# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-220.el10]
changelog:
  - iommufd: Report ATS not supported status via IOMMU_GET_HW_INFO (Jerry Snitselaar) [RHEL-160188]
  - iommu: Add device ATS supported capability (Jerry Snitselaar) [RHEL-160188]
  - redhat/configs: automotive: enable CONFIG_INIT_STACK_ALL_ZERO (Joe Simmons-Talbott) [RHEL-164033]
  - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (Jiri Benc) [RHEL-163405]
  - redhat: allow genlog to exclude commits and issues based on ref pattern (Jan Stancek)
  - gpio: tegra186: Support multi-socket devices (Charles Mirabile) [RHEL-151653]
  - gpio: tegra186: Simplify GPIO line name prefix handling (Charles Mirabile) [RHEL-151653]
  - x86/CPU/AMD: Add CPUID faulting support (Steve Best) [RHEL-140358]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-221.el10]
changelog:
  - mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs (Steve Best) [RHEL-117325]
  - tools/power cpupower: Show C0 in idle-info dump (Steve Best) [RHEL-133086]
  - tools/power cpupower: Reset errno before strtoull() (Steve Best) [RHEL-133086]
  - tools/cpupower: Use strcspn() to strip trailing newline (Steve Best) [RHEL-133086]
  - tools/cpupower: Fix inverted APERF capability check (Steve Best) [RHEL-133086]
  - cpupower: idle_monitor: fix incorrect value logged after stop (Steve Best) [RHEL-133086]
  - tools/cpupower: Fix incorrect size in cpuidle_state_disable() (Steve Best) [RHEL-133086]
  - tools/cpupower: fix error return value in cpupower_write_sysfs() (Steve Best) [RHEL-133086]
  - iio: pressure: bmp280: Fix bmp085 symbol namespace literal (Steve Dunnagan) [RHEL-120353]
  - iio: buffer: deprecated iio_push_to_buffers_with_timestamp() (Steve Dunnagan) [RHEL-120353]
  - iio: buffer: document iio_push_to_buffers_with_ts() (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: correct meas_time_us calculation (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use gpiod_set_value_cansleep() (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Remove noisy dev_info() (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: Remove redundant pm_runtime_mark_last_busy() calls (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280-spi: remove bits_per_word = 8 (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: Use iio_push_to_buffers_with_ts() to provide length for runtime checks. (Steve Dunnagan) [RHEL-120353]
  - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Steve Dunnagan) [RHEL-120353]
  - iio: core: mark scan_timestamp as __private (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Make time vars intuitive and move to fsleep (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use sizeof() for denominator (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Move bmp085 interrupt to new configuration (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Add data ready trigger support (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use sleep and forced mode for oneshot captures (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Fix uninitialized variable (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use char instead of s32 for data buffer (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use unsigned type for raw values (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Remove config error check for IIR filter updates (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Add support for bmp280 soft reset (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use bulk read for humidity calibration data (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: use irq_get_trigger_type() (Steve Dunnagan) [RHEL-120353]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-222.el10]
changelog:
  - net: page_pool: avoid false positive warning if NAPI was never added (CKI Backport Bot) [RHEL-162141]
  - net: vlan: sync VLAN features with lower device (Hangbin Liu) [RHEL-80405]
  - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-85741]
  - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-85741]
  - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-85741]
  - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-85741]
  - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-85741]
  - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-85741]
  - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-152959]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-223.el10]
changelog:
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CKI Backport Bot) [RHEL-168570] {CVE-2026-31402}
  - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function (Desnes Nunes) [RHEL-147795]
  - xhci: sideband: don't dereference freed ring when removing sideband endpoint (Desnes Nunes) [RHEL-147795] {CVE-2026-23009}
  - phy: freescale: imx8m-pcie: assert phy reset during power on (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: add Telit LE910 MBIM composition (Desnes Nunes) [RHEL-147795]
  - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,dwc3: Correct MSM8994 interrupts (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,dwc3: Correct IPQ5018 interrupts (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: Check for USB4 IP_NAME (Desnes Nunes) [RHEL-147795]
  - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 (Desnes Nunes) [RHEL-147795]
  - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (Desnes Nunes) [RHEL-147795] {CVE-2025-71193}
  - phy: drop probe registration printks (Desnes Nunes) [RHEL-147795]
  - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Update UCSI structure to have message in and message out fields" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Add support for message out data structure" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Enable debugfs for message_out data structure" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Add support for SET_PDOS command" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Fix null pointer dereference in ucsi_sync_control_common" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Get connector status after enable notifications" (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Get connector status after enable notifications (Desnes Nunes) [RHEL-147795]
  - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Fix null pointer dereference in ucsi_sync_control_common (Desnes Nunes) [RHEL-147795]
  - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: keep susphy enabled during exit to avoid controller faults (Desnes Nunes) [RHEL-147795]
  - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: move Telit 0x10c7 composition in the right place (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: add Telit Cinterion FE910C04 new compositions (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: core: Remove redundant comment in core init (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: add Foxconn T99W760 (Desnes Nunes) [RHEL-147795]
  - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. (Desnes Nunes) [RHEL-147795]
  - USB: add WQ_PERCPU to alloc_workqueue users (Desnes Nunes) [RHEL-147795]
  - drivers/usb/storage: use min() instead of min_t() (Desnes Nunes) [RHEL-147795]
  - usb: uas: reduce time under spinlock (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: eic7700: Add EIC7700 USB driver (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: Add ESWIN EIC7700 USB controller (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add support for SET_PDOS command (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Enable debugfs for message_out data structure (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add support for message out data structure (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Update UCSI structure to have message in and message out fields (Desnes Nunes) [RHEL-147795]
  - uapi: cdc.h: cleanly provide for more interfaces and countries (Desnes Nunes) [RHEL-147795]
  - usb: Remove redundant pm_runtime_mark_last_busy() calls (Desnes Nunes) [RHEL-147795]
  - usb: musb: fix gadget state on disconnect (Desnes Nunes) [RHEL-147795]
  - Documentation: PM: *_autosuspend() functions update last busy time (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_request_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_runtime_autosuspend() (Desnes Nunes) [RHEL-147795]
  - Documentation: PM: runtime: Fix a reference to pm_runtime_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_runtime_put_sync_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_runtime_put_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Document return values of suspend-related API functions (Desnes Nunes) [RHEL-147795]
  - usb: host: ehci-platform: Call reset assert/deassert on suspend/resume (Desnes Nunes) [RHEL-147795]
  - usb: host: Do not check priv->clks[clk] (Desnes Nunes) [RHEL-147795]
  - usb: typec: tipd: mark as orientation aware (Desnes Nunes) [RHEL-147795]
  - usb: uas: add WQ_PERCPU to alloc_workqueue users (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147795]
  - usb: dwc2: fix hang during suspend if set as peripheral (Desnes Nunes) [RHEL-147795]
