  - iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement (Jerry Snitselaar) [RHEL-160189]
  - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (Jerry Snitselaar) [RHEL-160189]
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169737] {CVE-2025-68183}
  - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-147247]
  - x86/platform/uv: Handle deconfigured sockets (Krzysztof Pawlinski) [RHEL-158967]
  - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-164699]
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-164699]
  - net/ipv6: Remove HBH helpers (Michal Schmidt) [RHEL-156515]
  - net: mana: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - gve: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - bnxt_en: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - ice: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx4: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx5e: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on RX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on TX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Introduce payload_len helpers (Michal Schmidt) [RHEL-156515]
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-161120] {CVE-2025-68741}
  - selftests/bpf: Add test to verify the fix of kprobe_write_ctx abuse (Ines Qian) [RHEL-78291]
  - bpf: Fix abuse of kprobe_write_ctx via freplace (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix kprobe multi stacktrace_ips test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace ips test for kprobe_multi/kretprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove hexdump dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove xxd util dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Skip livepatch test when prerequisites are missing (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for livepatch + bpf trampoline (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for exclusive maps (Ines Qian) [RHEL-78291]
  - bpf: Require frozen map for calculating map hash (Ines Qian) [RHEL-78291]
  - bpf: Limit bpf program signature size (Ines Qian) [RHEL-78291]
  - bpf: Fix exclusive map memory leak (Ines Qian) [RHEL-78291]
  - selftests/bpf: Allow selftests to build with older xxd (Ines Qian) [RHEL-78291]
  - bpftool: Allow bpftool to build with openssl < 3 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Update test_tag to use sha256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test widen_imprecise_scalars() with different stack depth (Ines Qian) [RHEL-78291]
  - bpf: account for current allocated stack depth in widen_imprecise_scalars() (Ines Qian) [RHEL-78291]
  - bpf: add _impl suffix for bpf_stream_vprintk() kfunc (Ines Qian) [RHEL-78291]
  - bpf:add _impl suffix for bpf_task_work_schedule* kfuncs (Ines Qian) [RHEL-78291]
  - bpf: Conditionally include dynptr copy kfuncs (Ines Qian) [RHEL-78291]
  - libbpf: Fix powerpc's stack register definition in bpf_tracing.h (Ines Qian) [RHEL-78291]
  - bpf: Sync pending IRQ work before freeing ring buffer (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix redefinition of 'off' as different kind of symbol (Ines Qian) [RHEL-78291]
  - bpf: Fix memory leak in __lookup_instance error path (Ines Qian) [RHEL-78291]
  - selftests: arg_parsing: Ensure data is flushed to disk before reading. (Ines Qian) [RHEL-78291]
  - selftests/bpf: make arg_parsing.c more robust to crashes (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for unpinning htab with internal timer struct (Ines Qian) [RHEL-78291]
  - bpf: Avoid RCU context warning when unpinning htab with internal structs (Ines Qian) [RHEL-78291]
  - libbpf: Fix undefined behavior in {get,put}_unaligned_be32() (Ines Qian) [RHEL-78291]
  - bpf: Finish constification of 1st parameter of bpf_d_path() (Ines Qian) [RHEL-78291]
  - libbpf: Fix missing #pragma in libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for rejection of ALU ops with negative offsets (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - bpf: Reject negative offsets for ALU ops (Ines Qian) [RHEL-78291]
  - libbpf: remove linux/unaligned.h dependency for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_sha256() implementation into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_errstr() into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: remove unused libbpf_strerror_r and STRERR_BUFSIZE (Ines Qian) [RHEL-78291]
  - libbpf: make libbpf_errno.c into more generic libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix realloc size in bpf_get_addrs (Ines Qian) [RHEL-78291]
  - libbpf: Replace AF_ALG with open coded SHA-256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stress test for rqspinlock in NMI (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test case for different expected_attach_type (Ines Qian) [RHEL-78291]
  - bpf: Enforce expected_attach_type for tailcall compatibility (Ines Qian) [RHEL-78291]
  - bpftool: Remove duplicate string.h header (Ines Qian) [RHEL-78291]
  - bpf: Remove duplicate crypto/sha2.h header (Ines Qian) [RHEL-78291]
  - libbpf: Fix error when st-prefix_ops and ops from differ btf (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace map lookup_and_delete_elem test case (Ines Qian) [RHEL-78291]
