# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-151.el10]
changelog:
  - redhat/configs: set CONFIG_IMA_KEXEC_EXTRA_MEMORY_KB default value (Baoquan He) [RHEL-114162]
  - kexec_file: use SHA-256 library API instead of crypto_shash API (Baoquan He) [RHEL-114162]
  - crash: fix spelling mistake "crahskernel" -> "crashkernel" (Baoquan He) [RHEL-114162]
  - ima: make the kexec extra memory configurable (Baoquan He) [RHEL-114162]
  - ima: verify if the segment size has changed (Baoquan He) [RHEL-114162]
  - ima: kexec: move IMA log copy from kexec load to execute (Baoquan He) [RHEL-114162]
  - ima: kexec: define functions to copy IMA log at soft boot (Baoquan He) [RHEL-114162]
  - ima: kexec: skip IMA segment validation after kexec soft reboot (Baoquan He) [RHEL-114162]
  - kexec: define functions to map and unmap segments (Baoquan He) [RHEL-114162]
  - ima: define and call ima_alloc_kexec_file_buf() (Baoquan He) [RHEL-114162]
  - ima: rename variable the seq_file "file" to "ima_kexec_file" (Baoquan He) [RHEL-114162]
  - ima: kexec: silence RCU list traversal warning (Baoquan He) [RHEL-114162]
  - selftests/kexec: Add x86_64 selftest for kexec-jump and exception handling (Baoquan He) [RHEL-114162]
  - x86/kexec: Invalidate GDT/IDT from relocate_kernel() instead of earlier (Baoquan He) [RHEL-114162]
  - x86/kexec: Add 8250 MMIO serial port output (Baoquan He) [RHEL-114162]
  - x86/kexec: Add 8250 serial port output (Baoquan He) [RHEL-114162]
  - x86/early_printk: Harden early_serial (Baoquan He) [RHEL-114162]
  - x86/boot: Mark start_secondary() with __noendbr (Baoquan He) [RHEL-114162]
  - x86/kexec: Debugging support: Dump registers on exception (Baoquan He) [RHEL-114162]
  - x86/kexec: Debugging support: Load an IDT and basic exception entry points (Baoquan He) [RHEL-114162]
  - x86/kexec: Merge x86_32 and x86_64 code using macros from <asm/asm.h> (Baoquan He) [RHEL-114162]
  - kexec_core: accept unaccepted kexec segments' destination addresses (Baoquan He) [RHEL-114162]
  - powerpc/crash: use generic crashkernel reservation (Baoquan He) [RHEL-114162]
  - powerpc: insert System RAM resource to prevent crashkernel conflict (Baoquan He) [RHEL-114162]
  - powerpc/crash: preserve user-specified memory limit (Baoquan He) [RHEL-114162]
  - powerpc/crash: use generic APIs to locate memory hole for kdump (Baoquan He) [RHEL-114162]
  - crash: let arch decide usable memory range in reserved area (Baoquan He) [RHEL-114162]
  - crash: remove an unused argument from reserve_crashkernel_generic() (Baoquan He) [RHEL-114162]
  - kexec: initialize ELF lowest address to ULONG_MAX (Baoquan He) [RHEL-114162]
  - x86/kexec: Add relocate_kernel() debugging support: Load a GDT (Baoquan He) [RHEL-114162]
  - printk: Check CON_SUSPEND when unblanking a console (Baoquan He) [RHEL-114162]
  - printk: Rename console_start to console_resume (Baoquan He) [RHEL-114162]
  - printk: Rename console_stop to console_suspend (Baoquan He) [RHEL-114162]
  - printk: Rename resume_console to console_resume_all (Baoquan He) [RHEL-114162]
  - printk: Rename suspend_console to console_suspend_all (Baoquan He) [RHEL-114162]
  - crash: Remove KEXEC_CORE_NOTE_NAME (Baoquan He) [RHEL-114162]
  - s390/crash: Use note name macros (Baoquan He) [RHEL-114162]
  - s390/kdump: Provide is_kdump_kernel() implementation (Baoquan He) [RHEL-114162]
  - crash: Use note name macros (Baoquan He) [RHEL-114162]
  - proc/kcore: use percpu_rw_semaphore for kclist_lock (Baoquan He) [RHEL-114162]
  - proc/kcore: don't walk list on every read (Baoquan He) [RHEL-114162]
  - proc/kcore: mark proc entry as permanent (Baoquan He) [RHEL-114162]
  - powerpc/crash: Use note name macros (Baoquan He) [RHEL-114162]
  - binfmt_elf: Use note name macros (Baoquan He) [RHEL-114162]
  - elf: Define note name macros (Baoquan He) [RHEL-114162]
  - riscv: Allow ptrace control of the tagged address ABI (Baoquan He) [RHEL-114162]
  - x86/kexec: Use typedef for relocate_kernel_fn function prototype (Baoquan He) [RHEL-114162]
  - x86/kexec: Cope with relocate_kernel() not being at the start of the page (Baoquan He) [RHEL-114162]
  - kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Baoquan He) [RHEL-114162]
  - x86/kexec: Mark machine_kexec() with __nocfi (Baoquan He) [RHEL-114162]
  - x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Baoquan He) [RHEL-114162]
  - x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Baoquan He) [RHEL-114162]
  - x86/kexec: Use correct swap page in swap_pages function (Baoquan He) [RHEL-114162]
  - x86/kexec: Ensure preserve_context flag is set on return to kernel (Baoquan He) [RHEL-114162]
  - x86/kexec: Disable global pages before writing to control page (Baoquan He) [RHEL-114162]
  - x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Baoquan He) [RHEL-114162]
  - x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Baoquan He) [RHEL-114162]
  - x86/kexec: Clean up register usage in relocate_kernel() (Baoquan He) [RHEL-114162]
  - x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Baoquan He) [RHEL-114162]
  - x86/kexec: Drop page_list argument from relocate_kernel() (Baoquan He) [RHEL-114162]
  - x86/kexec: Add data section to relocate_kernel (Baoquan He) [RHEL-114162]
  - x86/kexec: Move relocate_kernel to kernel .data section (Baoquan He) [RHEL-114162]
  - x86/kexec: Invoke copy of relocate_kernel() instead of the original (Baoquan He) [RHEL-114162]
  - x86/kexec: Copy control page into place in machine_kexec_prepare() (Baoquan He) [RHEL-114162]
  - x86/kexec: Allocate PGD for x86_64 transition page tables separately (Baoquan He) [RHEL-114162]
  - x86/kexec: Only swap pages for ::preserve_context mode (Baoquan He) [RHEL-114162]
  - x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Baoquan He) [RHEL-114162]
  - x86/kexec: Clean up and document register use in relocate_kernel_64.S (Baoquan He) [RHEL-114162]
  - x86/kexec: Restore GDT on return from ::preserve_context kexec (Baoquan He) [RHEL-114162]
  - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-44601]
  - tmpfs: add support for multigrain timestamps (Carlos Maiolino) [RHEL-121527]
  - btrfs: convert to multigrain timestamps (Carlos Maiolino) [RHEL-121527]
  - ext4: switch to multigrain timestamps (Carlos Maiolino) [RHEL-121527]
  - xfs: switch to multigrain timestamps (Carlos Maiolino) [RHEL-121527]
  - Documentation: add a new file documenting multigrain timestamps (Carlos Maiolino) [RHEL-121527]
  - fs: add percpu counters for significant multigrain timestamp events (Carlos Maiolino) [RHEL-121527]
  - fs: tracepoints around multigrain timestamp events (Carlos Maiolino) [RHEL-121527]
  - fs: handle delegated timestamps in setattr_copy_mgtime (Carlos Maiolino) [RHEL-121527]
  - fs: have setattr_copy handle multigrain timestamps appropriately (Carlos Maiolino) [RHEL-121527]
  - fs: add infrastructure for multigrain timestamps (Carlos Maiolino) [RHEL-121527]
  - timekeeping: Add percpu counter for tracking floor swap events (Carlos Maiolino) [RHEL-121527]
  - timekeeping: Add interfaces for handling timestamps with a floor value (Carlos Maiolino) [RHEL-121527]
  - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Paolo Abeni) [RHEL-115580]
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Paolo Abeni) [RHEL-115580] {CVE-2025-39955}
  - tcp: fix __tcp_close() to only send RST when required (Paolo Abeni) [RHEL-115580]
  - net: fix segmentation after TCP/UDP fraglist GRO (Paolo Abeni) [RHEL-115580]
  - tcp: call tcp_measure_rcv_mss() for ooo packets (Paolo Abeni) [RHEL-115580]
  - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (Paolo Abeni) [RHEL-115580]
  - tcp: fix passive TFO socket having invalid NAPI ID (Paolo Abeni) [RHEL-115580]
  - tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior (Paolo Abeni) [RHEL-115580]
  - fs: writeback: fix use-after-free in __mark_inode_dirty() (CKI Backport Bot) [RHEL-117211] {CVE-2025-39866}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-152.el10]
changelog:
  - cpumask: Remove unnecessary cpumask_nth_andnot() (Steve Best) [RHEL-122044]
  - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs (Steve Best) [RHEL-122044]
  - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters (Steve Best) [RHEL-122044]
  - resctrl: get rid of pointless debugfs_file_{get,put}() (Steve Best) [RHEL-122044]
  - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem (Steve Best) [RHEL-122044]
  - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex (Steve Best) [RHEL-122044]
  - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl (Steve Best) [RHEL-122044]
  - selftests/resctrl: Discover SNC kernel support and adjust messages (Steve Best) [RHEL-122044]
  - selftests/resctrl: Adjust effective L3 cache size with SNC enabled (Steve Best) [RHEL-122044]
  - selftests/resctrl: Replace magic constants used as array size (Steve Best) [RHEL-122044]
  - selftests/resctrl: Keep results from first test run (Steve Best) [RHEL-122044]
  - selftests/resctrl: Do not compare performance counters and resctrl at low bandwidth (Steve Best) [RHEL-122044]
  - selftests/resctrl: Use cache size to determine "fill_buf" buffer size (Steve Best) [RHEL-122044]
  - selftests/resctrl: Ensure measurements skip initialization of default benchmark (Steve Best) [RHEL-122044]
  - selftests/resctrl: Make benchmark parameter passing robust (Steve Best) [RHEL-122044]
  - selftests/resctrl: Remove unused measurement code (Steve Best) [RHEL-122044]
  - selftests/resctrl: Only support measured read operation (Steve Best) [RHEL-122044]
  - selftests/resctrl: Remove "once" parameter required to be false (Steve Best) [RHEL-122044]
  - selftests/resctrl: Make wraparound handling obvious (Steve Best) [RHEL-122044]
  - selftests/resctrl: Protect against array overflow when reading strings (Steve Best) [RHEL-122044]
  - selftests/resctrl: Protect against array overrun during iMC config parsing (Steve Best) [RHEL-122044]
  - selftests/resctrl: Fix memory overflow due to unhandled wraparound (Steve Best) [RHEL-122044]
  - selftests/resctrl: Print accurate buffer size as part of MBM results (Steve Best) [RHEL-122044]
  - selftests/resctrl: Make functions only used in same file static (Steve Best) [RHEL-122044]
  - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h (Steve Best) [RHEL-122044]
  - x86/resctrl: Move enum resctrl_event_id to resctrl.h (Steve Best) [RHEL-122044]
  - x86/resctrl: Always initialise rid field in rdt_resources_all[] (Steve Best) [RHEL-122044]
  - x86/resctrl: Relax some asm #includes (Steve Best) [RHEL-122044]
  - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() (Steve Best) [RHEL-122044]
  - x86/resctrl: Squelch whitespace anomalies in resctrl core code (Steve Best) [RHEL-122044]
  - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl (Steve Best) [RHEL-122044]
  - fs/resctrl: Add boiler plate for external resctrl code (Steve Best) [RHEL-122044]
  - x86/resctrl: Split trace.h (Steve Best) [RHEL-122044]
  - x86/resctrl: Expand the width of domid by replacing mon_data_bits (Steve Best) [RHEL-122044]
  - x86/resctrl: Add end-marker to the resctrl_event_id enum (Steve Best) [RHEL-122044]
  - x86/resctrl: Move is_mba_sc() out of core.c (Steve Best) [RHEL-122044]
  - x86/resctrl: Drop __init/__exit on assorted symbols (Steve Best) [RHEL-122044]
  - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point (Steve Best) [RHEL-122044]
  - x86/resctrl: Check all domains are offline in resctrl_exit() (Steve Best) [RHEL-122044]
  - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" (Steve Best) [RHEL-122044]
  - x86/resctrl: Remove the limit on the number of CLOSID (Steve Best) [RHEL-122044]
  - x86/resctrl: Optimize cpumask_any_housekeeping() (Steve Best) [RHEL-122044]
  - cpumask: Relax cpumask_any_but() (Steve Best) [RHEL-122044]
  - cpumask: Add cpumask_{first,next}_andnot() API (Steve Best) [RHEL-122044]
  - find: Add find_first_andnot_bit() (Steve Best) [RHEL-122044]
  - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name (Steve Best) [RHEL-122044]
  - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers (Steve Best) [RHEL-122044]
  - x86/resctrl: Move get_config_index() to a header (Steve Best) [RHEL-122044]
  - x86/resctrl: Handle throttle_mode for SMBA resources (Steve Best) [RHEL-122044]
  - x86/resctrl: Move RFTYPE flags to be managed by resctrl (Steve Best) [RHEL-122044]
  - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr (Steve Best) [RHEL-122044]