  - usb: dwc2: fix hang during shutdown if set as peripheral (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Set orientation_aware if UCSI version is 2.x and above (Desnes Nunes) [RHEL-147795]
  - usb: chaoskey: fix locking for O_NONBLOCK (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add Kaanapali compatible (Desnes Nunes) [RHEL-147795]
  - xhci: Fix NULL pointer dereference when reading portli debugfs files (Desnes Nunes) [RHEL-147795]
  - usb: xhci: Add debugfs support for xHCI Port Link Info (PORTLI) register. (Desnes Nunes) [RHEL-147795]
  - usb: xhci: standardize single bit-field macros (Desnes Nunes) [RHEL-147795]
  - usb: xhci: drop xhci-caps.h dependence on xhci-ext-caps.h (Desnes Nunes) [RHEL-147795]
  - usb: xhci: simplify Max Scratchpad buffer macros (Desnes Nunes) [RHEL-147795]
  - usb: xhci: simplify Isochronous Scheduling Threshold handling (Desnes Nunes) [RHEL-147795]
  - usb: xhci: improve xhci-caps.h comments (Desnes Nunes) [RHEL-147795]
  - usb: xhci: limit number of interrupts to 128 (Desnes Nunes) [RHEL-147795]
  - usb: xhci: limit number of ports to 127 (Desnes Nunes) [RHEL-147795]
  - usb: xhci: simplify handling of Structural Parameters 1 values (Desnes Nunes) [RHEL-147795]
  - usb: xhci: use cached HCSPARAMS1 value (Desnes Nunes) [RHEL-147795]
  - usb: xhci: remove unused trace operation and argument (Desnes Nunes) [RHEL-147795]
  - usb: xhci: remove deprecated TODO comment (Desnes Nunes) [RHEL-147795]
  - usb: xhci: replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147795]
  - usb: xhci: Don't unchain link TRBs on quirky HCs (Desnes Nunes) [RHEL-147795]
  - usb: xhci: Assume that endpoints halt as specified (Desnes Nunes) [RHEL-147795]
  - usb: xhci: implement USB Port Register Set struct (Desnes Nunes) [RHEL-147795]
  - usb: xhci: add USB Port Register Set struct (Desnes Nunes) [RHEL-147795]
  - usb: xhci: add helper to read PORTSC register (Desnes Nunes) [RHEL-147795]
  - usb: xhci: add tracing for PORTSC register writes (Desnes Nunes) [RHEL-147795]
  - usb: xhci: rework xhci_decode_portsc() (Desnes Nunes) [RHEL-147795]
  - xhci: simplify and rework trb_in_td() (Desnes Nunes) [RHEL-147795]
  - xhci: Add helper to find trb from its dma address (Desnes Nunes) [RHEL-147795]
  - usb: xhci: limit run_graceperiod for only usb 3.0 devices (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: renesas,rzg3e-xhci: Add RZ/V2H(P) and RZ/V2N support (Desnes Nunes) [RHEL-147795]
  - phy: fsl-imx8mq-usb: support alternate reference clock (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: imx8mq-usb: add alternate reference clock (Desnes Nunes) [RHEL-147795]
  - phy: qcom: qmp-pcie: Add support for Glymur PCIe Gen5x4 PHY (Desnes Nunes) [RHEL-147795]
  - phy: qcom-qmp: pcs: Add v8.50 register offsets (Desnes Nunes) [RHEL-147795]
  - phy: qcom: qmp-combo: get the USB3 & DisplayPort lanes mapping from DT (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,qmp-pcie: document the SM8350 two lanes PCIe PHY (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp-phy: Document lanes mapping when not using in USB-C complex (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Document the Glymur QMP PCIe PHY (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Restrict resets per each device (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Update pcie phy bindings (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Update pcie phy bindings for QCS615 (Desnes Nunes) [RHEL-147795]
  - phy: qcom-qmp-combo: Use regulator_bulk_data with init_load_uA for regulator setup (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: imx8mp: Set out of band wakeup for i.MX95 (Desnes Nunes) [RHEL-147795]
  - usb: chipidea: ci_hdrc_imx: Set out of band wakeup for i.MX95 (Desnes Nunes) [RHEL-147795]
  - pmdomain: core: Allow power-off for out-of-band wakeup-capable devices (Desnes Nunes) [RHEL-147795]
  - pmdomain: core: Convert to device_awake_path() (Desnes Nunes) [RHEL-147795]
  - PM: wakeup: Add out-of-band system wakeup support for devices (Desnes Nunes) [RHEL-147795]
  - usb: chipidea: core: detach power domain for ci_hdrc platform device (Desnes Nunes) [RHEL-147795]
  - redhat/configs: Adding CONFIG_PHY_RZ_G3E_USB3 (Desnes Nunes) [RHEL-147795]
  - phy: renesas: Add Renesas RZ/G3E USB3.0 PHY driver (Desnes Nunes) [RHEL-147795]
  - phy: core: Remove extra space after '=' (Desnes Nunes) [RHEL-147795]
  - phy: add new phy_notify_state() api (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: drop NDI quirk module parameter (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: clean up NDI speed hack (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: enable NDI speed hack consistently (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: rename quirk symbols (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: clean up quirk comments (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: rewrite 8u2232c quirk (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: silence jtag probe (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: match on interface number for jtag (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in xdomain.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in usb4.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tunnel.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tmu.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tb_regs.h (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tb.h (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tb.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in switch.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in retimer.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in nhi.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in lc.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in icm.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in domain.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in debugfs.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in ctl.c (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: Add wake-up support for Tegra234 XUSB host controller (Desnes Nunes) [RHEL-147795]
  - usbnet: avoid a possible crash in dql_completed() (Desnes Nunes) [RHEL-147795]
  - net: usb: usbnet: adhere to style (Desnes Nunes) [RHEL-147795]
  - usbnet: fix crash due to missing BQL accounting after resume (Desnes Nunes) [RHEL-147795]
  - usbnet: Add support for Byte Queue Limits (BQL) (Desnes Nunes) [RHEL-147795]
  - net: usb: usbnet: coding style for functions (Desnes Nunes) [RHEL-147795]
  - usbnet: Prevents free active kevent (Desnes Nunes) [RHEL-147795] {CVE-2025-68312}
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147795]
  - Documentation: treewide: Replace marc.info links with lore (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Update deprecated firmware update site in icm.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Update NVM firmware upgrade documentation (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add support for orientation (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add SET_POWER_LEVEL UCSI command to debugfs (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add Glymur compatible (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add Milos compatible (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: drop unnecessary initialisations (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: clean up set_termios() (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: add control request helpers (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: clean up device type checks (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: clean up tiocmset() (Desnes Nunes) [RHEL-147795]
  - USB: serial: belkin_sa: clean up tiocmset() (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC (Desnes Nunes) [RHEL-147795]
  - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: Allow usb role swich control from userspace (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add the SM8750 compatible (Desnes Nunes) [RHEL-147795]
  - usb: uhci: Work around bogus clang shift overflow warning from DMA_BIT_MASK(64) (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Fix missing mutex_unlock() (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Add USB4 mode and TBT3 altmode support (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Rework ps883x_set() (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Cache register settings, not Type-C mode (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix configuration error handling (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix missing accessibility check (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix registration race (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix probe error handling (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Report power supply change on sink path change (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Report power supply changes on power opmode changes (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: psy: Add power supply status (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: glue: Allow more fine grained control over mode switches (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: glue: Add documentation (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required (Desnes Nunes) [RHEL-147795]