  - selftests/bpf: Refactor stacktrace_map case with skeleton (Ines Qian) [RHEL-78291]
  - bpf: Add lookup_and_delete_elem for BPF_MAP_STACK_TRACE (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix flaky bpf_cookie selftest (Ines Qian) [RHEL-78291]
  - selftests/bpf: Task_work selftest cleanup fixes (Ines Qian) [RHEL-78291]
  - bpf: Mark kfuncs as __noclone (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe multi write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context ip register change test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context registers changes test (Ines Qian) [RHEL-78291]
  - uprobe: Do not emulate/sstep original instruction when ip is changed (Ines Qian) [RHEL-78291]
  - bpf: Allow uprobe program to change context registers (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for program signing options (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add union argument tests using fexit programs (Ines Qian) [RHEL-78291]
  - bpf: Allow union argument in trampoline based programs (Ines Qian) [RHEL-78291]
  - selftests: bpf: Add tests for signed loads from arena (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - bpf, x86: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - selftests/bpf: add bpf task work stress tests (Ines Qian) [RHEL-78291]
  - selftests/bpf: BPF task work scheduling tests (Ines Qian) [RHEL-78291]
  - bpf: task work scheduling kfuncs (Ines Qian) [RHEL-78291]
  - bpf: extract map key pointer calculation (Ines Qian) [RHEL-78291]
  - bpf: bpf task work plumbing (Ines Qian) [RHEL-78291]
  - bpf: verifier: permit non-zero returns from async callbacks (Ines Qian) [RHEL-78291]
  - bpf: htab: extract helper for freeing special structs (Ines Qian) [RHEL-78291]
  - bpf: extract generic helper from process_timer_func() (Ines Qian) [RHEL-78291]
  - bpf: refactor special field-type detection (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable signature verification for some lskel tests (Ines Qian) [RHEL-78291]
  - bpftool: Add support for signing BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Embed and verify the metadata hash in the loader (Ines Qian) [RHEL-78291]
  - libbpf: Update light skeleton for signing (Ines Qian) [RHEL-78291]
  - bpf: Implement signature verification for BPF programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix selftest verifier_arena_large failure (Ines Qian) [RHEL-78291]
  - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 (Ines Qian) [RHEL-78291]
  - bpftool: Fix UAF in get_delegate_value (Ines Qian) [RHEL-78291]
  - bpftool: Add HELP_SPEC_OPTIONS in token.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: test cases for callchain sensitive live stack tracking (Ines Qian) [RHEL-78291]
  - selftests/bpf: __not_msg() tag for test_loader framework (Ines Qian) [RHEL-78291]
  - bpf: table based bpf_insn_successors() (Ines Qian) [RHEL-78291]
  - bpf: disable and remove registers chain based liveness (Ines Qian) [RHEL-78291]
  - bpf: signal error if old liveness is more conservative than new (Ines Qian) [RHEL-78291]
  - bpf: enable callchain sensitive stack liveness tracking (Ines Qian) [RHEL-78291]
  - bpf: callchain sensitive stack liveness tracking using CFG (Ines Qian) [RHEL-78291]
  - bpf: compute instructions postorder per subprogram (Ines Qian) [RHEL-78291]
  - bpf: declare a few utility functions as internal api (Ines Qian) [RHEL-78291]
  - bpf: remove redundant REG_LIVE_READ check in stacksafe() (Ines Qian) [RHEL-78291]
  - bpf: use compute_live_registers() info in clean_func_state (Ines Qian) [RHEL-78291]
  - bpf: bpf_verifier_state->cleaned flag instead of REG_LIVE_DONE (Ines Qian) [RHEL-78291]
  - bpf: Move the signature kfuncs to helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Return hashes of maps in BPF_OBJ_GET_INFO_BY_FD (Ines Qian) [RHEL-78291]
  - libbpf: Support exclusive map creation (Ines Qian) [RHEL-78291]
  - libbpf: Implement SHA256 internal helper (Ines Qian) [RHEL-78291]
  - bpf: Implement exclusive map creation (Ines Qian) [RHEL-78291]
  - bpf: Update the bpf_prog_calc_tag to use SHA256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf: Enforce RCU protection for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() (Ines Qian) [RHEL-78291]
  - bpf...d_path(): constify path argument (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a test for bpf_cgroup_from_id lookup in non-root cgns (Ines Qian) [RHEL-78291]
  - bpf: Do not limit bpf_cgroup_from_id to current's namespace (Ines Qian) [RHEL-78291]
  - bpftool: Search for tracefs at /sys/kernel/tracing first (Ines Qian) [RHEL-78291]
  - selftests/bpf: More open-coded gettid syscall cleanup (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for arena fault reporting (Ines Qian) [RHEL-78291]
  - selftests: bpf: use __stderr in stream error tests (Ines Qian) [RHEL-78291]
  - selftests: bpf: introduce __stderr and __stdout (Ines Qian) [RHEL-78291]
  - bpf: Report arena faults to BPF stderr (Ines Qian) [RHEL-78291]
  - bpf: core: introduce main_prog_aux for stream access (Ines Qian) [RHEL-78291]
  - bpf: arm64: simplify exception table handling (Ines Qian) [RHEL-78291]