  - x86/resctrl: Make prefetch_disable_bits belong to the arch code (Steve Best) [RHEL-122044]
  - x86/resctrl: Allow an architecture to disable pseudo lock (Steve Best) [RHEL-122044]
  - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions (Steve Best) [RHEL-122044]
  - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource (Steve Best) [RHEL-122044]
  - x86/resctrl: Move mba_mbps_default_event init to filesystem code (Steve Best) [RHEL-122044]
  - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers (Steve Best) [RHEL-122044]
  - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC (Steve Best) [RHEL-122044]
  - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h (Steve Best) [RHEL-122044]
  - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers (Steve Best) [RHEL-122044]
  - x86/resctrl: Move monitor init work to a resctrl init call (Steve Best) [RHEL-122044]
  - x86/resctrl: Move monitor exit work to a resctrl exit call (Steve Best) [RHEL-122044]
  - x86/resctrl: Add an arch helper to reset one resource (Steve Best) [RHEL-122044]
  - x86/resctrl: Move resctrl types to a separate header (Steve Best) [RHEL-122044]
  - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code (Steve Best) [RHEL-122044]
  - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel (Steve Best) [RHEL-122044]
  - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() (Steve Best) [RHEL-122044]
  - x86/resctrl: Add helper for setting CPU default properties (Steve Best) [RHEL-122044]
  - x86/resctrl: Generate default_ctrl instead of sharing it (Steve Best) [RHEL-122044]
  - x86/resctrl: Add max_bw to struct resctrl_membw (Steve Best) [RHEL-122044]
  - x86/resctrl: Remove data_width and the tabular format (Steve Best) [RHEL-122044]
  - x86/resctrl: Use schema type to determine the schema format string (Steve Best) [RHEL-122044]
  - x86/resctrl: Use schema type to determine how to parse schema values (Steve Best) [RHEL-122044]
  - x86/resctrl: Remove fflags from struct rdt_resource (Steve Best) [RHEL-122044]
  - x86/resctrl: Add a helper to avoid reaching into the arch code resource list (Steve Best) [RHEL-122044]
  - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors (Steve Best) [RHEL-122044]
  - kernfs: Move dput() outside of the RCU section. (Steve Best) [RHEL-122044]
  - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). (Steve Best) [RHEL-122044]
  - kernfs: Use RCU to access kernfs_node::name. (Steve Best) [RHEL-122044]
  - kernfs: Use RCU to access kernfs_node::parent. (Steve Best) [RHEL-122044]
  - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). (Steve Best) [RHEL-122044]
  - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). (Steve Best) [RHEL-122044]
  - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). (Steve Best) [RHEL-122044]
  - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). (Steve Best) [RHEL-122044]
  - x86/resctrl: Document the new "mba_MBps_event" file (Steve Best) [RHEL-122044]
  - x86/resctrl: Add write option to "mba_MBps_event" file (Steve Best) [RHEL-122044]
  - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories (Steve Best) [RHEL-122044]
  - x86/resctrl: Make mba_sc use total bandwidth if local is not supported (Steve Best) [RHEL-122044]
  - x86/resctrl: Compute memory bandwidth for all supported events (Steve Best) [RHEL-122044]
  - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event (Steve Best) [RHEL-122044]
  - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control (Steve Best) [RHEL-122044]
  - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags (Steve Best) [RHEL-122044]
  - x86/resctrl: Use kthread_run_on_cpu() (Steve Best) [RHEL-122044]
  - x86/paravirt: Remove the WBINVD callback (Steve Best) [RHEL-122044]
  - x86/microcode/intel: Remove unnecessary cache writeback and invalidation (Steve Best) [RHEL-122044]
  - x86/resctrl: Support Sub-NUMA cluster mode SNC6 (Steve Best) [RHEL-122044]
  - x86/resctrl: Slightly clean-up mbm_config_show() (Steve Best) [RHEL-122044]
  - cpufreq/amd-pstate: Avoid shadowing ret in amd_pstate_ut_check_driver() (Steve Best) [RHEL-104550]
  - amd-pstate-ut: Reset amd-pstate driver mode after running selftests (Steve Best) [RHEL-104550]
  - cpufreq/amd-pstate: Disable preferred cores on designs with workload classification (Steve Best) [RHEL-104550]
  - cpufreq/amd-pstate: Fix setting of CPPC.min_perf in active mode for performance governor (Steve Best) [RHEL-104550]
  - cpupower: Fix a bug where the -t option of the set subcommand was not working. (Steve Best) [RHEL-110832]
  - pm: cpupower: Fix printing of CORE, CPU fields in cpupower-monitor (Steve Best) [RHEL-110832]
  - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (Steve Best) [RHEL-110832]
  - cpupower: Implement CPU physical core querying (Steve Best) [RHEL-110832]
  - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Fix double free in idxd_setup_wqs() (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Remove improper idxd_free (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Remove __packed from structures (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: ti: Do not enable by default during compile testing (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: sh: Do not enable SH_DMAE_BASE by default during compile testing (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Fix warning for deadcode.deadstore (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: qcom: gpi: Drop unused gpi_write_reg_field() (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: dw-edma: Drop unused dchan2dev() and chan2dev() (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: Add devm_dma_request_chan() (Jerry Snitselaar) [RHEL-117902]
  - dma: dw-edma: Fix build warning in dw_edma_pcie_probe() (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Remove unused pointer and macro (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: sh: rz-dmac: Add RZ/V2H(P) support (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: sh: rz-dmac: Allow for multiple DMACs (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Narrow the restriction on BATCH to ver. 1 only (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: ti: Add NULL check in udma_probe() (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: dw-edma: Add HDMA NATIVE map check (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: ptdma: Remove dead code from pt_dmaengine_register() (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: ptdma: Remove unused pointer dma_cmd_cache (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Fix ->poll() return value (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Add missing cleanups in cleanup internals (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Fix allowing write() from different address spaces (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: ti: k3-udma: Add missing locking (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: Remove device_prep_dma_imm_data from struct dma_device (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: ti: edma: support sw triggered chans in of_edma_xlate() (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: ti: k3-udma: Enable second resource range for BCDMA and PKTDMA (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: Fix typo in comment (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: bcm2835-dma: fix warning when CONFIG_PM=n (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: idxd: Delete unnecessary NULL check (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: Use str_enable_disable-like helpers (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: dw: Switch to LATE_SIMPLE_DEV_PM_OPS() (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: Unify checks in dma_request_chan() (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: Add a comment on why it's okay when kasprintf() fails (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: Use dma_request_channel() instead of __dma_request_channel() (Jerry Snitselaar) [RHEL-117902]
  - dmaengine: Replace dma_request_slave_channel() by dma_request_chan() (Jerry Snitselaar) [RHEL-117902]
  - x86/cpu: Make all all CPUID leaf names consistent (Jerry Snitselaar) [RHEL-117902]
  - x86/fpu: Remove unnecessary CPUID level check (Jerry Snitselaar) [RHEL-117902]
  - x86/fpu: Move CPUID leaf definitions to common code (Jerry Snitselaar) [RHEL-117902]
  - x86/tsc: Remove CPUID "frequency" leaf magic numbers. (Jerry Snitselaar) [RHEL-117902]
  - x86/cpu: Refresh DCA leaf reading code (Jerry Snitselaar) [RHEL-117902]
  - x86/cpu: Remove unnecessary MwAIT leaf checks (Jerry Snitselaar) [RHEL-117902]
  - x86/cpu: Use MWAIT leaf definition (Jerry Snitselaar) [RHEL-117902]
  - crypto: ccp - Use int type to store negative error codes (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Fix incorrect payload size calculation in psp_poulate_hsti() (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Fix typo in psp_populate_hsti function name (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Remove redundant __GFP_ZERO (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Fix checks for SNP_VLEK_LOAD input buffer length (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Add support to enable CipherTextHiding on SNP_INIT_EX (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Introduce new API interface to indicate SEV-SNP Ciphertext hiding feature (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Add support for SNP_FEATURE_INFO command (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Cache SEV platform status and platform state (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - New bit-field definitions for SNP_PLATFORM_STATUS command (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - reduce stack usage in ccp_run_aes_gcm_cmd (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (Vladis Dronov) [RHEL-106909 RHEL-107608] {CVE-2025-38581}
  - crypto: ccp - Fix locking on alloc failure handling (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Fix SNP panic notifier unregistration (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Fix dereferencing uninitialized error pointer (Vladis Dronov) [RHEL-106909 RHEL-107608] {CVE-2025-39729}
  - crypto: ccp - Add missing bootloader info reg for pspv6 (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - KVM: SVM: Add missing member in SNP_LAUNCH_START command structure (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Add missing tee info reg for teev2 (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Add missing bootloader info reg for pspv5 (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - dt-bindings: crypto: Convert amd,ccp-seattle-v1a to DT schema (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Add support for PCI device 0x17D8 (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Include crypto/utils.h for crypto_memneq (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Fix __sev_snp_shutdown_locked (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Add missing header inclusions (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Silence may-be-uninitialized warning in sev_ioctl_do_pdh_export (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Move SEV/SNP Platform initialization to KVM (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Add new SEV/SNP platform shutdown API (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Register SNP panic notifier only if SNP is enabled (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Reset TMR size at SNP Shutdown (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Vladis Dronov) [RHEL-106909 RHEL-107608]
  - iommu/amd: Allow matching ACPI HID devices without matching UIDs (Jerry Snitselaar) [RHEL-89838]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-153.el10]
changelog:
  - tracing/osnoise: Replace kmalloc + copy_from_user with memdup_user_nul (Tomas Glozar) [RHEL-117874]
  - tracing/osnoise: Fix slab-out-of-bounds in _parse_integer_limit() (Tomas Glozar) [RHEL-117874] {CVE-2025-39974}
  - tracing/osnoise: Use for_each_online_cpu() instead of for_each_cpu() (Tomas Glozar) [RHEL-117874]
  - tracing/osnoise: Fix null-ptr-deref in bitmap_parselist() (Tomas Glozar) [RHEL-117874] {CVE-2025-39887}
  - tracing: Switch trace_osnoise.c code over to use guard() and __free() (Tomas Glozar) [RHEL-117874]