  - usb: typec: pd: Register SPR AVS caps with usb_power_delivery class (Desnes Nunes) [RHEL-147795]
  - tcpm: Parse and log AVS APDO (Desnes Nunes) [RHEL-147795]
  - usbip: Use min to simplify stub_send_ret_submit (Desnes Nunes) [RHEL-147795]
  - usb: core: Add tracepoints for device allocation and state changes (Desnes Nunes) [RHEL-147795]
  - usb: core: Centralize device state update logic (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typo in tb_eeprom_ctl_read documentation (Desnes Nunes) [RHEL-147795]
  - usb: ljca: Improve ACPI hardware ID documentation (Desnes Nunes) [RHEL-147795]
  - usb: ljca: Order ACPI hardware IDs alphabetically (Desnes Nunes) [RHEL-147795]
  - usb: vhci-hcd: Replace pr_*() with dev_*() logging (Desnes Nunes) [RHEL-147795]
  - usb: vhci-hcd: Switch to dev_err_probe() in probe path (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Handle incorrect num_connectors capability (Desnes Nunes) [RHEL-147795] {CVE-2025-71108}
  - USB: Fix descriptor count when handling invalid MBIM extended descriptor (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: dwc3-generic-plat: Add layerscape dwc3 support (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: Add software-managed properties for flattened model (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: add missed compatible string for arm64 layerscape (Desnes Nunes) [RHEL-147795]
  - usb: typec: altmodes/displayport: do not enter mode if port is the UFP (Desnes Nunes) [RHEL-147795]
  - usb: typec: class: add typec_get_data_role symbol (Desnes Nunes) [RHEL-147795]
  - usb: chipidea: imx: add USB support for i.MX94 (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: usbmisc-imx: add fsl,imx94-usbmisc compatible (Desnes Nunes) [RHEL-147795]
  - usb: typec: tipd: Fix error handling in cd321x_read_data_status (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: xhci: Add "generic-xhci" compatible for Marvell Armada 37xx/8k (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: xhci: Allow "iommus" and "dr_mode" properties (Desnes Nunes) [RHEL-147795]
  - usb: hub: Use max() to improve usb_set_lpm_pel() (Desnes Nunes) [RHEL-147795]
  - usbip: Fix locking bug in RT-enabled kernels (Desnes Nunes) [RHEL-147795]
  - usb: usbtmc: Remove unnecessary local variable from usbtmc_ioctl_request (Desnes Nunes) [RHEL-147795]
  - usb: ehci: Add Aspeed AST2700 support (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: ehci: Add Aspeed AST2700 compatible (Desnes Nunes) [RHEL-147795]
  - usb: uhci: Add Aspeed AST2700 support (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: uhci: Add Aspeed AST2700 compatible (Desnes Nunes) [RHEL-147795]
  - usb: uhci: Add reset control support (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: uhci: Add reset property (Desnes Nunes) [RHEL-147795]
  - usb: core: Drop spaces after function names (Desnes Nunes) [RHEL-147795]
  - usb: misc: ljca: Remove Wentong's e-mail address (Desnes Nunes) [RHEL-147795]
  - powerpc/perf/vpa-dtl: Add documentation for VPA dispatch trace log PMU (Mamatha Inamdar) [RHEL-138521]
  - powerpc/perf/vpa-dtl: Handle the writing of perf record when aux wake up is needed (Mamatha Inamdar) [RHEL-138521]
  - powerpc/perf/vpa-dtl: Add support to capture DTL data in aux buffer (Mamatha Inamdar) [RHEL-138521]
  - powerpc/perf/vpa-dtl: Add support to setup and free aux buffer for capturing DTL data (Mamatha Inamdar) [RHEL-138521]
  - powerpc/vpa_dtl: Add interface to expose vpa dtl counters via perf (Mamatha Inamdar) [RHEL-138521]
  - powerpc/time: Expose boot_tb via accessor (Mamatha Inamdar) [RHEL-138521]
  - docs: ABI: sysfs-bus-event_source-devices-vpa-dtl: Document sysfs event format entries for vpa_dtl pmu (Mamatha Inamdar) [RHEL-138521]
  - Documentation/rtla: Document --bpf-action option (Tomas Glozar) [RHEL-112653]
  - Documentation/rtla: Rename sample/ to example/ (Tomas Glozar) [RHEL-112653]
  - rtla/tests: Run Test::Harness in verbose mode (Tomas Glozar) [RHEL-112653]
  - rtla/tests: Test BPF action program (Tomas Glozar) [RHEL-112653]
  - rtla/timerlat: Add example for BPF action program (Tomas Glozar) [RHEL-112653]
  - rtla/timerlat: Add --bpf-action option (Tomas Glozar) [RHEL-112653]
  - rtla/timerlat: Support tail call from BPF program (Tomas Glozar) [RHEL-112653]
  - fanotify: call fanotify_events_supported() before path_permission() and security_path_notify() (Ondrej Mosnacek) [RHEL-53850]
  - fanotify: avoid/silence premature LSM capability checks (Ondrej Mosnacek) [RHEL-53850]
  - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Fix short gather if the unmap goes into a large mapping (Jerry Snitselaar) [RHEL-147902]
  - iommupt/amdv1: mark amdv1pt_install_leaf_entry as __always_inline (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Remove MOCK_IOMMUPT_AMDV1 format (Jerry Snitselaar) [RHEL-147902]
  - types: reuse common phys_vec type instead of DMABUF open‑coded variant (Jerry Snitselaar) [RHEL-147902]
  - types: move phys_vec definition to common header (Jerry Snitselaar) [RHEL-147902]
  - nvme-pci: Use size_t for length fields to handle larger sizes (Jerry Snitselaar) [RHEL-147902]
  - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm-v7s: Remove split on unmap behavior (Jerry Snitselaar) [RHEL-147902]
  - iommu/sva: include mmu_notifier.h header (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: handle DMA_ATTR_CPU_CACHE_CLEAN in trace output (Jerry Snitselaar) [RHEL-147902]
  - dma-debug: Allow multiple invocations of overlapping entries (Jerry Snitselaar) [RHEL-147902]
  - iommu: Fix mapping check for 0x0 to avoid re-mapping it (Jerry Snitselaar) [RHEL-147902]
  - powerpc/iommu: fix lockdep warning during PCI enumeration (Jerry Snitselaar) [RHEL-147902]
  - kunit: prevent log overwrite in param_tests (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: avoid random addr value print out on error path (Jerry Snitselaar) [RHEL-147902]
  - scatterlist: introduce sg_nents_for_dma() helper (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: Remove dma_mark_clean (again) (Jerry Snitselaar) [RHEL-147902]
  - dma-debug: track cache clean flag in entries (Jerry Snitselaar) [RHEL-147902]
  - docs: dma-api: document DMA_ATTR_CPU_CACHE_CLEAN (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: add DMA_ATTR_CPU_CACHE_CLEAN (Jerry Snitselaar) [RHEL-147902]
  - docs: dma-api: document __dma_from_device_group_begin()/end() (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: add __dma_from_device_group_begin()/end() (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: do not register driver in probe() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Always add IOVA range to iotlb_gather in gather_range_pages() (Jerry Snitselaar) [RHEL-147902]
  - iommu: debug-pagealloc: Use page_ext_get_from_phys() (Jerry Snitselaar) [RHEL-147902]
  - mm/page_ext: Add page_ext_get_from_phys() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Do not set C-bit on MMIO backed PTEs (Jerry Snitselaar) [RHEL-147902]
  - iommu: simplify list initialization in iommu_create_device_direct_mappings() (Jerry Snitselaar) [RHEL-147902]
  - iommu: debug-pagealloc: Check mapped/unmapped kernel memory (Jerry Snitselaar) [RHEL-147902]
  - iommu: debug-pagealloc: Track IOMMU pages (Jerry Snitselaar) [RHEL-147902]
  - iommu: Add calls for IOMMU_DEBUG_PAGEALLOC (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: enable IOMMU_DEBUG_PAGEALLOC in debug kernels (Jerry Snitselaar) [RHEL-147902]
  - iommu: Add page_ext for IOMMU_DEBUG_PAGEALLOC (Jerry Snitselaar) [RHEL-147902]
  - iommu: Introduce pci_dev_reset_iommu_prepare/done() (Jerry Snitselaar) [RHEL-147902]
  - iommu: Add iommu_driver_get_domain_for_dev() helper (Jerry Snitselaar) [RHEL-147902]
  - iommu: Tidy domain for iommu_setup_dma_ops() (Jerry Snitselaar) [RHEL-147902]