  - bpf: WQ_PERCPU added to alloc_workqueue users (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_unbound_wq with system_dfl_wq (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_wq with system_percpu_wq (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix the issue where the error code is 0 (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_ATOMIC instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Introduce bpf_jit_emit_atomic_ops() to emit atomic instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement bpf_addr_space_cast instruction (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_MEM32 pseudo instructions (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add BPF program dump in veristat (Ines Qian) [RHEL-78291]
  - libbpf: Remove unused args in parse_usdt_note (Ines Qian) [RHEL-78291]
  - bpf, arm64: Remove duplicated bpf_flush_icache() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test kfunc bpf_strcasecmp (Ines Qian) [RHEL-78291]
  - bpf: add bpf_strcasecmp kfunc (Ines Qian) [RHEL-78291]
  - selftests/bpf: add benchmark testing for kprobe-multi-all (Ines Qian) [RHEL-78291]
  - selftests/bpf: skip recursive functions for kprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: move get_ksyms and get_addrs to trace_helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpftool: Add CET-aware symbol matching for x86_64 architectures (Ines Qian) [RHEL-78291]
  - bpftool: Refactor kernel config reading into common helper (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add LPM trie microbenchmarks (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto tests for arm64 (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enrich subtest_basic_usdt case in selftests to cover SIB handling logic (Ines Qian) [RHEL-78291]
  - libbpf: Fix USDT SIB argument handling causing unrecognized register error (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix typos and grammar in test sources (Ines Qian) [RHEL-78291]
  - bpf: Add selftest to check the verifier's abstract multiplication (Ines Qian) [RHEL-78291]
  - bpf: Improve the general precision of tnum_mul (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove may_goto tests from DENYLIST.s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto verifier tests on s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add __arch_s390x macro (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a missing newline to the "bad arch spec" message (Ines Qian) [RHEL-78291]
  - s390/bpf: Add s390 JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove entries from config.{arch} already present in config (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for trampoline.c (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_prog_run_array_cg() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_task_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_iter_run_prog() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_inode_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_cgrp_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: Use sha1() instead of sha1_transform() in bpf_prog_calc_tag() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Tests for is_scalar_branch_taken tnum logic (Ines Qian) [RHEL-78291]
  - bpf: Use tnums for JEQ/JNE is_branch_taken logic (Ines Qian) [RHEL-78291]
  - selftests/bpf: Use vmlinux.h for BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Add documentation to version and error API functions (Ines Qian) [RHEL-78291]
  - s390/bpf: Use direct calls and jumps where possible (Ines Qian) [RHEL-78291]
  - bpftool: Add kernel.kptr_restrict hint for no instructions (Ines Qian) [RHEL-78291]
  - bpf: Add a verbose message when the BTF limit is reached (Ines Qian) [RHEL-78291]
  - bpf: Replace get_next_cpu() with cpumask_next_wrap() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for DEVMAP reuse (Ines Qian) [RHEL-78291]
  - libbpf: Fix reuse of DEVMAP (Ines Qian) [RHEL-78291]
  - bpf: Remove migrate_disable in kprobe_multi_link_prog_run (Ines Qian) [RHEL-78291]
  - selftests/bpf: Copy test_kmods when installing selftest (Ines Qian) [RHEL-78291]
  - bpf: Don't use %pK through printk (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpf: Remove redundant __GFP_NOWARN (Ines Qian) [RHEL-78291]
  - bpf: Standardize function declaration style (Ines Qian) [RHEL-78291]
  - bpf: removed unused 'env' parameter from is_reg64 and insn_has_def32 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test multi_st_ops and calling kfuncs from different programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add multi_st_ops that supports multiple instances (Ines Qian) [RHEL-78291]
  - bpf: Allow struct_ops to get map id by kdata (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for token argument (Ines Qian) [RHEL-78291]
  - bpftool: Add bpftool-token manpage (Ines Qian) [RHEL-78291]
  - bpftool: Add bpf_token show (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test concurrent task local data key creation (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test basic task local data operations (Ines Qian) [RHEL-78291]
  - selftests/bpf: Introduce task local data (Ines Qian) [RHEL-78291]
  - bpf: Allow syscall bpf programs to call non-recur helpers (Ines Qian) [RHEL-78291]
  - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (Charles Haithcock) [RHEL-154387]