  - osnoise: provide quiescent states (Tomas Glozar) [RHEL-117874]
  - rtla: Check pkg-config install (Tomas Glozar) [RHEL-117874]
  - rtla: Define __NR_sched_setattr for LoongArch (Tomas Glozar) [RHEL-117874]
  - rtla: Add the ability to create ctags and etags (Tomas Glozar) [RHEL-117874]
  - Documentation/rtla: Add include common_appendix.rst (Tomas Glozar) [RHEL-117874]
  - Documentation/rtla: Include BPF sample collection (Tomas Glozar) [RHEL-117874]
  - Documentation/rtla: Fix typo in common_timerlat_description.rst (Tomas Glozar) [RHEL-117874]
  - Documentation/rtla: Fix typo in rtla-timerlat.rst (Tomas Glozar) [RHEL-117874]
  - Documentation/rtla: Fix duplicate text about timerlat tracer (Tomas Glozar) [RHEL-117874]
  - mei: more prints with client prefix (Steve Best) [RHEL-113185]
  - mei: bus: use cldev in prints (Steve Best) [RHEL-113185]
  - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (Steve Best) [RHEL-113185]
  - mei: vsc: Fix "BUG: Invalid wait context" lockdep error (Steve Best) [RHEL-113185]
  - mei: vsc: Run event callback from a workqueue (Steve Best) [RHEL-113185]
  - mei: vsc: Unset the event callback on remove and probe errors (Steve Best) [RHEL-113185]
  - mei: vsc: Event notifier fixes (Steve Best) [RHEL-113185]
  - mei: vsc: Destroy mutex after freeing the IRQ (Steve Best) [RHEL-113185]
  - mei: vsc: Use vsc_tp_remove() as shutdown handler (Steve Best) [RHEL-113185]
  - mei: vsc: Don't call vsc_tp_reset() a second time on shutdown (Steve Best) [RHEL-113185]
  - mei: vsc: Don't re-init VSC from mei_vsc_hw_reset() on stop (Steve Best) [RHEL-113185]
  - mei: vsc: Drop unused vsc_tp_request_irq() and vsc_tp_free_irq() (Steve Best) [RHEL-113185]
  - mei: bus: replace sprintf/scnprintf with sysfs_emit in show functions (Steve Best) [RHEL-113185]
  - mei: vsc: Cast tx_buf to (__be32 *) when passed to cpu_to_be32_array() (Steve Best) [RHEL-113185]
  - mei: Cast the cb->ext_hdr allocation type (Steve Best) [RHEL-113185]
  - mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type (Steve Best) [RHEL-113185]
  - mei: vsc: Fix fortify-panic caused by invalid counted_by() use (Steve Best) [RHEL-113185]
  - mei: me: add panther lake H DID (Steve Best) [RHEL-113185]
  - mei: Remove unused functions (Steve Best) [RHEL-113185]
  - mei: vsc: Use "wakeuphostint" when getting the host wakeup GPIO (Steve Best) [RHEL-113185]
  - mei: vsc: Fix typo "maintstepping" -> "mainstepping" (Steve Best) [RHEL-113185]
  - mei: vsc: Improve error logging in vsc_identify_silicon() (Steve Best) [RHEL-113185]
  - mei: vsc: Do not re-enable interrupt from vsc_tp_reset() (Steve Best) [RHEL-113185]
  - mei: bus: Reorganize kerneldoc parameter names (Steve Best) [RHEL-113185]
  - PM: EM: Add function for registering a PD without capacity update (Steve Best) [RHEL-110833]
  - cpufreq: intel_pstate: Support Clearwater Forest OOB mode (Steve Best) [RHEL-110833]
  - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (Steve Best) [RHEL-110833]
  - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (Steve Best) [RHEL-110833]
  - cpufreq: intel_pstate: EAS: Increase cost for CPUs using L3 cache (Steve Best) [RHEL-110833]
  - cpufreq: intel_pstate: EAS support for hybrid platforms (Steve Best) [RHEL-110833]
  - PM: EM: Introduce em_adjust_cpu_capacity() (Steve Best) [RHEL-110833]
  - PM: EM: Move CPU capacity check to em_adjust_new_capacity() (Steve Best) [RHEL-110833]
  - PM: EM: Fix potential division-by-zero error in em_compute_costs() (Steve Best) [RHEL-110833]
  - PM: EM: Address RCU-related sparse warnings (Steve Best) [RHEL-110833]
  - PM: EM: Consify two parameters of em_dev_register_perf_domain() (Steve Best) [RHEL-110833]
  - PM: EM: use kfree_rcu() to simplify the code (Steve Best) [RHEL-110833]
  - PM: EM: Slightly reduce em_check_capacity_update() overhead (Steve Best) [RHEL-110833]
  - PM: EM: Drop unused parameter from em_adjust_new_capacity() (Steve Best) [RHEL-110833]
  - cpufreq: intel_pstate: Populate the cpu_capacity sysfs entries (Steve Best) [RHEL-110833]
  - arch_topology: Relocate cpu_scale to topology.[h|c] (Steve Best) [RHEL-110833]
  - arm64/sysreg: Fix GIC CDEOI instruction encoding (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Update TCR_EL1 register (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Add validation checks to sysreg header generation script (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Correct sign definitions for EIESB and DoubleLock (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Fix and tidy up sysreg field definitions (Mark Salter) [RHEL-101059]
  - arm64: cputype: Remove duplicate Cortex-X1C definitions (Mark Salter) [RHEL-101059]
  - arm64/hwcap: Add hwcap for FEAT_LSFE (Mark Salter) [RHEL-101059]
  - arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE (Mark Salter) [RHEL-101059]
  - arm64: uapi: Provide correct __BITS_PER_LONG for the compat vDSO (Mark Salter) [RHEL-101059]
  - arm64/gcs: task_gcs_el0_enable() should use passed task (Mark Salter) [RHEL-101059]
  - arm64: signal: Remove ISB when resetting POR_EL0 (Mark Salter) [RHEL-101059]
  - arm64/mm: Drop redundant addr increment in set_huge_pte_at() (Mark Salter) [RHEL-101059]
  - arm64: Mark kernel as tainted on SAE and SError panic (Mark Salter) [RHEL-101059]
  - arm64/gcs: Don't call gcs_free() when releasing task_struct (Mark Salter) [RHEL-101059]
  - arm64: fix unnecessary rebuilding when CONFIG_DEBUG_EFI=y (Mark Salter) [RHEL-101059]
  - arm64/mm: Optimize loop to reduce redundant operations of contpte_ptep_get (Mark Salter) [RHEL-101059]
  - arm64: pi: use 'targets' instead of extra-y in Makefile (Mark Salter) [RHEL-101059]
  - arm64: Kconfig: Keep selects somewhat alphabetically ordered (Mark Salter) [RHEL-101059]
  - arm64: Implement HAVE_LIVEPATCH (Mark Salter) [RHEL-101059]
  - arm64: stacktrace: Implement arch_stack_walk_reliable() (Mark Salter) [RHEL-101059]
  - arm64: Handle BRBE booting requirements (Mark Salter) [RHEL-101059]
  - arm64: el2_setup.h: Make __init_el2_fgt labels consistent, again (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add BRBE registers and fields (Mark Salter) [RHEL-101059]
  - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (Mark Salter) [RHEL-101059]
  - arm64/module: Use text-poke API for late relocations. (Mark Salter) [RHEL-101059]
  - arm64: Detect FEAT_DoubleFault2 (Mark Salter) [RHEL-101059]
  - arm64: Detect FEAT_SCTLR2 (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Add THE/ASID2 controls to TCR2_ELx (Mark Salter) [RHEL-101059]
  - arm64: smp: Fix pNMI setup after GICv5 rework (Mark Salter) [RHEL-101059]
  - arm64: Add support for GICv5 GSB barriers (Mark Salter) [RHEL-101059]
  - arm64: smp: Support non-SGIs for IPIs (Mark Salter) [RHEL-101059]
  - arm64: cpucaps: Add GICv5 CPU interface (GCIE) capability (Mark Salter) [RHEL-101059]
  - arm64: cpucaps: Rename GICv3 CPU interface capability (Mark Salter) [RHEL-101059]
  - arm64: Disable GICv5 read/write/instruction traps (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICH_HFGITR_EL2 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICH_HFGWTR_EL2 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICH_HFGRTR_EL2 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICC_IDR0_EL1 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICC_PCR_EL1 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICC_CR0_EL1 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICC_PPI_{C/S}PENDR<n>_EL1 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICC_PPI_{C/S}ACTIVER<n>_EL1 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICC_PPI_ENABLER<n>_EL1 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICC_PPI_HMR<n>_EL1 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICC_ICSR_EL1 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add ICC_PPI_PRIORITY<n>_EL1 (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Add GCIE field to ID_AA64PFR2_EL1 (Mark Salter) [RHEL-101059]
  - dt-bindings: interrupt-controller: Add Arm GICv5 (Mark Salter) [RHEL-101059]
  - arm64: remove CONFIG_VMAP_STACK checks from entry code (Mark Salter) [RHEL-101059]
  - arm64: remove CONFIG_VMAP_STACK checks from SDEI stack handling (Mark Salter) [RHEL-101059]
  - arm64: remove CONFIG_VMAP_STACK checks from stacktrace overflow logic (Mark Salter) [RHEL-101059]
  - arm64: remove CONFIG_VMAP_STACK conditionals from traps overflow stack (Mark Salter) [RHEL-101059]
  - arm64: remove CONFIG_VMAP_STACK conditionals from irq stack setup (Mark Salter) [RHEL-101059]
  - arm64: Remove CONFIG_VMAP_STACK conditionals from THREAD_SHIFT and THREAD_ALIGN (Mark Salter) [RHEL-101059]
  - arm64: efi: Remove CONFIG_VMAP_STACK check (Mark Salter) [RHEL-101059]
  - arm64: Mandate VMAP_STACK (Mark Salter) [RHEL-101059]
  - arm64/debug: Drop redundant DBG_MDSCR_* macros (Mark Salter) [RHEL-101059]
  - kselftest/arm64/mte: Add MTE_STORE_ONLY testcases (Mark Salter) [RHEL-101059]
  - kselftest/arm64/mte: Preparation for mte store only test (Mark Salter) [RHEL-101059]
  - kselftest/arm64/abi: Add MTE_STORE_ONLY feature hwcap test (Mark Salter) [RHEL-101059]
  - arm64/hwcaps: Add MTE_STORE_ONLY hwcaps (Mark Salter) [RHEL-101059]
  - arm64/kernel: Support store-only mte tag check (Mark Salter) [RHEL-101059]
  - prctl: Introduce PR_MTE_STORE_ONLY (Mark Salter) [RHEL-101059]
  - arm64/cpufeature: Add MTE_STORE_ONLY feature (Mark Salter) [RHEL-101059]
  - kselftest/arm64/mte: Add mtefar tests on check_mmap_options (Mark Salter) [RHEL-101059]
  - kselftest/arm64/mte: Refactor check_mmap_option test (Mark Salter) [RHEL-101059]
  - kselftest/arm64/mte: Add verification for address tag in signal handler (Mark Salter) [RHEL-101059]
  - kselftest/arm64/mte: Add address tag related macro and function (Mark Salter) [RHEL-101059]
  - kselftest/arm64/mte: Check MTE_FAR feature is supported (Mark Salter) [RHEL-101059]
  - kselftest/arm64/mte: Register mte signal handler with SA_EXPOSE_TAGBITS (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Add MTE_FAR hwcap test (Mark Salter) [RHEL-101059]
  - arm64: Report address tag when FEAT_MTE_TAGGED_FAR is supported (Mark Salter) [RHEL-101059]
  - arm64/cpufeature: Add FEAT_MTE_TAGGED_FAR feature (Mark Salter) [RHEL-101059]
  - ACPI: Suppress misleading SPCR console message when SPCR table is absent (Mark Salter) [RHEL-101059]
  - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (Mark Salter) [RHEL-101059]
  - arm64: Add BBM Level 2 cpu feature (Mark Salter) [RHEL-101059]
  - arm64: cpufeature: Introduce MATCH_ALL_EARLY_CPUS capability type (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Set default OUTPUT path when undefined (Mark Salter) [RHEL-101059]
  - kselftest/arm64: fp-ptrace: Adjust to new inactive mode behaviour (Mark Salter) [RHEL-101059]
  - kselftest/arm64: fp-ptrace: Adjust to new VL change behaviour (Mark Salter) [RHEL-101059]
  - kselftest/arm64: tpidr2: Adjust to new clone() behaviour (Mark Salter) [RHEL-101059]
  - kselftest/arm64: fp-ptrace: Fix expected FPMR value when PSTATE.SM is changed (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Try harder to generate different keys during PAC tests (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Corrupt P0 in the irritator when testing SSVE (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Add FPMR coverage to fp-ptrace (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Expand the set of ZA writes fp-ptrace does (Mark Salter) [RHEL-101059]
  - kselftets/arm64: Use flag bits for features in fp-ptrace assembler code (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Enable build of PAC tests with LLVM=1 (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Check that SVCR is 0 in signal handlers (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Fix printf() compiler warnings in the arm64 syscall-abi.c tests (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Fix printf() warning in the arm64 MTE prctl() test (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Fix printf() compiler warnings in the arm64 fp tests (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Fix build with stricter assemblers (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Test signal handler state modification in fp-stress (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Provide a SIGUSR1 handler in the kernel mode FP stress test (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Implement irritators for ZA and ZT (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Remove unused ADRs from irritator handlers (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Correct misleading comments on fp-stress irritators (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Poll less often while waiting for fp-stress children (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Increase frequency of signal delivery in fp-stress (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Fix encoding for SVE B16B16 test (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Use ksft_perror() to log MTE failures (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Log fp-stress child startup errors to stdout (Mark Salter) [RHEL-101059]