  - iommu: Lock group->mutex in iommu_deferred_attach() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: serialize sequence allocation under concurrent TLB invalidations (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Fix type of type parameter to amd_iommufd_hw_info() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Remove unused variable in amd_iommufd_viommu_destroy() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for nested domain attach/detach (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Refactor logic to program the host page table in DTE (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Refactor persistent DTE bits programming into amd_iommu_make_clear_dte() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Introduce gDomID-to-hDomID Mapping and handle parent domain invalidation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for nested domain allocation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Introduce struct amd_iommu_viommu (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for nest parent domain allocation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Always enable GCR3TRPMode when supported. (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Introduce data struct for AMD nested domain allocation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Introduce helper function amd_iommu_update_dte() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Make amd_iommu_make_clear_dte() non-static inline (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Rename DEV_DOMID_MASK to DTE_DOMID_MASK (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: add AMD_IOMMU_IOMMUFD (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for hw_info for iommu capability query (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Drop incorrect NULL check for iommu in alloc_irq_table() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: move wait_on_sem() out of spinlock (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Fix race condition during PASID entry replacement (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Clear Present bit before tearing down context entry (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Clear Present bit before tearing down PASID entry (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Flush piotlb for SVM and Nested domain (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Flush cache for PASID table before using it (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Do not set disable_ats unless vSTE is Translate (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3-test: Add nested s1bypass/s1dssbypass coverage (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Mark EATS_TRANS safe when computing the update sequence (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Mark STE MEV safe when computing the update sequence (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Add update_safe bits to fix STE update sequence (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Add device-tree support for CMDQV driver (Jerry Snitselaar) [RHEL-147902]
  - iommu/tegra241-cmdqv: Decouple driver from ACPI (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Restore ACTLR settings for MDSS on sa8775p (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Remove IAS (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Add actlr settings for mdss on Qualcomm platforms (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency (Jerry Snitselaar) [RHEL-147902]
  - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-147902]
  - dt-bindings: iommu: Add NVIDIA Tegra CMDQV support (Jerry Snitselaar) [RHEL-147902]
  - Documentation/x86: Update IOMMU spec references to use stable identifiers (Jerry Snitselaar) [RHEL-147902]
  - x86/irq: Cleanup posted MSI code (Jerry Snitselaar) [RHEL-147902]
  - x86/irq_remapping: Sanitize posted_msi_supported() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Use core's primary handler and set IRQF_ONESHOT (Jerry Snitselaar) [RHEL-147902]
  - tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Treat PAGE_SNOOP and PWSNP separately (Jerry Snitselaar) [RHEL-147902]
  - iommu/tegra241-cmdqv: Reset VCMDQ in tegra241_vcmdq_hw_init_user() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Only cache flush memory changed by unmap (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Initialize batch->kind in batch_clear() (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: distinguish between missing and exhausted atomic pools (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm: fix size_t signedness bug in unmap path (Jerry Snitselaar) [RHEL-147902] {CVE-2026-23067}
  - iommupt: Make it clearer to the compiler that pts.level == 0 for single page (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Fix error path in amd_iommu_probe_device() (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: Avoid allocating redundant pools (Jerry Snitselaar) [RHEL-147902]
  - mm_zone: Generalise has_managed_dma() (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: Improve pool lookup (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Make pt_feature() always_inline (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Prevent module/builtin conflicts in kconfig (Jerry Snitselaar) [RHEL-147902]
  - amd/iommu: Make protection domain ID functions non-static (Jerry Snitselaar) [RHEL-147902]
  - amd/iommu: Preserve domain ids inside the kdump kernel (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Return ERR_PTR from _table_alloc() (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED (Jerry Snitselaar) [RHEL-147902] {CVE-2025-71122}
  - iommufd/selftest: Do not leak the hwpt if IOMMU_TEST_OP_MD_CHECK_MAP fails (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: Fix DMA_BIT_MASK() macro being broken (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: eliminate alloc_pages warning in atomic_pool_expand (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: fix SEV-TIO support reporting (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Report SEV-TIO support (Jerry Snitselaar) [RHEL-147902]
  - powerpc: Convert to physical address DMA mapping (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: remove unused mapping resource callbacks (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: convert dummy ops to physical address mapping (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: prepare dma_map_ops to conversion to physical address (Jerry Snitselaar) [RHEL-147902]
  - tools/dma: move dma_map_benchmark from selftests to tools/dma (Jerry Snitselaar) [RHEL-147902]
  - iommupt/vtd: Support mgaw's less than a 4 level walk for first stage (Jerry Snitselaar) [RHEL-147902]
  - iommupt/vtd: Allow VT-d to have a larger table top than the vasz requires (Jerry Snitselaar) [RHEL-147902]
  - genpt: Make GENERIC_PT invisible (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Avoid a compiler bug with sw_bit (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Fix unlikely flows in increase_top() (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Restore previous domain::aperture_end calculation (Jerry Snitselaar) [RHEL-147902]
  - iommu/tegra: fix device leak on probe_device() (Jerry Snitselaar) [RHEL-147902]
  - iommu/ipmmu-vmsa: fix device leak on of_xlate() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Actually correct pt_test_sw_bit_{acquire_release}() parameter description (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: populate lpae pgtable kunit test (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm-selftests: Use KUnit (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm-selftests: Modularize the test (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm: Move selftests to a separate file (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm: Remove arm_lpae_dump_ops() (Jerry Snitselaar) [RHEL-147902]
  - iommu/iommupt: Fix build error in genericpt unit-tests (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Documentation fixes (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Describe @bitnr parameter (Jerry Snitselaar) [RHEL-147902]
  - Documentation: genpt: Don't use code block marker before iommu_amdv1.c include listing (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a kunit test for the SW bits (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Follow PT_FEAT_DMA_INCOHERENT into the PASID entry (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Use the generic iommu page table (Jerry Snitselaar) [RHEL-147902]
  - iommupt/x86: Support SW bits and permit PT_FEAT_DMA_INCOHERENT (Jerry Snitselaar) [RHEL-147902]
  - iommupt/x86: Set the dirty bit only for writable PTEs (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the Intel VT-d second stage page table format (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Flush the CPU cache after any writes to the page table (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Use the incoherent start/stop functions for PT_FEAT_DMA_INCOHERENT (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add basic support for SW bits in the page table (Jerry Snitselaar) [RHEL-147902]
  - iommu/pages: Add support for incoherent IOMMU page table walkers (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a kunit test for the IOMMU implementation (Jerry Snitselaar) [RHEL-147902]
  - Documentation: kunit: Document new parameterized test features (Jerry Snitselaar) [RHEL-147902]
  - kunit: Add example parameterized test with direct dynamic parameter array setup (Jerry Snitselaar) [RHEL-147902]
  - kunit: Add example parameterized test with shared resource management using the Resource API (Jerry Snitselaar) [RHEL-147902]
  - kunit: Enable direct registration of parameter arrays to a KUnit test (Jerry Snitselaar) [RHEL-147902]
  - kunit: Pass parameterized test context to generate_params() (Jerry Snitselaar) [RHEL-147902]
  - kunit: Introduce param_init/exit for parameterized test context management (Jerry Snitselaar) [RHEL-147902]
  - kunit: Add parent kunit for parameterized test context (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Remove AMD io_pgtable support (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Use the generic iommu page table (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the x86 64 bit page table format (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Change the selftest to use iommupt instead of xarray (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a mock pagetable format for iommufd selftest to use (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Fix the kunit building (Jerry Snitselaar) [RHEL-147902]