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80610


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 5:5.1.1-1
changelog:
  - podman-5.1.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.1.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-138726


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-168121, RHEL-167887


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-168121, RHEL-167887


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-2
changelog:
  - kvm-e1000e-Prevent-crash-from-legacy-interrupt-firing-af.patch [RHEL-112882]
  - Resolves: RHEL-112882
    ([DEV Task]: Assertion `core->delayed_causes == 0' failed with e1000e NIC)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-3
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-119368]
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-116443]
  - kvm-target-i386-add-compatibility-property-for-arch_capa.patch [RHEL-120253]
  - kvm-target-i386-add-compatibility-property-for-pdcm-feat.patch [RHEL-120253]
  - Resolves: RHEL-119368
    ([rhel10] Backport "arm/kvm: report registers we failed to set")
  - Resolves: RHEL-116443
    (qemu crash after hot-unplug disk from the multifunction enabled bus,crash point PCIDevice *vf = dev->exp.sriov_pf.vf[i])
  - Resolves: RHEL-120253
    (Backport fixes for PDCM and ARCH_CAPABILITIES migration incompatibility)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-4
changelog:
  - kvm-qapi-machine-s390x-add-QAPI-event-SCLP_CPI_INFO_AVAI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-tests-functional-add-tests-for-SCLP-event-CPI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-redhat-Add-new-rhel9.8.0-and-rhel10.2.0-machine-type.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-vfio-rename-field-to-num_initial_regions.patch [RHEL-118810]
  - kvm-vfio-only-check-region-info-cache-for-initial-region.patch [RHEL-118810]
  - kvm-arm-create-new-rhel-10.2-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-arm-create-new-rhel-9.8-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-10.2-specific-pc-q35-machine-typ.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-9.8-specific-pc-q35-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-rh-enable-CONFIG_USB_STORAGE_BOT.patch [RHEL-101929]
  - Resolves: RHEL-104009
    ([IBM 10.2 FEAT] KVM: Enhance machine type definition to include CPI and PCI passthru capabilities (qemu))
  - Resolves: RHEL-105823
    (Add new -rhel10.2.0 machine type to qemu-kvm [s390x])
  - Resolves: RHEL-73008
    ([IBM 10.2 FEAT] KVM: Implement Control Program Identification (qemu))
  - Resolves: RHEL-118810
    ([RHEL 10.2] Windows 11 VM fails to boot up with ramfb='on' with QEMU 10.1)
  - Resolves: RHEL-105826
    (Add new -rhel10.2.0 machine type to qemu-kvm [aarch64])
  - Resolves: RHEL-105828
    (Add new -rhel10.2.0 machine type to qemu-kvm [x86_64])
  - Resolves: RHEL-101929
    (enable 'usb-bot' device for proper support of USB CD-ROM drives via libvirt  )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-5
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120116]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120116]
  - kvm-vfio-Disable-VFIO-migration-with-MultiFD-support.patch [RHEL-126573]
  - kvm-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-from-10..patch [RHEL-67323]
  - kvm-hw-arm-smmu-common-Check-SMMU-has-PCIe-Root-Complex-.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Re-arrange-SMMUv3-IORT-build.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Update-IORT-for-multiple-smmu.patch [RHEL-73800]
  - kvm-hw-arm-virt-Factor-out-common-SMMUV3-dt-bindings-cod.patch [RHEL-73800]
  - kvm-hw-arm-virt-Add-an-SMMU_IO_LEN-macro.patch [RHEL-73800]
  - kvm-hw-pci-Introduce-pci_setup_iommu_per_bus-for-per-bus.patch [RHEL-73800]
  - kvm-hw-arm-virt-Allow-user-creatable-SMMUv3-dev-instanti.patch [RHEL-73800]
  - kvm-qemu-options.hx-Document-the-arm-smmuv3-device.patch [RHEL-73800]
  - kvm-bios-tables-test-Allow-for-smmuv3-test-data.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Add-tests-for-legacy-smmuv3-a.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Update-tables-for-smmuv3-test.patch [RHEL-73800]
  - kvm-qtest-Do-not-run-bios-tables-test-on-aarch64.patch []
  - Resolves: RHEL-120116
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-10.2])
  - Resolves: RHEL-126573
    (VFIO migration using multifd should be disabled by default)
  - Resolves: RHEL-67323
    ([aarch64] Support ACPI based PCI hotplug on ARM)
  - Resolves: RHEL-73800
    (NVIDIA:Grace-Hopper:Backport support for user-creatable nested SMMUv3 - RHEL 10.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-6
changelog:
  - kvm-ram-block-attributes-fix-interaction-with-hugetlb-me.patch [RHEL-126708]
  - kvm-ram-block-attributes-Unify-the-retrieval-of-the-bloc.patch [RHEL-126708]
  - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-128085]
  - kvm-Fix-the-typo-of-vfio-pci-device-s-enable-migration-o.patch [RHEL-130704]
  - Resolves: RHEL-126708
    ([RHEL 10]snp guest fail to boot with hugepage)
  - Resolves: RHEL-128085
    (VM crashes during boot when virtio device is attached through vfio_ccw)
  - Resolves: RHEL-130704
    ([rhel10] Fix the typo under vfio-pci device's enable-migration option )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-7
changelog:
  - kvm-pcie_sriov-Fix-broken-MMIO-accesses-from-SR-IOV-VFs.patch [RHEL-120115]
  - kvm-arm-fix-oob-access-in-compat-handling.patch [RHEL-130478]
  - Resolves: RHEL-120115
    (The vf nic created using the IGB emulated nic can not obtain ip address )
  - Resolves: RHEL-130478
    (Migration from RHEL 10.2 to RHEL 10.1 with virt-rhel10.0.0 machine type fails on Grace)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-8
changelog:
  - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540]
  - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543]
  - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212]
  - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212]
  - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212]
  - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212]
  - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212]
  - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212]
  - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212]
  - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212]
  - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212]
  - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212]
  - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212]
  - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212]
  - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212]
  - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212]
  - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212]
  - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212]
  - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212]
  - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212]
  - Resolves: RHEL-129540
    (Assertion failure on drain with iothread and I/O load)
  - Resolves: RHEL-121543
    (The VM hit io error when do S3-PR integration on the pass-through  failover multipath device)
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-9
changelog:
  - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212]
  - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003]
  - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003]
  - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003]
  - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003]
  - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853]
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)
  - Resolves: RHEL-110003
    (Expose block limits of block nodes in QMP and qemu-img)
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-10
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142]
  - Resolves: RHEL-108142
    (QEMU crashes when stopping source VM during live migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-11
changelog:
  - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-126707]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028]
  - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853]
  - Resolves: RHEL-126707
    ([qemu, rhel-10] increase default TSEG size)
  - Resolves: RHEL-139028
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2])
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-12
changelog:
  - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118]
  - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118]
  - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118]
  - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118]
  - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118]
  - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785]
  - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785]
  - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785]
  - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785]
  - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785]
  - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785]
  - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785]
  - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785]
  - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-net-implement-tunnel-probing.patch [RHEL-143785]
  - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785]
  - Resolves: RHEL-79118
    ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10])
  - Resolves: RHEL-143785
    (backport support for GSO over UDP tunnel offload)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425]
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749]
  - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584]
  - Resolves: RHEL-147425
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-132749
    (Migrate SCSI PR state and preempt reservation upon live migration)
  - Resolves: RHEL-134989
    (Hotplugged interface device can not be shown in the guest)
  - Resolves: RHEL-146584
    ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-14
changelog:
  - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
  - Resolves: RHEL-153058
    (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
  - Resolves: RHEL-144004
    ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-15
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
  - Resolves: RHEL-155601
    (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-16
changelog:
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
  - Resolves: RHEL-158224
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-17
changelog:
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-114231]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-114231]
  - Resolves: RHEL-114231
    (Add stats-intervals support to --blockdev)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-18
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-158212]
  - kvm-hw-tpm-Factor-tpm_ppi_enabled-out.patch [RHEL-112608]
  - kvm-hw-tpm-Add-TPMIfClass-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Remove-CRBState-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Propagate-ppi_enabled-to-tpm_tis_reset-and-re.patch [RHEL-112608]
  - kvm-hw-tpm-Simplify-tpm_ppi_enabled.patch [RHEL-112608]
  - kvm-docs-specs-tpm-document-PPI-support-on-ARM64-virt.patch [RHEL-112608]
  - kvm-hw-acpi-tpm-parameterize-PPI-base-address-in-tpm_bui.patch [RHEL-112608]
  - kvm-hw-tpm-add-PPI-support-to-tpm-tis-device-for-ARM64-v.patch [RHEL-112608]
  - Resolves: RHEL-158212
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.3])
  - Resolves: RHEL-112608
    ([ARM64] Windows 11 VM should install without TPM Bypass)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-2
changelog:
  - Rebase to 8.2604.0
    Resolves: RHEL-140910
  - Drop ossl-free-cert.patch (upstream)
  - Drop gtls-unused-certificates.patch (upstream)
  - Add SAN:IP validation support
    Resolves: RHEL-150376
  - Add TlsRevocationCheck support
    Resolves: RHEL-151324
  - Fix omelasticsearch IPv6 handling
    Resolves: RHEL-164768
  - Fix imfile not releasing deleted file FDs in inotify mode
    Resolves: RHEL-149118