  - kselftest/arm64: Fail the overall fp-stress test if any test fails (Mark Salter) [RHEL-101059]
  - kselftest/arm64: mte: fix printf type warnings about longs (Mark Salter) [RHEL-101059]
  - kselftest/arm64: mte: fix printf type warnings about pointers (Mark Salter) [RHEL-101059]
  - kselftest/arm64: mte: fix printf type warnings about __u64 (Mark Salter) [RHEL-101059]
  - kselftest/arm64: mte: use string literal for printf-style functions (Mark Salter) [RHEL-101059]
  - kselftest/arm64: mte: use proper SKIP syntax (Mark Salter) [RHEL-101059]
  - kselftest/arm64: hwcap: fix f8dp2 cpuinfo name (Mark Salter) [RHEL-101059]
  - kselftest/arm64: signal: drop now redundant GNU_SOURCE definition (Mark Salter) [RHEL-101059]
  - arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() (Mark Salter) [RHEL-101059]
  - arm64/mm: Drop wrong writes into TCR2_EL1 (Mark Salter) [RHEL-101059]
  - arm64: poe: Handle spurious Overlay faults (Mark Salter) [RHEL-101059]
  - arm64: Filter out SME hwcaps when FEAT_SME isn't implemented (Mark Salter) [RHEL-101059]
  - arm64: move smp_send_stop() cpu mask off stack (Mark Salter) [RHEL-101059]
  - arm64/gcs: Don't try to access GCS registers if arm64.nogcs is enabled (Mark Salter) [RHEL-101059]
  - arm64: Unconditionally select CONFIG_JUMP_LABEL (Mark Salter) [RHEL-101059]
  - arm64: efi: Fix KASAN false positive for EFI runtime stack (Mark Salter) [RHEL-101059]
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Mark Salter) [RHEL-101059]
  - arm64/gcs: Don't call gcs_free() during flush_gcs() (Mark Salter) [RHEL-101059]
  - arm64: Restrict pagetable teardown to avoid false warning (Mark Salter) [RHEL-101059]
  - docs: arm64: Fix ICC_SRE_EL2 register typo in booting.rst (Mark Salter) [RHEL-101059]
  - arm64: Expose AIDR_EL1 via sysfs (Mark Salter) [RHEL-101059]
  - arm64/cpufeature: Add missing id_aa64mmfr4 feature reg update (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Add layout for VNCR_EL2 (Mark Salter) [RHEL-101059]
  - arm64: Add FEAT_FGT2 capability (Mark Salter) [RHEL-101059]
  - arm64: Add syndrome information for trapped LD64B/ST64B{,V,V0} (Mark Salter) [RHEL-101059]
  - arm64: tools: Resync sysreg.h (Mark Salter) [RHEL-101059]
  - arm64: Remove duplicated sysreg encodings (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Add system instructions trapped by HFGIRT2_EL2 (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Add registers trapped by HDFG{R,W}TR2_EL2 (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Add registers trapped by HFG{R,W}TR2_EL2 (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Update CPACR_EL1 description (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Update TRBIDR_EL1 description (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Update PMSIDR_EL1 description (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Update ID_AA64PFR0_EL1 description (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Replace HFGxTR_EL2 with HFG{R,W}TR_EL2 (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Add layout for HCR_EL2 (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Update ID_AA64MMFR4_EL1 description (Mark Salter) [RHEL-101059]
  - arm64: sysreg: Add ID_AA64ISAR1_EL1.LS64 encoding for FEAT_LS64WB (Mark Salter) [RHEL-101059]
  - arm64: vdso: Use __arch_counter_get_cntvct() (Mark Salter) [RHEL-101059]
  - arm64/boot: Disallow BSS exports to startup code (Mark Salter) [RHEL-101059]
  - arm64/boot: Move global CPU override variables out of BSS (Mark Salter) [RHEL-101059]
  - arm64/boot: Move init_pgdir[] and init_idmap_pgdir[] into __pi_ namespace (Mark Salter) [RHEL-101059]
  - arm64: mm: Drop redundant check in pmd_trans_huge() (Mark Salter) [RHEL-101059]
  - arm64/mm: Permit lazy_mmu_mode to be nested (Mark Salter) [RHEL-101059]
  - arm64/mm: Disable barrier batching in interrupt contexts (Mark Salter) [RHEL-101059]
  - arm64/mm: Batch barriers when updating kernel mappings (Mark Salter) [RHEL-101059]
  - mm/vmalloc: Enter lazy mmu mode while manipulating vmalloc ptes (Mark Salter) [RHEL-101059]
  - arm64/mm: Support huge pte-mapped pages in vmap (Mark Salter) [RHEL-101059]
  - mm/vmalloc: Gracefully unmap huge ptes (Mark Salter) [RHEL-101059]
  - mm/vmalloc: Warn on improper use of vunmap_range() (Mark Salter) [RHEL-101059]
  - arm64/mm: Hoist barriers out of set_ptes_anysz() loop (Mark Salter) [RHEL-101059]
  - arm64: hugetlb: Use __set_ptes_anysz() and __ptep_get_and_clear_anysz() (Mark Salter) [RHEL-101059]
  - arm64/mm: Refactor __set_ptes() and __ptep_get_and_clear() (Mark Salter) [RHEL-101059]
  - mm/page_table_check: Batch-check pmds/puds just like ptes (Mark Salter) [RHEL-101059]
  - arm64: hugetlb: Refine tlb maintenance scope (Mark Salter) [RHEL-101059]
  - arm64: hugetlb: Cleanup huge_pte size discovery mechanisms (Mark Salter) [RHEL-101059]
  - arm64: pageattr: Explicitly bail out when changing permissions for vmalloc_huge mappings (Mark Salter) [RHEL-101059]
  - arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX (Mark Salter) [RHEL-101059]
  - arm64/mm: Remove randomization of the linear map (Mark Salter) [RHEL-101059]
  - arm64/cpuinfo: only show one cpu's info in c_show() (Mark Salter) [RHEL-101059]
  - arm64: Extend pr_crit message on invalid FDT (Mark Salter) [RHEL-101059]
  - arm64: Kconfig: remove unnecessary selection of CRC32 (Mark Salter) [RHEL-101059]
  - arm64: Add missing includes for mem_encrypt (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Allow CONFIG_ARM64_SME to be selected (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: ptrace: Gracefully handle errors (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: ptrace: Mandate SVE payload for streaming-mode state (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: ptrace: Do not present register data for inactive mode (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: ptrace: Save task state before generating SVE header (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: ptrace/prctl: Ensure VL changes leave task in a valid state (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: ptrace/prctl: Ensure VL changes do not resurrect stale data (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Make clone() compatible with ZA lazy saving (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Clear PSTATE.SM during clone() (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Consistently preserve FPSIMD state during clone() (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Remove redundant task->mm check (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: signal: Use SMSTOP behaviour in setup_return() (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Add task_smstop_sm() (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Factor out {sve,sme}_state_size() helpers (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Clarify sve_sync_*() functions (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: ptrace: Consistently handle partial writes to NT_ARM_(S)SVE (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: signal: Consistently read FPSIMD context (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: signal: Clear PSTATE.SM when restoring FPSIMD frame only (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Avoid warning when sve_to_fpsimd() is unused (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: signal: Clear TPIDR2 when delivering signals (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: signal: Simplify preserve_tpidr2_context() (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: signal: Always save+flush state early (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: signal32: Always save+flush state early (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Add fpsimd_save_and_flush_current_state() (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Fix merging of FPSIMD state during signal return (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Reset FPMR upon exec() (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Don't corrupt FPMR when streaming mode changes (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Discard stale CPU state when handling SME traps (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Remove opportunistic freeing of SME state (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Remove redundant SVE trap manipulation (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Remove unused fpsimd_force_sync_to_sve() (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Avoid RES0 bits in the SME trap handler (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Avoid unnecessary per-CPU buffers for EFI runtime calls (Mark Salter) [RHEL-101059]
  - arm64: enable PREEMPT_LAZY (Mark Salter) [RHEL-101059]
  - arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent wrong idmap generation (Mark Salter) [RHEL-101059]
  - arm64: Don't call NULL in do_compat_alignment_fixup() (Mark Salter) [RHEL-101059]
  - arm64: mm: Drop dead code for pud special bit handling (Mark Salter) [RHEL-101059]
  - arm64: mops: Do not dereference src reg for a set operation (Mark Salter) [RHEL-101059]
  - arm64: mm: Correct the update of max_pfn (Mark Salter) [RHEL-101059]
  - arm64: mm: Don't use %pK through printk (Mark Salter) [RHEL-101059]
  - arm64/fpsimd: Remove unused declaration fpsimd_kvm_prepare() (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Enforce whole word match for open/close tokens (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Fix unbalanced closing block (Mark Salter) [RHEL-101059]
  - arm64/mm: Define PTDESC_ORDER (Mark Salter) [RHEL-101059]
  - arm64/kernel: Always use level 2 or higher for early mappings (Mark Salter) [RHEL-101059]
  - arm64/hugetlb: Consistently use pud_sect_supported() (Mark Salter) [RHEL-101059]
  - arm64/mm: Convert __pte_to_phys() and __phys_to_pte_val() as functions (Mark Salter) [RHEL-101059]
  - arm64/mm: Drop PXD_TABLE_BIT (Mark Salter) [RHEL-101059]
  - arm64/mm: Check pmd_table() in pmd_trans_huge() (Mark Salter) [RHEL-101059]
  - arm64/mm: Check PUD_TYPE_TABLE in pud_bad() (Mark Salter) [RHEL-101059]
  - arm64/mm: Check PXD_TYPE_TABLE in [p4d|pgd]_bad() (Mark Salter) [RHEL-101059]
  - arm64/mm: Clear PXX_TYPE_MASK and set PXD_TYPE_SECT in [pmd|pud]_mkhuge() (Mark Salter) [RHEL-101059]
  - arm64/mm: Clear PXX_TYPE_MASK in mk_[pmd|pud]_sect_prot() (Mark Salter) [RHEL-101059]
  - arm64/ptdump: Test PMD_TYPE_MASK for block mapping (Mark Salter) [RHEL-101059]
  - arm64: cputype: Add comments about Qualcomm Kryo 5XX and 6XX cores (Mark Salter) [RHEL-101059]
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Move POR_EL0_INIT to asm/por.h (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Rename POE_RXW to POE_RWX (Mark Salter) [RHEL-101059]
  - arm64/sysreg: Improve PIR/POR helpers (Mark Salter) [RHEL-101059]
  - arm64: lib: Use MOPS for usercopy routines (Mark Salter) [RHEL-101059]
  - arm64: mm: Handle PAN faults on uaccess CPY* instructions (Mark Salter) [RHEL-101059]
  - arm64: extable: Add fixup handling for uaccess CPY* instructions (Mark Salter) [RHEL-101059]
  - arm64: mm: Populate vmemmap at the page level if not section aligned (Mark Salter) [RHEL-101059]
  - arm64: hugetlb: Fix flush_hugetlb_tlb_range() invalidation level (Mark Salter) [RHEL-101059]
  - arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes (Mark Salter) [RHEL-101059]
  - mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear() (Mark Salter) [RHEL-101059]
  - s390/mm/hugetlbfs: Remove huge_pte_none() / huge_pte_none_mostly() (Mark Salter) [RHEL-101059]
  - arm64: rust: clean Rust 1.85.0 warning using softfloat target (Mark Salter) [RHEL-101059]