  - redhat: config: Populate iommu pt kunit config option (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a kunit test for Generic Page Table (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add read_and_clear_dirty op (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add map_pages op (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add unmap_pages op (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add iova_to_phys op (Jerry Snitselaar) [RHEL-147902]
  - powerpc/pseries/svm: Make mem_encrypt.h self contained (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the AMD IOMMU v1 page table format (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the basic structure of the iommu implementation (Jerry Snitselaar) [RHEL-147902]
  - genpt: Add Documentation/ files (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: Populate debug generic pt config option (Jerry Snitselaar) [RHEL-147902]
  - genpt: Generic Page Table base API (Jerry Snitselaar) [RHEL-147902]
  - iommu: Pass in old domain to attach_dev callback functions (Jerry Snitselaar) [RHEL-147902]
  - iommu: Do not revert set_domain for the last gdev (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Set release_domain to blocked_domain (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Set release_domain to arm_smmu_blocked_domain (Jerry Snitselaar) [RHEL-147902]
  - iommu: Generic support for RMRs during device release (Jerry Snitselaar) [RHEL-147902]
  - iommu/pages: use folio_nr_pages() instead of shift operation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Enhance "Completion-wait Time-out" error message (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Set INTEL_IOMMU_FLOPPY_WA depend on BLK_DEV_FD (Jerry Snitselaar) [RHEL-147902]
  - iommu: tegra: enable compile testing (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Add Glymur MDSS compatible (Jerry Snitselaar) [RHEL-147902]
  - selftests/dma: fix invalid array access in printf (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: Allow use of DMA_BIT_MASK(64) in global scope (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Make vfio_compat's unmap succeed if the range is already empty (Jerry Snitselaar) [RHEL-147902]
  - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Skip enabling command/event buffers for kdump (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Reuse device table for kdump (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support to remap/unmap IOMMU buffers for kdump (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: use str_plural() to simplify the code (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: debugfs: Avoid dumping context command register (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Removal of Advanced Fault Logging (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: PRS isn't usable if PDS isn't supported (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Remove LPIG from page group response descriptor (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Drop unused cap_super_offset() (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() (Jerry Snitselaar) [RHEL-147902]
  - swiotlb: Remove redundant __GFP_NOWARN (Jerry Snitselaar) [RHEL-147902]
  - dma-direct: clean up the logic in __dma_direct_alloc_pages() (Jerry Snitselaar) [RHEL-147902]
  - dma-remap: drop nth_page() in dma_common_contiguous_remap() (Jerry Snitselaar) [RHEL-147902]
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137405] {CVE-2025-68285}
  - clk: renesas: cpg-mssr: Fix 'soc' node handling in cpg_mssr_reserved_init() (Radu Rendec) [RHEL-77269]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-224.el10]
changelog:
  - tools/power turbostat: Allow execution to continue after perf_l2_init() failure (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix delimiter bug in print functions (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix --show/--hide for individual cpuidle counters (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix incorrect format variable (Steve Best) [RHEL-129778]
  - tools/power turbostat: Consistently use print_float_value() (Steve Best) [RHEL-129778]
  - tools/power/turbostat: Fix microcode patch level output for AMD/Hygon (Steve Best) [RHEL-129778]
  - tools/power turbostat: Eliminate unnecessary data structure allocation (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix swidle header vs data display (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix illegal memory access when SMT is present and disabled (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix AMD RAPL regression (Steve Best) [RHEL-129778]
  - tools/power turbostat: version 2026.02.14 (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix and document --header_iterations (Steve Best) [RHEL-129778]
  - tools/power turbostat: Use strtoul() for iteration parsing (Steve Best) [RHEL-129778]
  - tools/power turbostat: Favor cpu# over core# (Steve Best) [RHEL-129778]
  - tools/power turbostat: Expunge logical_cpu_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Enhance HT enumeration (Steve Best) [RHEL-129778]
  - tools/power turbostat: Simplify global core_id calculation (Steve Best) [RHEL-129778]
  - tools/power turbostat: Unify even/odd/average counter referencing (Steve Best) [RHEL-129778]
  - tools/power turbostat: Allocate average counters dynamically (Steve Best) [RHEL-129778]
  - tools/power turbostat: Delete core_data.core_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Rename physical_core_id to core_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Cleanup package_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Cleanup internal use of "base_cpu" (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add L2 cache statistics (Steve Best) [RHEL-129778]
  - tools/power turbostat: Remove redundant newlines from err(3) strings (Steve Best) [RHEL-129778]
  - tools/power turbostat: Allow more use of is_hybrid flag (Steve Best) [RHEL-129778]
  - tools/power turbostat: Rename "LLCkRPS" column to "LLCMRPS" (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: Document the "--force" option (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: Document Totl%C0, Any%C0, GFX%C0, CPUGFX% columns (Steve Best) [RHEL-129778]
  - tools/power turbostat: Harden against unexpected values (Steve Best) [RHEL-129778]
  - tools/power turbostat: Dump hypervisor name (Steve Best) [RHEL-129778]
  - tools/power turbostat: Dump CPUID.1.ECX[31] (Hypervisor) (Steve Best) [RHEL-129778]
  - tools/power turbostat: Dump CPUID(1) consistently with CPUID(6) (Steve Best) [RHEL-129778]
  - tools/power turbostat: AMD: msr offset 0x611 read failed: Input/output error (Steve Best) [RHEL-129778]
  - tools/power turbostat: version 2025.12.02 (Steve Best) [RHEL-129778]
  - tools/power turbostat: Print wide names only for RAW 64-bit columns (Steve Best) [RHEL-129778]
  - tools/power turbostat: Print percentages in 8-columns (Steve Best) [RHEL-129778]
  - tools/power turbostat: Print "nan" for out of range percentages (Steve Best) [RHEL-129778]
  - tools/power turbostat: Validate APERF access for VMWARE (Steve Best) [RHEL-129778]
  - tools/power turbostat: Enhance perf probe (Steve Best) [RHEL-129778]
  - tools/power turbostat: Validate RAPL MSRs for AWS Nitro Hypervisor (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add run-time MSR driver probe (Steve Best) [RHEL-129778]
  - tools/power turbostat: Set per_cpu_msr_sum to NULL after free (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add LLC stats (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: fix typo: idle_pct should be pct_idle (Steve Best) [RHEL-129778]
  - tools/power turbostat: Remove dead code (Steve Best) [RHEL-129778]
  - tools/power turbostat: Refactor floating point printout code (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: Update example (Steve Best) [RHEL-129778]
  - tools/power turbostat: Refactor added-counter value printing code (Steve Best) [RHEL-129778]
  - tools/power turbostat: Refactor added column header printing (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add Wildcat Lake and Nova Lake support (Steve Best) [RHEL-129778]
  - tools/power turbostat: Regression fix Uncore MHz printed in hex (Steve Best) [RHEL-129778]
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-164343] {CVE-2026-23270}
  - Prevent stripping of rtla and rv binaries during install (John Kacur) [RHEL-85865 RHEL-85868]
  - Fix rtla and rv debuginfo package definitions (John Kacur) [RHEL-85865 RHEL-85868]
  - Add debuginfo package for rtla tool (John Kacur) [RHEL-85865 RHEL-85868]
  - Add debuginfo package for rv tool (John Kacur) [RHEL-85865 RHEL-85868]
  - iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show (Jerry Snitselaar) [RHEL-140474]
  - redhat/configs: Enable AMD IOMMU DebugFS support (Jerry Snitselaar) [RHEL-140474]