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100438)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744)
  - zipl: makedumpfile is required for ngdump support (RHEL-114661)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109214)
  - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100438)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829)
  - Secure Execution: Add tool to verify host-key documents (RHEL-136795)
  - Resolves: RHEL-100438 RHEL-71829 RHEL-136795


author: Dan Horák <dhorak@redhat.com> - 2:2.41.0-1
changelog:
  - rebased to 2.41.0 (RHEL-136097)
  - hsci: Automatically set appropriate MTU for HSCI (RHEL-153550)
  - Resolves: RHEL-136097 RHEL-153550


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-36
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-113741
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-114454
  - Add support for Image Mode
    Resolves: RHEL-114454


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.36-1
changelog:
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code
  - browser: Always show "Report Bug" button


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-1
changelog:
  - Migrate from libxml2 to xml.etree.ElementTree
  - Handle ImportError when setroubleshoot.browser is not available
  - Add support for multiple commands in fix_cmd (RHEL-155209)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.22.2-2
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.22.2
  - re-add test file installation to fix tier0 tests
  - Resolves: RHEL-153734


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - new upstream release
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-2
changelog:
  - use %configure RPM macro instead of bare ./configure to inject
    RPM hardening flags (stack protector, FORTIFY_SOURCE)
  - use %make_build and %make_install RPM macros
  - Resolves: RHEL-152227


author: Kalev Lember <klember@redhat.com> - 45.0-2
changelog:
  - Package review fixes (rhbz#2241553)
  - Add SourceLicense tag to distinguish between the license of the app
    itself and its crate deps
  - Slightly change virtual provides for bundled aperture crate to better
    match other rust packages


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-9
changelog:
  - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-10
changelog:
  - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-12
changelog:
  - Resolves: RHEL-160670 - squid: Squid: Denial of Service via heap
    Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  - Resolves: RHEL-160671 - squid: Squid: Denial of Service via crafted
    ICP traffic (CVE-2026-32748)


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0
  - Drop upstreamed patches


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Make queue_track the default backend
  - Remove LTO build flags
  - Remove the -m64 build flag
  Resolves: RHEL-105604 RHEL-114506