  - redhat/configs: automotive: Disable VLAN_8021Q_GVRP config (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable DCB and MPLS configs (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable IEEE 802.15.4 config (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable various network classification features (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable the SMBFS file system (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable Myricom network adapters (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable USB4 Ethernet config (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable the Mellanox SwitchX core driver (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable network storage related protocols (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable lightweight tunneling with BPF (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable RADOS block device configs (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable switchdev driver framework (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable network packet generator (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable NET_CLS_ACT and PSAMPLE configs (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable BPF STREAM_PARSER (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable Open vSwitch and NET_NSH configs (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable IP Virtual Server configs (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable IP set support (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable TLS Protocol (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable Advanced TCP Congestion Control (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable XDP Socket Protocol (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: Disable unsafe queuing disciplines (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable wireless network and it's dependencies (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable the SCTP Protocol (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable TIPC Protocol (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable L2TP Protocol (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable MRP/8021Q_MVRP Protocol (Dorinda Bassey) [RHEL-85959]
  - redhat/configs: automotive: Disable IPsec Protocols and XFRM (Dorinda Bassey) [RHEL-85959]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-154.el10]
changelog:
  - net/smc: Remove validation of reserved bits in CLC Decline message (Mete Durlu) [RHEL-124196]
  - powerpc/pseries: Define __u{8,32} types in papr_hvpipe_hdr struct (Mamatha Inamdar) [RHEL-101959]
  - powerpc/pseries: HVPIPE changes to support migration (Mamatha Inamdar) [RHEL-101959]
  - powerpc/pseries: Enable hvpipe with ibm,set-system-parameter RTAS (Mamatha Inamdar) [RHEL-101959]
  - powerpc/pseries: Enable HVPIPE event message interrupt (Mamatha Inamdar) [RHEL-101959]
  - powerpc/pseries: Wakeup hvpipe FD when the payload is pending (Mamatha Inamdar) [RHEL-101959]
  - powerpc/pseries: Receive payload with ibm,receive-hvpipe-msg RTAS (Mamatha Inamdar) [RHEL-101959]
  - powerpc/pseries: Send payload with ibm,send-hvpipe-msg RTAS (Mamatha Inamdar) [RHEL-101959]
  - powerpc/pseries: Add papr-hvpipe char driver for HVPIPE interfaces (Mamatha Inamdar) [RHEL-101959]
  - powerpc/pseries: Define HVPIPE specific macros (Mamatha Inamdar) [RHEL-101959]
  - powerpc/pseries: Define papr-hvpipe ioctl (Mamatha Inamdar) [RHEL-101959]
  - Documentation: ioctl-number: Fix linuxppc-dev mailto link (Mamatha Inamdar) [RHEL-101959]
  - md: add legacy_async_del_gendisk mode (Nigel Croxon) [RHEL-123668]
  - lib/raid6: update recov_rvv.c zero page usage (Nigel Croxon) [RHEL-123668]
  - md: Don't clear MD_CLOSING until mddev is freed (Nigel Croxon) [RHEL-123668]
  - md: fix mssing blktrace bio split events (Nigel Croxon) [RHEL-123668]
  - md: factor out a helper raid_is_456() (Nigel Croxon) [RHEL-123668]
  - md: add a new parameter 'offset' to md_super_write() (Nigel Croxon) [RHEL-123668]
  - md: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-123668]
  - md/raid5: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-123668]
  - md/raid10: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-123668]
  - md/raid1: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-123668]
  - md/raid1: check bitmap before behind write (Nigel Croxon) [RHEL-123668]
  - md/md-bitmap: handle the case bitmap is not enabled before end_sync() (Nigel Croxon) [RHEL-123668]
  - md/md-bitmap: handle the case bitmap is not enabled before start_sync() (Nigel Croxon) [RHEL-123668]
  - md/md-bitmap: add md_bitmap_registered/enabled() helper (Nigel Croxon) [RHEL-123668]
  - md/md-bitmap: add a new parameter 'flush' to bitmap_ops->enabled (Nigel Croxon) [RHEL-123668]
  - md/md-bitmap: merge md_bitmap_group into bitmap_operations (Nigel Croxon) [RHEL-123668]
  - md/md-bitmap: remove the parameter 'init' for bitmap_ops->resize() (Nigel Croxon) [RHEL-123668]
  - md: prevent incorrect update of resync/recovery offset (Nigel Croxon) [RHEL-123668]
  - md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-123668]
  - md: fix sync_action incorrect display during resync (Nigel Croxon) [RHEL-123668]
  - md: add helper rdev_needs_recovery() (Nigel Croxon) [RHEL-123668]
  - md: keep recovery_cp in mdp_superblock_s (Nigel Croxon) [RHEL-123668]
  - md: make rdev_addable usable for rcu mode (Nigel Croxon) [RHEL-123668] {CVE-2025-38621}
  - md/raid1: remove struct pool_info and related code (Nigel Croxon) [RHEL-123668]
  - md/raid1: change r1conf->r1bio_pool to a pointer type (Nigel Croxon) [RHEL-123668]
  - md: rename recovery_cp to resync_offset (Nigel Croxon) [RHEL-123668]
  - md/md-cluster: handle REMOVE message earlier (Nigel Croxon) [RHEL-123668]
  - md: fix create on open mddev lifetime regression (Nigel Croxon) [RHEL-123668]
  - lib/raid6: replace custom zero page with ZERO_PAGE (Nigel Croxon) [RHEL-123668]
  - md: call del_gendisk in control path (Nigel Croxon) [RHEL-123668]
  - redhat/configs: enable NXP S32 on aarch64 autmotive (Alessandro Carminati) [RHEL-124951]
  - dm vdo: return error on corrupted metadata in start_restoring_volume functions (Benjamin Marzinski) [RHEL-119008]
  - dm: fix NULL pointer dereference in __dm_suspend() (Benjamin Marzinski) [RHEL-119008]
  - dm: fix queue start/stop imbalance under suspend/load/resume races (Benjamin Marzinski) [RHEL-119008]
  - dm-raid: don't set io_min and io_opt for raid1 (Benjamin Marzinski) [RHEL-119008]
  - dm-integrity: limit MAX_TAG_SIZE to 255 (Benjamin Marzinski) [RHEL-119008]
  - dm-stripe: fix a possible integer overflow (Benjamin Marzinski) [RHEL-119008]
  - dm: set DM_TARGET_PASSES_CRYPTO feature for dm-thin (Benjamin Marzinski) [RHEL-119008]
  - dm-thin: update the documentation (Benjamin Marzinski) [RHEL-119008]
  - dm-raid: do not include dm-core.h (Benjamin Marzinski) [RHEL-119008]
  - vdo: omit need_resched() before cond_resched() (Benjamin Marzinski) [RHEL-119008]
  - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (Benjamin Marzinski) [RHEL-119008]
  - dm-verity: remove support for asynchronous hashes (Benjamin Marzinski) [RHEL-119008]
  - dm-mpath: don't print the "loaded" message if registering fails (Benjamin Marzinski) [RHEL-119008]
  - dm-mpath: make dm_unregister_path_selector return void (Benjamin Marzinski) [RHEL-119008]
  - dm: ima: avoid extra calls to strlen() (Benjamin Marzinski) [RHEL-119008]
  - dm: Simplify dm_io_complete() (Benjamin Marzinski) [RHEL-119008]
  - dm: Remove unnecessary return in dm_zone_endio() (Benjamin Marzinski) [RHEL-119008]
  - dm raid: add support for resync w/o metadata devices (Benjamin Marzinski) [RHEL-119008]
  - dm-flakey: Fix corrupt_bio_byte setup checks (Benjamin Marzinski) [RHEL-119008]
  - dm-table: fix checking for rq stackable devices (Benjamin Marzinski) [RHEL-119008]
  - dm-bufio: fix sched in atomic context (Benjamin Marzinski) [RHEL-119008]
  - dm-raid: fix variable in journal device check (Benjamin Marzinski) [RHEL-119008]
  - dm-stripe: small code cleanup (Benjamin Marzinski) [RHEL-119008]
  - dm-verity: fix a memory leak if some arguments are specified multiple times (Benjamin Marzinski) [RHEL-119008]
  - dm-mirror: fix a tiny race condition (Benjamin Marzinski) [RHEL-119008]
  - dm-table: check BLK_FEAT_ATOMIC_WRITES inside limits_lock (Benjamin Marzinski) [RHEL-119008]
  - dm-zone: Use bdev_*() helper functions where applicable (Benjamin Marzinski) [RHEL-119008]
  - dm vdo indexer: don't read request structure after enqueuing (Benjamin Marzinski) [RHEL-119008]
  - dm: pass through operations on wrapped inline crypto keys (Benjamin Marzinski) [RHEL-119008]
  - blk-crypto: export wrapped key functions (Benjamin Marzinski) [RHEL-119008]
  - dm-table: Set BLK_FEAT_ATOMIC_WRITES for target queue limits (Benjamin Marzinski) [RHEL-119008]
  - dm-flakey: make corrupting read bios work (Benjamin Marzinski) [RHEL-119008]
  - dm-flakey: remove useless ERROR_READS check in flakey_end_io (Benjamin Marzinski) [RHEL-119008]
  - dm-flakey: error all IOs when num_features is absent (Benjamin Marzinski) [RHEL-119008]
  - dm-flakey: Clean up parsing messages (Benjamin Marzinski) [RHEL-119008]
  - dm: remove unneeded kvfree from alloc_targets (Benjamin Marzinski) [RHEL-119008]
  - dm-bufio: remove maximum age based eviction (Benjamin Marzinski) [RHEL-119008]
  - dm-verity: use softirq context only when !need_resched() (Benjamin Marzinski) [RHEL-119008]
  - dm: lock limits when reading them (Benjamin Marzinski) [RHEL-119008]
  - dm: use generic functions instead of disable_discard and disable_write_zeroes (Benjamin Marzinski) [RHEL-119008]
  - dm-delay: don't busy-wait in kthread (Benjamin Marzinski) [RHEL-119008]
  - dm: fix native zone append devices on top of emulated ones (Benjamin Marzinski) [RHEL-119008]
  - dm: limit swapping tables for devices with zone write plugs (Benjamin Marzinski) [RHEL-119008]
  - dm: fix dm_blk_report_zones (Benjamin Marzinski) [RHEL-119008]
  - dm: handle failures in dm_table_set_restrictions (Benjamin Marzinski) [RHEL-119008]
  - dm: free table mempools if not used in __bind (Benjamin Marzinski) [RHEL-119008]
  - dm: don't change md if dm_table_set_restrictions() fails (Benjamin Marzinski) [RHEL-119008]
  - dm-verity: support block number limits for different ioprio classes (Benjamin Marzinski) [RHEL-119008]
  - dm-delay: support zoned devices (Benjamin Marzinski) [RHEL-119008]
  - dm: restrict dm device size to 2^63-512 bytes (Benjamin Marzinski) [RHEL-119008]
  - dm vdo indexer: reorder uds_request to reduce padding (Benjamin Marzinski) [RHEL-119008]
  - dm vdo: rework processing of loaded refcount byte arrays (Benjamin Marzinski) [RHEL-12834]
  - dm vdo: remove remaining ring references (Benjamin Marzinski) [RHEL-119008]
  - dm-verity: do forward error correction on metadata I/O errors (Benjamin Marzinski) [RHEL-119008]
  - dm-bufio: remove unused return value (Benjamin Marzinski) [RHEL-119008]
  - dm: Enable inline crypto passthrough for striped target (Benjamin Marzinski) [RHEL-119008]
  - dm vdo slab-depot: read refcount blocks in large chunks at load time (Benjamin Marzinski) [RHEL-12834]
  - dm vdo vio-pool: allow variable-sized metadata vios (Benjamin Marzinski) [RHEL-12834]
  - dm vdo vio-pool: support pools with multiple data blocks per vio (Benjamin Marzinski) [RHEL-12834]
  - dm vdo vio-pool: add a pool pointer to pooled_vio (Benjamin Marzinski) [RHEL-12834]
  - dm vdo: remove checks that can not fail (Benjamin Marzinski) [RHEL-119008]
  - dm vdo indexer: prevent unterminated string warning (Benjamin Marzinski) [RHEL-119008]
  - dm vdo: use a short static string for thread name prefix (Benjamin Marzinski) [RHEL-119008]
  - dm-crypt: Document integrity_key_size option. (Benjamin Marzinski) [RHEL-119008]
  - dm-integrity: Document Inline mode for storing integrity data (Benjamin Marzinski) [RHEL-119008]
  - dm-verity: Document restart_on_error and panic_on_error options (Benjamin Marzinski) [RHEL-119008]
  - dm-crypt: switch to using the crc32 library (Benjamin Marzinski) [RHEL-119008]
  - nbd: override creds to kernel when calling sock_{send,recv}msg() (Ming Lei) [RHEL-124544]
  - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-113001]
  - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-113001]
  - netfilter: nf_tables: restart set lookup on base_seq change (Florian Westphal) [RHEL-113001]