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80610


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 5:5.1.1-1
changelog:
  - podman-5.1.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.1.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-138726


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-168121, RHEL-167887


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-168121, RHEL-167887


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-2
changelog:
  - kvm-e1000e-Prevent-crash-from-legacy-interrupt-firing-af.patch [RHEL-112882]
  - Resolves: RHEL-112882
    ([DEV Task]: Assertion `core->delayed_causes == 0' failed with e1000e NIC)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-3
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-119368]
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-116443]
  - kvm-target-i386-add-compatibility-property-for-arch_capa.patch [RHEL-120253]
  - kvm-target-i386-add-compatibility-property-for-pdcm-feat.patch [RHEL-120253]
  - Resolves: RHEL-119368
    ([rhel10] Backport "arm/kvm: report registers we failed to set")
  - Resolves: RHEL-116443
    (qemu crash after hot-unplug disk from the multifunction enabled bus,crash point PCIDevice *vf = dev->exp.sriov_pf.vf[i])
  - Resolves: RHEL-120253
    (Backport fixes for PDCM and ARCH_CAPABILITIES migration incompatibility)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-4
changelog:
  - kvm-qapi-machine-s390x-add-QAPI-event-SCLP_CPI_INFO_AVAI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-tests-functional-add-tests-for-SCLP-event-CPI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-redhat-Add-new-rhel9.8.0-and-rhel10.2.0-machine-type.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-vfio-rename-field-to-num_initial_regions.patch [RHEL-118810]
  - kvm-vfio-only-check-region-info-cache-for-initial-region.patch [RHEL-118810]
  - kvm-arm-create-new-rhel-10.2-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-arm-create-new-rhel-9.8-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-10.2-specific-pc-q35-machine-typ.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-9.8-specific-pc-q35-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-rh-enable-CONFIG_USB_STORAGE_BOT.patch [RHEL-101929]
  - Resolves: RHEL-104009
    ([IBM 10.2 FEAT] KVM: Enhance machine type definition to include CPI and PCI passthru capabilities (qemu))
  - Resolves: RHEL-105823
    (Add new -rhel10.2.0 machine type to qemu-kvm [s390x])
  - Resolves: RHEL-73008
    ([IBM 10.2 FEAT] KVM: Implement Control Program Identification (qemu))
  - Resolves: RHEL-118810
    ([RHEL 10.2] Windows 11 VM fails to boot up with ramfb='on' with QEMU 10.1)
  - Resolves: RHEL-105826
    (Add new -rhel10.2.0 machine type to qemu-kvm [aarch64])
  - Resolves: RHEL-105828
    (Add new -rhel10.2.0 machine type to qemu-kvm [x86_64])
  - Resolves: RHEL-101929
    (enable 'usb-bot' device for proper support of USB CD-ROM drives via libvirt  )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-5
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120116]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120116]
  - kvm-vfio-Disable-VFIO-migration-with-MultiFD-support.patch [RHEL-126573]
  - kvm-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-from-10..patch [RHEL-67323]
  - kvm-hw-arm-smmu-common-Check-SMMU-has-PCIe-Root-Complex-.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Re-arrange-SMMUv3-IORT-build.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Update-IORT-for-multiple-smmu.patch [RHEL-73800]
  - kvm-hw-arm-virt-Factor-out-common-SMMUV3-dt-bindings-cod.patch [RHEL-73800]
  - kvm-hw-arm-virt-Add-an-SMMU_IO_LEN-macro.patch [RHEL-73800]
  - kvm-hw-pci-Introduce-pci_setup_iommu_per_bus-for-per-bus.patch [RHEL-73800]
  - kvm-hw-arm-virt-Allow-user-creatable-SMMUv3-dev-instanti.patch [RHEL-73800]
  - kvm-qemu-options.hx-Document-the-arm-smmuv3-device.patch [RHEL-73800]
  - kvm-bios-tables-test-Allow-for-smmuv3-test-data.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Add-tests-for-legacy-smmuv3-a.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Update-tables-for-smmuv3-test.patch [RHEL-73800]
  - kvm-qtest-Do-not-run-bios-tables-test-on-aarch64.patch []
  - Resolves: RHEL-120116
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-10.2])
  - Resolves: RHEL-126573
    (VFIO migration using multifd should be disabled by default)
  - Resolves: RHEL-67323
    ([aarch64] Support ACPI based PCI hotplug on ARM)
  - Resolves: RHEL-73800
    (NVIDIA:Grace-Hopper:Backport support for user-creatable nested SMMUv3 - RHEL 10.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-6
changelog:
  - kvm-ram-block-attributes-fix-interaction-with-hugetlb-me.patch [RHEL-126708]
  - kvm-ram-block-attributes-Unify-the-retrieval-of-the-bloc.patch [RHEL-126708]
  - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-128085]
  - kvm-Fix-the-typo-of-vfio-pci-device-s-enable-migration-o.patch [RHEL-130704]
  - Resolves: RHEL-126708
    ([RHEL 10]snp guest fail to boot with hugepage)
  - Resolves: RHEL-128085
    (VM crashes during boot when virtio device is attached through vfio_ccw)
  - Resolves: RHEL-130704
    ([rhel10] Fix the typo under vfio-pci device's enable-migration option )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-7
changelog:
  - kvm-pcie_sriov-Fix-broken-MMIO-accesses-from-SR-IOV-VFs.patch [RHEL-120115]
  - kvm-arm-fix-oob-access-in-compat-handling.patch [RHEL-130478]
  - Resolves: RHEL-120115
    (The vf nic created using the IGB emulated nic can not obtain ip address )
  - Resolves: RHEL-130478
    (Migration from RHEL 10.2 to RHEL 10.1 with virt-rhel10.0.0 machine type fails on Grace)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-8
changelog:
  - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540]
  - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543]
  - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212]
  - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212]
  - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212]
  - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212]
  - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212]
  - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212]
  - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212]
  - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212]
  - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212]
  - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212]
  - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212]
  - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212]
  - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212]
  - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212]
  - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212]
  - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212]
  - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212]
  - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212]
  - Resolves: RHEL-129540
    (Assertion failure on drain with iothread and I/O load)
  - Resolves: RHEL-121543
    (The VM hit io error when do S3-PR integration on the pass-through  failover multipath device)
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-9
changelog:
  - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212]
  - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003]
  - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003]
  - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003]
  - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003]
  - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853]
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)
  - Resolves: RHEL-110003
    (Expose block limits of block nodes in QMP and qemu-img)
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-10
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142]
  - Resolves: RHEL-108142
    (QEMU crashes when stopping source VM during live migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-11
changelog:
  - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-126707]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028]
  - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853]
  - Resolves: RHEL-126707
    ([qemu, rhel-10] increase default TSEG size)
  - Resolves: RHEL-139028
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2])
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-12
changelog:
  - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118]
  - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118]
  - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118]
  - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118]
  - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118]
  - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785]
  - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785]
  - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785]
  - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785]
  - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785]
  - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785]
  - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785]
  - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785]
  - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-net-implement-tunnel-probing.patch [RHEL-143785]
  - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785]
  - Resolves: RHEL-79118
    ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10])
  - Resolves: RHEL-143785
    (backport support for GSO over UDP tunnel offload)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425]
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749]
  - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584]
  - Resolves: RHEL-147425
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-132749
    (Migrate SCSI PR state and preempt reservation upon live migration)
  - Resolves: RHEL-134989
    (Hotplugged interface device can not be shown in the guest)
  - Resolves: RHEL-146584
    ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-14
changelog:
  - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
  - Resolves: RHEL-153058
    (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
  - Resolves: RHEL-144004
    ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-15
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
  - Resolves: RHEL-155601
    (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-16
changelog:
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
  - Resolves: RHEL-158224
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-12
changelog:
  - kvm-RHEL-Pack-uefi-vars-module.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100438)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744)
  - zipl: makedumpfile is required for ngdump support (RHEL-114661)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109214)
  - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100438)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829)
  - Secure Execution: Add tool to verify host-key documents (RHEL-136795)
  - Resolves: RHEL-100438 RHEL-71829 RHEL-136795