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Alejandro López <allopez@redhat.com> - 1.9.17-3.p2
changelog:
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-4.p2
changelog:
  - Bump release number
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-22
changelog:
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
  - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
  - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
  - hwdb: update rules (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - Add Razer Cobra mouse to hwdb (RHEL-72702)
  - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
  - hwdb: sort SDR devices by vendor name (RHEL-72702)
  - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
  - hwdb: run "update-hwdb" (RHEL-72702)
  - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
  - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
  - hwdb: add Airspy devices (RHEL-72702)
  - hwdb: add more devices (RHEL-72702)
  - hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
  - hwdb: add missing Ettus Research B200 rule (RHEL-72702)
  - hwdb: add LimeSDR XTRX devices (RHEL-72702)
  - hwdb: add HydraSDR RFOne (RHEL-72702)
  - hwdb: add SDRplay devices (RHEL-72702)
  - hwdb: update (RHEL-72702)
  - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
  - Add Nulea M501 trackball to hwdb (RHEL-72702)
  - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
  - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
  - remove bonus line (RHEL-72702)
  - hwdb: drop trailing whitespace (RHEL-72702)
  - remove Nulea M501 usb entry from hwdb (RHEL-72702)
  - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702)
  - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702)
  - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702)
  - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702)
  - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702)
  - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702)
  - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702)
  - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702)
  - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702)
  - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702)
  - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702)
  - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702)
  - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702)
  - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702)
  - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702)
  - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702)
  - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702)
  - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702)
  - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702)
  - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702)
  - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702)
  - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702)
  - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702)
  - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702)
  - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard   device as set 1 (appears as raw set 2) or as set 2 (appears as   translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for   posterity. (RHEL-72702)
  - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702)
  - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702)
  - hwdb: keyboard: uppercase apple id (RHEL-72702)
  - integritysetup: Add support for hmac-sha512 (RHEL-27852)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852)
  - core: increment start limit counter only when we can start the unit (RHEL-115032)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032)
  - test: extend start limit interval (RHEL-115032)
  - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029)
  - man: fix typo (RHEL-143029)
  - test: fix test with -Dnetworkd=false (RHEL-143029)
  - ci: run apt-get update before running mkosi (RHEL-115001)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-23
changelog:
  - test-journal-dump: dump the headers of journal files (RHEL-106795)
  - journal: store counts, not byte sizes, in table size constants (RHEL-106795)
  - journal: treble field hash table size (RHEL-106795)
  - nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
  - user-classification: add new "foreign" UID range (RHEL-143036)
  - userdb: synthesize stub user records for the foreign UID (RHEL-143036)
  - dissect: add new --shift command (RHEL-143036)
  - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
  - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
  - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
  - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
  - sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
  - user-record: add helper for dispatching a disposition mask (RHEL-143036)
  - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036)
  - user-record: add some helpers for working with UserDBMatch (RHEL-143036)
  - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
  - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
  - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
  - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
  - update TODO (RHEL-143036)
  - JSON User/Group records: Add properties for UUIDs (RHEL-143036)
  - userdb: add support for printing the UUID from user and group records (RHEL-143036)
  - userdb: add support for looking up users or groups by uuid. (RHEL-143036)
  - userdbctl: add --uuid filtering option (RHEL-143036)
  - userdbctl: add missing --uuid= to --help text (RHEL-143036)
  - userdb: fix typo (RHEL-143036)
  - man/userdbctl: fixup version info (RHEL-143036)
  - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
  - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
  - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
  - logind: support deserializing session leader through pidfdid (RHEL-53112)
  - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
  - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
  - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219)
  - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-24
changelog:
  - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-155454)
  - ci: add bpftool workaround to codeql job too (RHEL-155454)
  - ci: fix workaround about bpftool for codeql (RHEL-155454)
  - ci: add bpftool workaround to coverity too (RHEL-155454)
  - Revert "man: mention RHEL documentation in systemctl's man page" (RHEL-155805)
  - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-155396)
  - cgroup: port some code over to path_startswith_full() (RHEL-155396)
  - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-155396)
  - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-155396)
  - core/cgroup: avoid one unnecessary strjoina() (RHEL-155396)
  - core: validate input cgroup path more prudently (RHEL-155396)
  - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-158303)
  - nspawn: normalize pivot_root paths (RHEL-158303)
  - udev: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-158354)
  - udev: ensure tag parsing stays within bounds (RHEL-158354)
  - udev: fix review mixup (RHEL-158354)
  - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev-builtin-net-id: print cescaped bad attributes (RHEL-158354)
  - core: only activate transaction that contain useful jobs (RHEL-143728)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-168098)
  - string-util: introduce strprepend() helper (RHEL-143028)
  - missing: add quotactl_fd() wrapper (RHEL-143028)
  - homed: always use quotactl_fd() if its available (RHEL-143028)
  - pid1: add GracefulOptions= setting to .mount units (RHEL-143028)
  - pid1: enable usrquota support on /dev/shm (RHEL-143028)
  - units: enable usrquota support on /tmp/ (RHEL-143028)
  - nspawn: enable usrquota support on /tmp/ and /dev/shm/ (RHEL-143028)
  - nspawn: downgrade log message about usrquota to debug (RHEL-143028)
  - mount-setup: drop outdated comment (RHEL-143028)
  - mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too (RHEL-143028)
  - devnum-util: add macros to safely convert dev_t to pointers and back (RHEL-143028)
  - user-record: add fields for setting limits on /tmp/ and /dev/shm/ (RHEL-143028)
  - user-runtime-dir: some smaller modernizations/refactorings (RHEL-143028)
  - user-runtime-dir: enforce /tmp/ and /dev/shm/ quota (RHEL-143028)
  - homectl: add support for configuring tmpfs limits (RHEL-143028)
  - test: add test case for tmpfs quota logic + PAMName= ask-password logic (RHEL-143028)
  - update TODO (RHEL-143028)
  - core/dbus-service: fix alignment (RHEL-143028)
  - core/mount: filter out "fail" option as well (RHEL-143028)
  - core/mount: check parameters_fragment first in mount_enter_(re)mounting() (RHEL-143028)
  - core/mount: report accurate can_start and can_reload (RHEL-143028)
  - core/mount: trivial coding style cleanups (RHEL-143028)
  - core/dbus-mount: add missing ReloadResult and CleanResult properties (RHEL-143028)
  - bus-unit-util: add missing assertions (RHEL-143028)
  - core/mount: rework GracefulOptions= to be just x-systemd.graceful-option= (RHEL-143028)
  - mountpoint-util: assume fsopen() works in mount_option_supported() (RHEL-143028)
  - core/mount: log only once about fs not supporting new mount API (RHEL-143028)
  - user-runtime-dir: correct quota size calculation (RHEL-143028)
  - test-display-quota: add a little helper binary to show quota on tmpfs (RHEL-143028)
  - TEST-46-HOMED: check for support on /dev/shm and /tmp separately (RHEL-143028)
  - TEST-46-HOMED: conditionally skip usrquota tests (RHEL-143028)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-25
changelog:
  - core: cleanup unit's dropin directories from global cache (RHEL-171097)
  - libsystemd: drop "const" decorators on public inline functions (RHEL-155454)
  - sd-id128: Drop _sd_const_ from sd_id128_in_setv() (RHEL-155454)
  - test: wrap mount/umount when running with sanitizers (RHEL-155454)
  - test: wrap even more binaries when running with sanitizers (RHEL-155454)
  - test: temporarily ignore sanitizer warning about blocked ptrace() (RHEL-155454)
  - test: slightly reduce the performance/memory overhead for wrapped binaries (RHEL-155454)
  - fstab-generator: support swap on network block devices (RHEL-128058)
  - man: add tags for the next few versions (RHEL-128058)
  - test: drop some extraneous whitespaces (RHEL-155021)
  - shared: fix segfault when processing matchHostname field (RHEL-155021)
  - shared: don't exclude valid min/max values for cgroup weight fields (RHEL-155021)
  - shared: don't leak memory from array fields (RHEL-155021)
  - man: fix short option for userdbctl's --from-file= (RHEL-155021)
  - fuzz: add a fuzzer for user records (RHEL-155021)
  - user-record: extract user_record_image_is_blockdev() common helper (RHEL-155021)
  - udev/net_id: introduce naming scheme for RHEL-9.9 (RHEL-72814)
  - udev/net_id: introduce naming scheme for RHEL-10.3 (RHEL-72814)
  - Tag accel devices for uaccess-render (RHEL-153030)
  - udev: tag kfd devices for xaccess-render (#40888) (RHEL-153030)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Tomas Popela <tpopela@redhat.com> - 3.7.4-1
changelog:
  - Update to 3.7.4 and sync the macro naming with Fedora
    Resolves: RHEL-71387
  - Drop references to non-existent tracker-extract-3.service
    Resolves: RHEL-70242