  - netfilter: nf_tables: make nft_set_do_lookup available unconditionally (Florian Westphal) [RHEL-113001]
  - netfilter: nf_tables: place base_seq in struct net (Florian Westphal) [RHEL-113001]
  - netfilter: nft_set_rbtree: continue traversal if element is inactive (Florian Westphal) [RHEL-113001]
  - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-113001]
  - netfilter: nft_set_pipapo_avx2: Drop the comment regarding protection (Florian Westphal) [RHEL-113001]
  - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-113001]
  - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-113001]
  - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-113001]
  - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-113001]
  - netfilter: nft_set: remove indirection from update API call (Florian Westphal) [RHEL-113001]
  - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-113001]
  - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-113001]
  - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-113001]
  - crypto: octeontx2 - Call strscpy() with correct size argument (Vladis Dronov) [RHEL-122026]
  - crypto: octeontx2 - get engine group number for asymmetric engine (Vladis Dronov) [RHEL-122026]
  - crypto: octeontx2 - Rework how engine group number is obtained (Vladis Dronov) [RHEL-122026]
  - crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0 (Vladis Dronov) [RHEL-122026]
  - crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2 (Vladis Dronov) [RHEL-122026]
  - crypto: octeontx2 - Fix address alignment issue on ucode loading (Vladis Dronov) [RHEL-122026]
  - crypto: octeontx2 - add timeout for load_fvc completion poll (Vladis Dronov) [RHEL-122026]
  - crypto: octeontx2 - Use dynamic allocated memory region for lmtst (Vladis Dronov) [RHEL-122026]
  - crypto: octeontx2 - Initialize cptlfs device info once (Vladis Dronov) [RHEL-122026]
  - crypto: octeontx2 - Simplify multiple return statements (Vladis Dronov) [RHEL-122026]
  - crypto: lib/Kconfig - hide library options [partial] (Vladis Dronov) [RHEL-122026]
  - selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-115592]
  - tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-115592]
  - selftests: tls: make the new data_steal test less flaky (CKI Backport Bot) [RHEL-115592]
  - selftests: tls: test TCP stealing data from under the TLS socket (CKI Backport Bot) [RHEL-115592]
  - tls: handle data disappearing from under the TLS ULP (CKI Backport Bot) [RHEL-115592]
  - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (CKI Backport Bot) [RHEL-115592]
  - net/tls: fix kernel panic when alloc_page failed (CKI Backport Bot) [RHEL-115592]
  - ktls, sockmap: Fix missing uncharge operation (CKI Backport Bot) [RHEL-115592]
  - bpf: fix ktls panic with sockmap (CKI Backport Bot) [RHEL-115592]
  - scsi: sr: Reinstate rotational media flag (Ewan D. Milne) [RHEL-116076]
  - scsi: scsi_debug: Make read-only arrays static const (Ewan D. Milne) [RHEL-116076]
  - scsi: core: sysfs: Correct sysfs attributes access rights (Ewan D. Milne) [RHEL-116076]
  - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (Ewan D. Milne) [RHEL-116076]
  - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (Ewan D. Milne) [RHEL-116076]
  - scsi: scsi_transport_fc: Add comments to describe added 'rport' parameter (Ewan D. Milne) [RHEL-116076]
  - scsi: scsi_transport_fc: Change to use per-rport devloss_work_q (Ewan D. Milne) [RHEL-116076]
  - scsi: core: Fix kernel doc for scsi_track_queue_full() (Ewan D. Milne) [RHEL-116076]
  - scsi: core: Use scsi_cmd_priv() instead of open-coding it (Ewan D. Milne) [RHEL-116076]
  - scsi: core: Enforce unlimited max_segment_size when virt_boundary_mask is set (Ewan D. Milne) [RHEL-116076]
  - scsi: scsi_devinfo: Remove redundant 'found' (Ewan D. Milne) [RHEL-116076]
  - scsi: sd: Fix VPD page 0xb7 length check (Ewan D. Milne) [RHEL-116076]
  - scsi: core: Remember if a device is an ATA device (Ewan D. Milne) [RHEL-116076]
  - scsi: error: alua: I/O errors for ALUA state transitions (Ewan D. Milne) [RHEL-116076]
  - scsi: core: devinfo: Fix typo in comment (Ewan D. Milne) [RHEL-116076]
  - scsi: sg: Remove unnecessary NULL check before unregister_sysctl_table() (Ewan D. Milne) [RHEL-116076]
  - scsi: sd: Remove the stream_status member from scsi_stream_status_header (Ewan D. Milne) [RHEL-116076]
  - scsi: core: Remove unused scsi_dev_info_list_del_keyed() (Ewan D. Milne) [RHEL-116076]
  - scsi: scsi_debug: Reduce DEF_ATOMIC_WR_MAX_LENGTH (Ewan D. Milne) [RHEL-116076]
  - scsi: scsi_debug: Add ERASE for tapes (Ewan D. Milne) [RHEL-116076]
  - scsi: scsi_debug: Use scsi_device->type instead os sdebug_ptype where possible (Ewan D. Milne) [RHEL-116076]
  - scsi: scsi_debug: Move some tape-specific commands to separate definitions (Ewan D. Milne) [RHEL-116076]
  - scsi: scsi_debug: Enable different command definitions for different device types (Ewan D. Milne) [RHEL-116076]
  - scsi: scsi_debug: Fix two typos in command definitions (Ewan D. Milne) [RHEL-116076]
  - KVM: s390: Fix to clear PTE when discarding a swapped page (Thomas Huth) [RHEL-113440]
  - KVM: s390: Fix access to unavailable adapter indicator pages during postcopy (Thomas Huth) [RHEL-42486]
  - iommu/s390: Make attach succeed when the device was surprise removed (Thomas Huth) [RHEL-113440]
  - iommu/s390: Fix memory corruption when using identity domain (Thomas Huth) [RHEL-113440]
  - KVM: s390: Fix FOLL_*/FAULT_FLAG_* confusion (Thomas Huth) [RHEL-113440]
  - KVM: s390: Fix incorrect usage of mmu_notifier_register() (Thomas Huth) [RHEL-113440]
  - KVM: s390: Rework guest entry logic (Thomas Huth) [RHEL-113440]
  - entry: Add arch_in_rcu_eqs() (Thomas Huth) [RHEL-113440]
  - KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY (Thomas Huth) [RHEL-113440]
  - KVM: s390: Simplify and move pv code (Thomas Huth) [RHEL-113440]
  - KVM: s390: Refactor and split some gmap helpers (Thomas Huth) [RHEL-113440]
  - KVM: s390: Remove unneeded srcu lock (Thomas Huth) [RHEL-113440]
  - s390: Remove unneeded includes (Thomas Huth) [RHEL-113440]
  - s390/uv: Rename find_secret() to uv_find_secret() and publish (Thomas Huth) [RHEL-113440]
  - s390/kvm: Split kvm_host header file (Thomas Huth) [RHEL-113440]
  - s390/sysctl: Remove "vm/allocate_pgste" sysctl (Thomas Huth) [RHEL-113440]
  - s390: Remove 2k vs 4k page table leftovers (Thomas Huth) [RHEL-113440]
  - s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste() (Thomas Huth) [RHEL-113440]
  - s390/syscall: Merge __do_syscall() and do_syscall() (Thomas Huth) [RHEL-113440]
  - KVM: s390: selftests: Add has device attr check to uc_attr_mem_limit selftest (Thomas Huth) [RHEL-113440]
  - KVM: s390: selftests: Add ucontrol gis routing test (Thomas Huth) [RHEL-113440]
  - KVM: s390: selftests: Add ucontrol flic attr selftests (Thomas Huth) [RHEL-113440]
  - KVM: s390: selftests: Add regression tests for PFCR subfunctions (Thomas Huth) [RHEL-113440]
  - KVM: s390: selftests: Add regression tests for PLO subfunctions (Thomas Huth) [RHEL-113440]
  - KVM: s390: selftests: Add regression tests for KMAC, KMC, KM, KIMD and KLMD crypto subfunctions (Thomas Huth) [RHEL-113440]
  - KVM: s390: selftests: Add regression tests for KMCTR, KMF, KMO and PCC crypto subfunctions (Thomas Huth) [RHEL-113440]
  - KVM: s390: selftests: Add regression tests for PRNO, KDSA and KMA crypto subfunctions (Thomas Huth) [RHEL-113440]
  - cgroup/rstat: avoid disabling irqs for O(num_cpu) (Radostin Stoyanov) [RHEL-95602]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-155.el10]
changelog:
  - bpf: Do not audit capability check in do_jit() (Ondrej Mosnacek) [RHEL-108805]
  - kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-124143]
  - of: reserved_mem: Add missing IORESOURCE_MEM flag on resources (Maxime Ripard) [RHEL-125402]
  - of: reserved_mem: Restructure call site for dma_contiguous_early_fixup() (Maxime Ripard) [RHEL-125402]
  - of: reserved_mem: Add functions to parse "memory-region" (Maxime Ripard) [RHEL-125402]
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" (Maxime Ripard) [RHEL-125402]
  - of: reserved-memory: Warn for missing static reserved memory regions (Maxime Ripard) [RHEL-125402]
  - of: reserved-memory: Move an assignment to effective place in __reserved_mem_alloc_size() (Maxime Ripard) [RHEL-125402]
  - of: reserved-memory: Do not make kmemleak ignore freed address (Maxime Ripard) [RHEL-125402]
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Maxime Ripard) [RHEL-125402]
  - dma-mapping: save base/size instead of pointer to shared DMA pool (Maxime Ripard) [RHEL-125402]
  - of: reserved_mem: Add code to dynamically allocate reserved_mem array (Maxime Ripard) [RHEL-125402]
  - of: reserved_mem: Restructure how the reserved memory regions are processed (Maxime Ripard) [RHEL-125402]
  - redhat: add all namespace-dependent selftests to kernel-selftests-internal (Joel Savitz) [RHEL-122506]
  - io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124977] {CVE-2025-40047}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-156.el10]
changelog:
  - of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123153] {CVE-2025-39903}
  - smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124956]
  - smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124956]
  - smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124956]
  - smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124956]
  - fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124956] {CVE-2025-39819}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-157.el10]
changelog:
  - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126228]
  - scsi: core: Fix a regression triggered by scsi_host_busy() (Ming Lei) [RHEL-123046]
  - powerpc64/modules: replace stub allocation sentinel with an explicit counter (Joe Lawrence) [RHEL-113085]
  - powerpc64/modules: correctly iterate over stubs in setup_ftrace_ool_stubs (Joe Lawrence) [RHEL-113085]
  - powerpc/ftrace: ensure ftrace record ops are always set for NOPs (Joe Lawrence) [RHEL-113085]
  - x86/pti: Add attack vector controls for PTI (Waiman Long) [RHEL-119227]
  - x86/bugs: Report correct retbleed mitigation status (Waiman Long) [RHEL-119227]
  - x86/bugs: Fix reporting of LFENCE retpoline (Waiman Long) [RHEL-119227]
  - x86/bugs: Fix spectre_v2 forcing (Waiman Long) [RHEL-119227]
  - x86/bugs: Remove uses of cpu_mitigations_off() (Waiman Long) [RHEL-119227]
  - x86/bugs: Simplify SSB cmdline parsing (Waiman Long) [RHEL-119227]
  - x86/bugs: Use early_param() for spectre_v2 (Waiman Long) [RHEL-119227]
  - x86/bugs: Use early_param() for spectre_v2_user (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for VMSCAPE (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for SSB (Waiman Long) [RHEL-119227]
  - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-119227]
  - x86/bugs: Fix GDS mitigation selecting when mitigation is off (Waiman Long) [RHEL-119227]
  - x86/bugs: Select best SRSO mitigation (Waiman Long) [RHEL-119227]
  - alloc_tag: remove empty module tag section (Waiman Long) [RHEL-119227]
  - x86/bugs: Print enabled attack vectors (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for TSA (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for ITS (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for SRSO (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for L1TF (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for spectre_v2 (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for BHI (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for spectre_v2_user (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for retbleed (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for spectre_v1 (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for GDS (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for SRBDS (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for RFDS (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for MMIO (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for TAA (Waiman Long) [RHEL-119227]
  - x86/bugs: Add attack vector controls for MDS (Waiman Long) [RHEL-119227]
  - x86/bugs: Define attack vectors relevant for each bug (Waiman Long) [RHEL-119227]
  - x86/Kconfig: Add arch attack vector support (Waiman Long) [RHEL-119227]
  - cpu: Define attack vectors (Waiman Long) [RHEL-119227]