author: Dan Horák <dhorak@redhat.com> - 2:2.41.0-1
changelog:
  - rebased to 2.41.0 (RHEL-136097)
  - hsci: Automatically set appropriate MTU for HSCI (RHEL-153550)
  - Resolves: RHEL-136097 RHEL-153550


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-36
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-113741
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-114454
  - Add support for Image Mode
    Resolves: RHEL-114454


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.22.2-2
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.22.2
  - re-add test file installation to fix tier0 tests
  - Resolves: RHEL-153734


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - new upstream release
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-2
changelog:
  - use %configure RPM macro instead of bare ./configure to inject
    RPM hardening flags (stack protector, FORTIFY_SOURCE)
  - use %make_build and %make_install RPM macros
  - Resolves: RHEL-152227


author: Kalev Lember <klember@redhat.com> - 45.0-2
changelog:
  - Package review fixes (rhbz#2241553)
  - Add SourceLicense tag to distinguish between the license of the app
    itself and its crate deps
  - Slightly change virtual provides for bundled aperture crate to better
    match other rust packages


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-9
changelog:
  - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-10
changelog:
  - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-12
changelog:
  - Resolves: RHEL-160670 - squid: Squid: Denial of Service via heap
    Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  - Resolves: RHEL-160671 - squid: Squid: Denial of Service via crafted
    ICP traffic (CVE-2026-32748)


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0
  - Drop upstreamed patches


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Make queue_track the default backend
  - Remove LTO build flags
  - Remove the -m64 build flag
  Resolves: RHEL-105604 RHEL-114506