author: Benson Muite <benson_muite@emailplus.org> - 1.13.1-3
changelog:
  - Fix type declaration error
  - Fix to enable use of GCC 13
  - Use SPDX license identifier
  - Fix build requires #RBZ2166925


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - selinux: comply with with the "Unify bin and sbin" change
    Resolves: RHEL-113206
  - Restore permissions of the log directory
    Resolves: RHEL-92260


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later
  - Clarify License of valgrind-scripts.


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-4
changelog:
  - Add VALGRIND_3_26_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
    - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
    - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
    - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
    - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
    - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch
    - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
    - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.1.6-1
changelog:
  - Rebase to version 8.1
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689
  - add sub-package for rdma module
  - use patch for configuration changes
  - add /etc/valkey/modules drop-in directory for module configuration files
  - add %valkey_version and %valkey_modules_cfg macros
  - fix module linker flags using patch from
    https://github.com/valkey-io/valkey/pull/3344


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-10
changelog:
  - Resolves: RHEL-159617 vim: Vim: Arbitrary code execution via command injection
    in glob() function


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Neal Gompa <ngompa@centosproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races
    Resolves: RHEL-79119
  - Fix minor spec formatting inconsistencies


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-3
changelog:
  - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
    Resolves: https://redhat.atlassian.net/browse/RHEL-169759


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-4
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163190
    Resolves: https://redhat.atlassian.net/browse/RHEL-163286
    Resolves: https://redhat.atlassian.net/browse/RHEL-163244


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