  - Documentation/x86: Document new attack vector controls (Waiman Long) [RHEL-119227]
  - x86/bugs: Clean up SRSO microcode handling (Waiman Long) [RHEL-119227]
  - x86/bugs: Use IBPB for retbleed if used by SRSO (Waiman Long) [RHEL-119227]
  - x86/bugs: Add SRSO_MITIGATION_NOSMT (Waiman Long) [RHEL-119227]
  - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (Waiman Long) [RHEL-119227]
  - x86/bugs: Remove its=stuff dependency on retbleed (Waiman Long) [RHEL-119227]
  - x86/bugs: Introduce cdt_possible() (Waiman Long) [RHEL-119227]
  - x86/bugs: Use switch/case in its_apply_mitigation() (Waiman Long) [RHEL-119227]
  - x86/bugs: Avoid warning when overriding return thunk (Waiman Long) [RHEL-119227]
  - x86/bugs: Simplify the retbleed=stuff checks (Waiman Long) [RHEL-119227]
  - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (Waiman Long) [RHEL-119227]
  - mm/alloc_tag: fix the kmemleak false positive issue in the allocation of the percpu variable tag->counters (Waiman Long) [RHEL-119227]
  - alloc_tag: handle module codetag load errors as module load failures (Waiman Long) [RHEL-119227]
  - execmem: enforce allocation size aligment to PAGE_SIZE (Waiman Long) [RHEL-119227]
  - x86/cpu: Add "Old Microcode" docs to hw-vuln toctree (Waiman Long) [RHEL-119227]
  - x86/cpu: Help users notice when running old Intel microcode (Waiman Long) [RHEL-119227]
  - alloc_tag: allocate percpu counters for module tags dynamically (Waiman Long) [RHEL-119227]
  - module: release codetag section when module load fails (Waiman Long) [RHEL-119227]
  - Documentation/x86: Update the naming of CPU features for /proc/cpuinfo (Waiman Long) [RHEL-119227]
  - PM: sleep: Allow pm_restrict_gfp_mask() stacking (Mark Langsdorf) [RHEL-109250]
  - PM: hibernate: Combine return paths in power_down() (Mark Langsdorf) [RHEL-109250]
  - PM: hibernate: Restrict GFP mask in power_down() (Mark Langsdorf) [RHEL-109250]
  - PM: hibernate: Fix hybrid-sleep (Mark Langsdorf) [RHEL-109250]
  - xen: take system_transition_mutex on suspend (Mark Langsdorf) [RHEL-109250]
  - PM: hibernate: Restrict GFP mask in hibernation_snapshot() (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: annotate RCU list iterations (Mark Langsdorf) [RHEL-109250]
  - PM: hibernate: Add stub for pm_hibernate_is_recovering() (Mark Langsdorf) [RHEL-109250]
  - PM: suspend: Drop a misplaced pm_restore_gfp_mask() call (Mark Langsdorf) [RHEL-109250]
  - regmap: irq: Avoid lockdep warnings with nested regmap-irq chips (Mark Langsdorf) [RHEL-109250]
  - regmap: irq: Free the regmap-irq mutex (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Rearrange suspend/resume error handling in the core (Mark Langsdorf) [RHEL-109250]
  - cacheinfo: Add arch hook to compress CPU h/w id into 32 bits for cache-id (Mark Langsdorf) [RHEL-109250]
  - cacheinfo: Set cache 'id' based on DT data (Mark Langsdorf) [RHEL-109250]
  - driver core: auxiliary bus: fix OF node leak (Mark Langsdorf) [RHEL-109250]
  - PM: runtime: Take active children into account in pm_runtime_get_if_in_use() (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Update power.completion for all devices on errors (Mark Langsdorf) [RHEL-109250]
  - PM: hibernate: add new api pm_hibernate_is_recovering() (Mark Langsdorf) [RHEL-109250]
  - drivers/base/node: optimize memory block registration to reduce boot time (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Call pm_restore_gfp_mask() after dpm_resume() (Mark Langsdorf) [RHEL-109250]
  - driver core: Export get_dev_from_fwnode() (Mark Langsdorf) [RHEL-109250]
  - driver core: platform: Drop dev_pm_domain_detach() call (Mark Langsdorf) [RHEL-109250]
  - PM: domains: Detach on device_unbind_cleanup() (Mark Langsdorf) [RHEL-109250]
  - PM: domains: Add flags to specify power on attach/detach (Mark Langsdorf) [RHEL-109250]
  - clk: qcom: Fix missing error check for dev_pm_domain_attach() (Mark Langsdorf) [RHEL-109250]
  - regmap: get rid of redundant debugfs_file_{get,put}() (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Make async suspend handle suppliers like parents (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Make async resume handle consumers like children (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Drop superfluous might_sleep() calls (Mark Langsdorf) [RHEL-109250]
  - regmap: fix potential memory leak of regmap_bus (Mark Langsdorf) [RHEL-109250]
  - PM: Restrict swap use to later in the suspend sequence (Mark Langsdorf) [RHEL-109250]
  - driver core: Add device_link_test() for testing device link flags (Mark Langsdorf) [RHEL-109250]
  - driver core: faux: Quiet probe failures (Mark Langsdorf) [RHEL-109250]
  - driver core: faux: Suppress bind attributes (Mark Langsdorf) [RHEL-109250]
  - regmap: kunit: Constify regmap_range_cfg array (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Add locking to dpm_async_resume_children() (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Fix list splicing in device suspend error paths (Mark Langsdorf) [RHEL-109250]
  - regmap: irq: Add support for chips without separate IRQ status (Mark Langsdorf) [RHEL-109250]
  - regmap-irq: Use dedicated interrupt wake setters (Mark Langsdorf) [RHEL-109250]
  - regmap: Move selecting for REGMAP_MDIO and REGMAP_IRQ (Mark Langsdorf) [RHEL-109250]
  - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Introduce pm_sleep_transition_in_progress() (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Introduce pm_suspend_in_progress() (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Print PM debug messages during hibernation (Mark Langsdorf) [RHEL-109250]
  - PM: sysfs: Move debug runtime PM attributes to runtime_attrs[] (Mark Langsdorf) [RHEL-109250]
  - PM: wakeup: Add missing wakeup source attribute relax_count (Mark Langsdorf) [RHEL-109250]
  - arch_topology: Relocate cpu_scale to topology.[h|c] (Mark Langsdorf) [RHEL-109250]
  - firmware_loader: use SHA-256 library API instead of crypto_shash API (Mark Langsdorf) [RHEL-109250]
  - regcache: Use sort()'s default swap() implementation (Mark Langsdorf) [RHEL-109250]
  - PM: runtime: Add new devm functions (Mark Langsdorf) [RHEL-109250]
  - devres: Add devm_is_action_added() helper (Mark Langsdorf) [RHEL-109250]
  - PM: wakeup: Do not expose 4 device wakeup source APIs (Mark Langsdorf) [RHEL-109250]
  - driver core: auxiliary bus: Fix IS_ERR() vs NULL mixup in __devm_auxiliary_device_create() (Mark Langsdorf) [RHEL-109250]
  - property: Add functions to iterate named child (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Make suspend of devices more asynchronous (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Suspend async parents after suspending children (Mark Langsdorf) [RHEL-109250]
  - PM: sleep: Resume children after resuming the parent (Mark Langsdorf) [RHEL-109250]
  - software node: Correct a OOB check in software_node_get_reference_args() (Mark Langsdorf) [RHEL-109250]
  - drivers/base: Extend documentation with preferred way to use auxbus (Mark Langsdorf) [RHEL-109250]
  - devres: simplify devm_kstrdup() using devm_kmemdup() (Mark Langsdorf) [RHEL-109250]
  - platform: replace magic number with macro PLATFORM_DEVID_NONE (Mark Langsdorf) [RHEL-109250]
  - component: do not try to unbind unbound components (Mark Langsdorf) [RHEL-109250]
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-109250]
  - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-109250]
  - driver core: auxiliary bus: add device creation helpers (Mark Langsdorf) [RHEL-109250]
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-109250]
  - driver core: faux: Add sysfs groups after probing (Mark Langsdorf) [RHEL-109250]


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80610


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 5:5.1.1-1
changelog:
  - podman-5.1.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.1.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.1-5
changelog:
  - Add versioned provide to the default version
  - Obsolete versioned is no more needed since only default stream provides
    postgresql symbol


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-2
changelog:
  - kvm-file-posix-probe-discard-alignment-on-Linux-block-de.patch [RHEL-87642]
  - kvm-block-io-skip-head-tail-requests-on-EINVAL.patch [RHEL-87642]
  - kvm-file-posix-Fix-crash-on-discard_granularity-0.patch [RHEL-87642]
  - kvm-Enable-vhost-user-gpu-pci-for-RHIVOS.patch [RHEL-86056]
  - Resolves: RHEL-87642
    (QEMU sends unaligned discards on 4K devices[RHEL-10])
  - Resolves: RHEL-86056
    (Enable 'vhost-user-gpu-pci' in qemu-kvm for RHIVOS)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-3
changelog:
  - kvm-migration-postcopy-Spatial-locality-page-hint-for-pr.patch [RHEL-85635]
  - kvm-meson-configure-add-valgrind-option-en-dis-able-valg.patch [RHEL-88457]
  - kvm-distro-add-an-explicit-valgrind-devel-build-dep.patch [RHEL-88457]
  - kvm-Allow-guest-get-load-QGA-command.patch [RHEL-91219]
  - Resolves: RHEL-85635
    (Video stuck about 1 min after switchover phase when play one video during postcopy-preempt migration)
  - Resolves: RHEL-88457
    (qemu inadvertantly built with valgrind coroutine stack debugging on x86_64)
  - Resolves: RHEL-91219
    ([qemu-guest-agent] Enable 'guest-get-load' by default [RHEL-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-4
changelog:
  - kvm-block-Expand-block-status-mode-from-bool-to-flags.patch [RHEL-88435 RHEL-88437]
  - kvm-file-posix-gluster-Handle-zero-block-status-hint-bet.patch [RHEL-88435 RHEL-88437]
  - kvm-block-Let-bdrv_co_is_zero_fast-consolidate-adjacent-.patch [RHEL-88435 RHEL-88437]
  - kvm-block-Add-new-bdrv_co_is_all_zeroes-function.patch [RHEL-88435 RHEL-88437]
  - kvm-iotests-Improve-iotest-194-to-mirror-data.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Minor-refactoring.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Pass-full-sync-mode-rather-than-bool-to-inter.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Allow-QMP-override-to-declare-target-already-.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Drop-redundant-zero_target-parameter.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Skip-pre-zeroing-destination-if-it-is-already.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Skip-writing-zeroes-when-target-is-already-ze.patch [RHEL-88435 RHEL-88437]
  - kvm-iotests-common.rc-add-disk_usage-function.patch [RHEL-88435 RHEL-88437]
  - kvm-tests-Add-iotest-mirror-sparse-for-recent-patches.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Reduce-I-O-when-destination-is-detect-zeroes-.patch [RHEL-88435 RHEL-88437]
  - Resolves: RHEL-88435
    (--migrate-disks-detect-zeroes doesn't take effect for disk migration [rhel-10.1])
  - Resolves: RHEL-88437
    (Disk size of target raw image is full allocated when doing mirror with default discard value [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-5
changelog:
  - kvm-file-posix-Define-DM_MPATH_PROBE_PATHS.patch [RHEL-65852]
  - kvm-file-posix-Probe-paths-and-retry-SG_IO-on-potential-.patch [RHEL-65852]
  - kvm-io-Fix-partial-struct-copy-in-qio_dns_resolver_looku.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-setting-client-sockopts-i.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-success-and-failure-paths.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Add-support-for-keep-alive-flag-to.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-inet_parse-to-use-QemuOpt.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Introduce-inet-socket-options-cont.patch [RHEL-67706]
  - kvm-tests-unit-test-util-sockets-fix-mem-leak-on-error-o.patch [RHEL-67706]
  - Resolves: RHEL-65852
    (Support multipath failover with scsi-block)
  - Resolves: RHEL-67706
    (postcopy on the destination host can't switch into pause status under the network issue if boot VM with '-S')


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-6
changelog:
  - kvm-scsi-disk-Add-native-FUA-write-support.patch [RHEL-71962]
  - kvm-Fix-handling-of-have_block_rbd.patch [RHEL-96057]
  - kvm-Delete-obsolete-references-to-architectures.patch [RHEL-96057]
  - kvm-Fix-arch-list-for-vgabios-and-ipxe-roms.patch [RHEL-96057]
  - kvm-Disable-virtio-net-pci-romfile-loading-on-riscv64.patch [RHEL-96057]
  - Resolves: RHEL-71962
    ([RFE] Implement FUA support in scsi-disk)
  - Resolves: RHEL-96057