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Alejandro López <allopez@redhat.com> - 1.9.17-3.p2
changelog:
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-4.p2
changelog:
  - Bump release number
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-22
changelog:
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
  - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
  - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
  - hwdb: update rules (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - Add Razer Cobra mouse to hwdb (RHEL-72702)
  - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
  - hwdb: sort SDR devices by vendor name (RHEL-72702)
  - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
  - hwdb: run "update-hwdb" (RHEL-72702)
  - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
  - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
  - hwdb: add Airspy devices (RHEL-72702)
  - hwdb: add more devices (RHEL-72702)
  - hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
  - hwdb: add missing Ettus Research B200 rule (RHEL-72702)
  - hwdb: add LimeSDR XTRX devices (RHEL-72702)
  - hwdb: add HydraSDR RFOne (RHEL-72702)
  - hwdb: add SDRplay devices (RHEL-72702)
  - hwdb: update (RHEL-72702)
  - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
  - Add Nulea M501 trackball to hwdb (RHEL-72702)
  - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
  - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
  - remove bonus line (RHEL-72702)
  - hwdb: drop trailing whitespace (RHEL-72702)
  - remove Nulea M501 usb entry from hwdb (RHEL-72702)
  - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702)
  - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702)
  - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702)
  - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702)
  - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702)
  - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702)
  - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702)
  - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702)
  - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702)
  - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702)
  - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702)
  - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702)
  - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702)
  - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702)
  - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702)
  - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702)
  - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702)
  - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702)
  - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702)
  - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702)
  - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702)
  - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702)
  - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702)
  - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702)
  - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard   device as set 1 (appears as raw set 2) or as set 2 (appears as   translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for   posterity. (RHEL-72702)
  - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702)
  - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702)
  - hwdb: keyboard: uppercase apple id (RHEL-72702)
  - integritysetup: Add support for hmac-sha512 (RHEL-27852)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852)
  - core: increment start limit counter only when we can start the unit (RHEL-115032)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032)
  - test: extend start limit interval (RHEL-115032)
  - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029)
  - man: fix typo (RHEL-143029)
  - test: fix test with -Dnetworkd=false (RHEL-143029)
  - ci: run apt-get update before running mkosi (RHEL-115001)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-23
changelog:
  - test-journal-dump: dump the headers of journal files (RHEL-106795)
  - journal: store counts, not byte sizes, in table size constants (RHEL-106795)
  - journal: treble field hash table size (RHEL-106795)
  - nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
  - user-classification: add new "foreign" UID range (RHEL-143036)
  - userdb: synthesize stub user records for the foreign UID (RHEL-143036)
  - dissect: add new --shift command (RHEL-143036)
  - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
  - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
  - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
  - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
  - sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
  - user-record: add helper for dispatching a disposition mask (RHEL-143036)
  - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036)
  - user-record: add some helpers for working with UserDBMatch (RHEL-143036)
  - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
  - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
  - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
  - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
  - update TODO (RHEL-143036)
  - JSON User/Group records: Add properties for UUIDs (RHEL-143036)
  - userdb: add support for printing the UUID from user and group records (RHEL-143036)
  - userdb: add support for looking up users or groups by uuid. (RHEL-143036)
  - userdbctl: add --uuid filtering option (RHEL-143036)
  - userdbctl: add missing --uuid= to --help text (RHEL-143036)
  - userdb: fix typo (RHEL-143036)
  - man/userdbctl: fixup version info (RHEL-143036)
  - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
  - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
  - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
  - logind: support deserializing session leader through pidfdid (RHEL-53112)
  - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
  - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
  - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219)
  - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-24
changelog:
  - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-155454)
  - ci: add bpftool workaround to codeql job too (RHEL-155454)
  - ci: fix workaround about bpftool for codeql (RHEL-155454)
  - ci: add bpftool workaround to coverity too (RHEL-155454)
  - Revert "man: mention RHEL documentation in systemctl's man page" (RHEL-155805)
  - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-155396)
  - cgroup: port some code over to path_startswith_full() (RHEL-155396)
  - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-155396)
  - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-155396)
  - core/cgroup: avoid one unnecessary strjoina() (RHEL-155396)
  - core: validate input cgroup path more prudently (RHEL-155396)
  - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-158303)
  - nspawn: normalize pivot_root paths (RHEL-158303)
  - udev: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-158354)
  - udev: ensure tag parsing stays within bounds (RHEL-158354)
  - udev: fix review mixup (RHEL-158354)
  - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev-builtin-net-id: print cescaped bad attributes (RHEL-158354)
  - core: only activate transaction that contain useful jobs (RHEL-143728)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-168098)
  - string-util: introduce strprepend() helper (RHEL-143028)
  - missing: add quotactl_fd() wrapper (RHEL-143028)
  - homed: always use quotactl_fd() if its available (RHEL-143028)
  - pid1: add GracefulOptions= setting to .mount units (RHEL-143028)
  - pid1: enable usrquota support on /dev/shm (RHEL-143028)
  - units: enable usrquota support on /tmp/ (RHEL-143028)
  - nspawn: enable usrquota support on /tmp/ and /dev/shm/ (RHEL-143028)
  - nspawn: downgrade log message about usrquota to debug (RHEL-143028)
  - mount-setup: drop outdated comment (RHEL-143028)
  - mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too (RHEL-143028)
  - devnum-util: add macros to safely convert dev_t to pointers and back (RHEL-143028)
  - user-record: add fields for setting limits on /tmp/ and /dev/shm/ (RHEL-143028)
  - user-runtime-dir: some smaller modernizations/refactorings (RHEL-143028)
  - user-runtime-dir: enforce /tmp/ and /dev/shm/ quota (RHEL-143028)
  - homectl: add support for configuring tmpfs limits (RHEL-143028)
  - test: add test case for tmpfs quota logic + PAMName= ask-password logic (RHEL-143028)
  - update TODO (RHEL-143028)
  - core/dbus-service: fix alignment (RHEL-143028)
  - core/mount: filter out "fail" option as well (RHEL-143028)
  - core/mount: check parameters_fragment first in mount_enter_(re)mounting() (RHEL-143028)
  - core/mount: report accurate can_start and can_reload (RHEL-143028)
  - core/mount: trivial coding style cleanups (RHEL-143028)
  - core/dbus-mount: add missing ReloadResult and CleanResult properties (RHEL-143028)
  - bus-unit-util: add missing assertions (RHEL-143028)
  - core/mount: rework GracefulOptions= to be just x-systemd.graceful-option= (RHEL-143028)
  - mountpoint-util: assume fsopen() works in mount_option_supported() (RHEL-143028)
  - core/mount: log only once about fs not supporting new mount API (RHEL-143028)
  - user-runtime-dir: correct quota size calculation (RHEL-143028)
  - test-display-quota: add a little helper binary to show quota on tmpfs (RHEL-143028)
  - TEST-46-HOMED: check for support on /dev/shm and /tmp separately (RHEL-143028)
  - TEST-46-HOMED: conditionally skip usrquota tests (RHEL-143028)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Tomas Popela <tpopela@redhat.com> - 3.7.4-1
changelog:
  - Update to 3.7.4 and sync the macro naming with Fedora
    Resolves: RHEL-71387
  - Drop references to non-existent tracker-extract-3.service
    Resolves: RHEL-70242


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - selinux: comply with with the "Unify bin and sbin" change
    Resolves: RHEL-113206
  - Restore permissions of the log directory
    Resolves: RHEL-92260


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later
  - Clarify License of valgrind-scripts.


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-4
changelog:
  - Add VALGRIND_3_26_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
    - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
    - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
    - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
    - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
    - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch
    - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
    - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.1.6-1
changelog:
  - Rebase to version 8.1
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689
  - add sub-package for rdma module
  - use patch for configuration changes
  - add /etc/valkey/modules drop-in directory for module configuration files
  - add %valkey_version and %valkey_modules_cfg macros
  - fix module linker flags using patch from
    https://github.com/valkey-io/valkey/pull/3344


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-10
changelog:
  - Resolves: RHEL-159617 vim: Vim: Arbitrary code execution via command injection
    in glob() function


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-97010]
  - Resolves: RHEL-97010
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-1
changelog:
  - Rebase to 1.13.3 [RHEL-133034]
  - Resolves: RHEL-133034
    (Rebase virtiofsd to latest version for RHEL 10.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-2
changelog:
  - Fixing README file [RHEL-169757]
  - Resolves: RHEL-169757
    (Fix the README file: --announce-submounts is enabled by default)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Neal Gompa <ngompa@centosproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races
    Resolves: RHEL-79119
  - Fix minor spec formatting inconsistencies


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-3
changelog:
  - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
    Resolves: https://redhat.atlassian.net/browse/RHEL-169759


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-4
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163190
    Resolves: https://redhat.atlassian.net/browse/RHEL-163286
    Resolves: https://redhat.atlassian.net/browse/RHEL-163244


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