    (qemu-kvm: Various small issues in the spec file)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-7
changelog:
  - kvm-s390x-Fix-leak-in-machine_set_loadparm.patch [RHEL-98555]
  - kvm-hw-s390x-ccw-device-Fix-memory-leak-in-loadparm-sett.patch [RHEL-98555]
  - kvm-target-i386-Update-EPYC-CPU-model-for-Cache-property.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Rome-CPU-model-for-Cache-pro.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Milan-CPU-model-for-Cache-pr.patch [RHEL-52650]
  - kvm-target-i386-Add-couple-of-feature-bits-in-CPUID_Fn80.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Genoa-for-Cache-property-per.patch [RHEL-52650]
  - kvm-target-i386-Add-support-for-EPYC-Turin-model.patch [RHEL-52650]
  - kvm-include-qemu-compiler-add-QEMU_UNINITIALIZED-attribu.patch [RHEL-95479]
  - kvm-hw-virtio-virtio-avoid-cost-of-ftrivial-auto-var-ini.patch [RHEL-95479]
  - kvm-block-skip-automatic-zero-init-of-large-array-in-ioq.patch [RHEL-95479]
  - kvm-chardev-char-fd-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-chardev-char-pty-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-chardev-char-socket-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-audio-ac97-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-cs4231a-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-audio-es1370-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-audio-gus-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-audio-marvell_88w8618-skip-automatic-zero-init-of.patch [RHEL-95479]
  - kvm-hw-audio-sb16-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-via-ac97-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-char-sclpconsole-lm-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-dma-xlnx_csu_dma-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-display-vmware_vga-skip-automatic-zero-init-of-la.patch [RHEL-95479]
  - kvm-hw-hyperv-syndbg-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-misc-aspeed_hace-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-net-rtl8139-skip-automatic-zero-init-of-large-arr.patch [RHEL-95479]
  - kvm-hw-net-tulip-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-net-virtio-net-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-net-xgamc-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-nvme-ctrl-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-ppc-pnv_occ-skip-automatic-zero-init-of-large-str.patch [RHEL-95479]
  - kvm-hw-ppc-spapr_tpm_proxy-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-usb-hcd-ohci-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-scsi-lsi53c895a-skip-automatic-zero-init-of-large.patch [RHEL-95479]
  - kvm-hw-scsi-megasas-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-ufs-lu-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-socket-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-stream-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-i386-amd_iommu-Isolate-AMDVI-PCI-from-amd-iommu-d.patch [RHEL-85649]
  - kvm-hw-i386-amd_iommu-Allow-migration-when-explicitly-cr.patch [RHEL-85649]
  - kvm-Enable-amd-iommu-device.patch [RHEL-85649]
  - kvm-ui-vnc-Update-display-update-interval-when-VM-state-.patch [RHEL-83883]
  - Resolves: RHEL-98555
    ([s390x][RHEL10.1][ccw-device] there would be memory leak with virtio_blk disks)
  - Resolves: RHEL-52650
    ([AMDSERVER 10.1 Feature] Turin: Qemu EPYC-Turin Model)
  - Resolves: RHEL-95479
    (-ftrivial-auto-var-init=zero reduced performance)
  - Resolves: RHEL-85649
    ([RHEL 10]Qemu/amd-iommu: Add ability to manually specify the AMDVI-PCI device)
  - Resolves: RHEL-83883
    (Video stuck after switchover phase when play one video during migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-8
changelog:
  - kvm-migration-multifd-move-macros-to-multifd-header.patch [RHEL-59697]
  - kvm-migration-refactor-channel-discovery-mechanism.patch [RHEL-59697]
  - kvm-migration-Add-save_postcopy_prepare-savevm-handler.patch [RHEL-59697]
  - kvm-migration-ram-Implement-save_postcopy_prepare.patch [RHEL-59697]
  - kvm-tests-qtest-migration-consolidate-set-capabilities.patch [RHEL-59697]
  - kvm-migration-write-zero-pages-when-postcopy-enabled.patch [RHEL-59697]
  - kvm-migration-enable-multifd-and-postcopy-together.patch [RHEL-59697]
  - kvm-migration-Add-qtest-for-migration-over-RDMA.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Enforce-RLIMIT_MEMLOCK-128MB-re.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Add-test-for-rdma-migration-wit.patch [RHEL-59697]
  - kvm-tests-qtest-migration-add-postcopy-tests-with-multif.patch [RHEL-59697]
  - kvm-file-posix-Fix-aio-threads-performance-regression-af.patch [RHEL-96854]
  - kvm-block-remove-outdated-comments-about-AioContext-lock.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_reopen_.patch [RHEL-88561]
  - kvm-block-snapshot-move-drain-outside-of-read-locked-bdr.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_inactiv.patch [RHEL-88561]
  - kvm-block-mark-bdrv_parent_change_aio_context-GRAPH_RDLO.patch [RHEL-88561]
  - kvm-block-mark-change_aio_ctx-callback-and-instances-as-.patch [RHEL-88561]
  - kvm-block-mark-bdrv_child_change_aio_context-GRAPH_RDLOC.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_change_aio_context-.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_try_change_aio_cont.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child_common.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_set_backing_hd_drai.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_add_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_unref_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_del_child.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-internal_snapshot_a.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-external_snapshot_a.patch [RHEL-88561]
  - kvm-block-mark-bdrv_drained_begin-and-friends-as-GRAPH_U.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-remove-image-file-aft.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-add-test-case-with-re.patch [RHEL-88561]
  - Resolves: RHEL-59697
    (Allow multifd+postcopy features being enabled together, but only use multifd during precopy )
  - Resolves: RHEL-96854
    (Performance Degradation(aio=threads) between Upstream Commit b75c5f9 and 984a32f)
  - Resolves: RHEL-88561
    (qemu graph deadlock during job-dismiss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-9
changelog:
  - kvm-Declare-rtl8139-as-deprecated.patch [RHEL-45624]
  - Resolves: RHEL-45624
    (Deprecate rtl8139 NIC in QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-10
changelog:
  - kvm-Enable-uefi-variable-service-for-edk2.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-11
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-105440]
  - Resolves: RHEL-105440
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-12
changelog:
  - kvm-RHEL-Pack-uefi-vars-module.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-15
changelog:
  - kvm-migration-Add-helper-to-get-target-runstate.patch [RHEL-54670]
  - kvm-qmp-cont-Only-activate-disks-if-migration-completed.patch [RHEL-54670]
  - kvm-migration-block-Make-late-block-active-the-default.patch [RHEL-54670]
  - kvm-migration-block-Apply-late-block-active-behavior-to-.patch [RHEL-54670]
  - kvm-migration-block-Fix-possible-race-with-block_inactiv.patch [RHEL-54670]
  - kvm-migration-block-Rewrite-disk-activation.patch [RHEL-54670]
  - kvm-block-Add-active-field-to-BlockDeviceInfo.patch [RHEL-54670]
  - kvm-block-Allow-inactivating-already-inactive-nodes.patch [RHEL-54670]
  - kvm-block-Inactivate-external-snapshot-overlays-when-nec.patch [RHEL-54670]
  - kvm-migration-block-active-Remove-global-active-flag.patch [RHEL-54670]
  - kvm-block-Don-t-attach-inactive-child-to-active-node.patch [RHEL-54670]
  - kvm-block-Fix-crash-on-block_resize-on-inactive-node.patch [RHEL-54670]
  - kvm-block-Add-option-to-create-inactive-nodes.patch [RHEL-54670]
  - kvm-block-Add-blockdev-set-active-QMP-command.patch [RHEL-54670]
  - kvm-block-Support-inactive-nodes-in-blk_insert_bs.patch [RHEL-54670]
  - kvm-block-export-Don-t-ignore-image-activation-error-in-.patch [RHEL-54670]
  - kvm-block-Drain-nodes-before-inactivating-them.patch [RHEL-54670]
  - kvm-block-export-Add-option-to-allow-export-of-inactive-.patch [RHEL-54670]
  - kvm-nbd-server-Support-inactive-nodes.patch [RHEL-54670]
  - kvm-iotests-Add-filter_qtest.patch [RHEL-54670]
  - kvm-iotests-Add-qsd-migrate-case.patch [RHEL-54670]
  - kvm-iotests-Add-NBD-based-tests-for-inactive-nodes.patch [RHEL-54670]
  - Resolves: RHEL-54670
    (Provide QMP command for block device reactivation after migration [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-16
changelog:
  - kvm-migration-Fix-UAF-for-incoming-migration-on-Migratio.patch [RHEL-69776]
  - kvm-scripts-improve-error-from-qemu-trace-stap-on-missin.patch [RHEL-83535]
  - kvm-Recommend-systemtap-client-from-qemu-tools.patch [RHEL-83535]
  - Resolves: RHEL-69776
    ([rhel10]Guest crashed on the target host when the migration was canceled)
  - Resolves: RHEL-83535
    ([Qemu RHEL-10] qemu-trace-stap should handle lack of stap more gracefully)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-17
changelog:
  - kvm-Also-recommend-systemtap-devel-from-qemu-tools.patch [RHEL-83535]
  - Resolves: RHEL-83535
    ([Qemu RHEL-10] qemu-trace-stap should handle lack of stap more gracefully)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-2
changelog:
  - kvm-e1000e-Prevent-crash-from-legacy-interrupt-firing-af.patch [RHEL-112882]
  - Resolves: RHEL-112882
    ([DEV Task]: Assertion `core->delayed_causes == 0' failed with e1000e NIC)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-3
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-119368]
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-116443]
  - kvm-target-i386-add-compatibility-property-for-arch_capa.patch [RHEL-120253]
  - kvm-target-i386-add-compatibility-property-for-pdcm-feat.patch [RHEL-120253]
  - Resolves: RHEL-119368
    ([rhel10] Backport "arm/kvm: report registers we failed to set")
  - Resolves: RHEL-116443
    (qemu crash after hot-unplug disk from the multifunction enabled bus,crash point PCIDevice *vf = dev->exp.sriov_pf.vf[i])
  - Resolves: RHEL-120253
    (Backport fixes for PDCM and ARCH_CAPABILITIES migration incompatibility)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Gael Chamoulaud <gchamoul@redhat.com> 0.1.8-4
changelog:
  - Use thread.join(timeout) to avoid busy waiting and simplify interval event posting logic (rhbz#2115848)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-3
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-54012)
  - Fix potential use of uninitialized pgp struct (RHEL-54013)
  - Fix memory leak in rpmsign(8) (RHEL-37564)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - new upstream release
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Kalev Lember <klember@redhat.com> - 45.0-2
changelog:
  - Package review fixes (rhbz#2241553)
  - Add SourceLicense tag to distinguish between the license of the app
    itself and its crate deps
  - Slightly change virtual provides for bundled aperture crate to better
    match other rust packages


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: Jan Macku <jamacku@redhat.com> - 257-1
changelog:
  - Rebase to new upstream release v257 (RHEL-71409)
  - netif-naming-scheme: introduce rhel-10.0 scheme (RHEL-44417)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-7
changelog:
  - Unbreak Podman's downstream Fedora CI
  - Update the BuildRequires on golang to reflect reality
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-8
changelog:
  - Unbreak Podman's downstream Fedora CI (part 2)
  - Backport some new upstream tests
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-1
changelog:
  - Upstream 3.23.0 final
  - configure --enable-lto
  - Remove all upstreamed patches
  - Add BuildRequires: python3-devel for running testsuite.
  - Update license tags to spdx


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later
  - Clarify License of valgrind-scripts.


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-97010]
  - Resolves: RHEL-97010
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Neal Gompa <ngompa@centosproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races
    Resolves: RHEL-79119
  - Fix minor spec formatting inconsistencies


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


