# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-167.el10]
changelog:
  - Add CONFIG_HTMDUMP (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add documentation for H_HTM debugfs interface (Mamatha Inamdar) [RHEL-102163]
  - docs: powerpc: Add htm.rst to table of contents (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm capabilities support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm flags support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm setup support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm info support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm status support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm start support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm configure support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm_hcall_wrapper to integrate other htm operations (Mamatha Inamdar) [RHEL-102163]
  - powerpc: Document details on H_HTM hcall (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries: Export hardware trace macro dump via debugfs (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries: Macros and wrapper functions for H_HTM call (Mamatha Inamdar) [RHEL-102163]
  - scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Xuemin Li) [RHEL-126194]
  - platform/x86/intel/pmt: support BMG crashlog (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: use a version struct (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: refactor base parameter (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: add register access helpers (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: decouple sysfs and namespace (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: correct types (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: re-order trigger logic (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: use guard(mutex) (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: mutex clean up (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: white space cleanup (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: fix a crashlog NULL pointer access (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: fix build dependency for kunit test (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt/discovery: fix format string warning (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt/discovery: Fix size_t specifiers for 32-bit (Steve Best) [RHEL-119042]
  - redhat/configs: disable CONFIG_INTEL_PMT_KUNIT_TEST (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: KUNIT test for PMT Enhanced Discovery API (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt/telemetry: Add API to retrieve telemetry regions by feature (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt/discovery: Get telemetry attributes (Steve Best) [RHEL-119042]
  - platform/x86/intel/tpmi: Get OOBMSM CPU mapping from TPMI (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Set OOBMSM to CPU mapping (Steve Best) [RHEL-119042]
  - platform/x86/intel/tpmi: Relocate platform info to intel_vsec.h (Steve Best) [RHEL-119042]
  - MAINTAINERS: adjust file entry in INTEL TPMI DRIVER (Steve Best) [RHEL-119042]
  - platform/x86: intel: Add 'intel' prefix to the modules automatically (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: Add PMT Discovery driver (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Add new Discovery feature (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Add Diamond Rapids support (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Skip driverless features (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Skip absent features during initialization (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Add device links to enforce dependencies (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Create wrapper to walk PCI config space (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Add private data for per-device data (Steve Best) [RHEL-119042]
  - blk-mq: fix elevator depth_updated method (Ming Lei) [RHEL-124151]
  - lib/sbitmap: make sbitmap_get_shallow() internal (Ming Lei) [RHEL-124151]
  - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (Ming Lei) [RHEL-124151]
  - x86/amd_node: Fix AMD root device caching (Steve Best) [RHEL-127698]
  - x86/amd_node: Add support for debugfs access to SMN registers (Steve Best) [RHEL-127698]
  - x86/amd_node: Add SMN offsets to exclusive region access (Steve Best) [RHEL-127698]
  - x86/cpu: Add/fix core comments for {Panther,Nova} Lake (Steve Best) [RHEL-127483]
  - x86/cpu: Rename and move CPU model entry for Diamond Rapids (Steve Best) [RHEL-127483]
  - tools/power turbostat: Fix incorrect sorting of PMT telemetry (Steve Best) [RHEL-127383]
  - efi: Explain OVMF acronym in OVMF_DEBUG_LOG help text (Lenny Szubowicz) [RHEL-100104]
  - efi: add API doc entry for ovmf_debug_log (Lenny Szubowicz) [RHEL-100104]
  - efi: add ovmf debug log driver (Lenny Szubowicz) [RHEL-100104]
  - redhat/configs: Enable CONFIG_OVMF_DEBUG_LOG in RHEL (Lenny Szubowicz) [RHEL-100104]
  - redhat/configs: enable Branch Record Buffer Extension for arm (Marcin Juszkiewicz) [RHEL-122953]
  - perf/dwc_pcie: Fix use of uninitialized variable (Marcin Juszkiewicz) [RHEL-122953]
  - perf: riscv: skip empty batches in counter start (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Fix CMN S3 DTM offset (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (Marcin Juszkiewicz) [RHEL-122953] {CVE-2025-40081}
  - drivers/perf: riscv: Remove redundant ternary operators (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_spe: Add support for FEAT_SPE_EFT extended filtering (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_spe: Expose event filter (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_spe: Support FEAT_SPEv1p4 filters (Marcin Juszkiewicz) [RHEL-122953]
  - perf/dwc_pcie: Support counting multiple lane events in parallel (Marcin Juszkiewicz) [RHEL-122953]
  - drivers: perf: use us_to_ktime() where appropriate (Marcin Juszkiewicz) [RHEL-122953]
  - perf: imx_perf: add support for i.MX94 platform (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Export PMU event info function (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Implement PMU event info function (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Add raw event v2 support (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Add SBI v3.0 flag (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-ni: Support sharing IRQs within an NI instance (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-ni: Consolidate CPU affinity handling (Marcin Juszkiewicz) [RHEL-122953]
  - perf/cxlpmu: Remove unintended newline from IRQ name format string (Marcin Juszkiewicz) [RHEL-122953]
  - perf/cxlpmu: Fix devm_kcalloc() argument order in cxl_pmu_probe() (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_spe: Relax period restriction (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_pmuv3: Add support for the Branch Record Buffer Extension (BRBE) (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm: Add missing .suppress_bind_attrs (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Reduce stack usage during discovery (Marcin Juszkiewicz) [RHEL-122953]
  - perf: imx9_perf: make the read-only array mask static const (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Broaden module description for wider interconnect support (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-ni: Set initial IRQ affinity (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Add CMN S3 ACPI binding (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Initialise cmn->cpu earlier (Marcin Juszkiewicz) [RHEL-122953]
  - perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create() (Marcin Juszkiewicz) [RHEL-122953] {CVE-2025-38295}
  - perf/arm-cmn: Fix REQ2/SNP2 mixup (Marcin Juszkiewicz) [RHEL-122953]
  - perf: Do not enable by default during compile testing (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm-ni: Fix missing platform_set_drvdata() (Marcin Juszkiewicz) [RHEL-122953] {CVE-2025-38318}
  - perf: arm-ni: Unregister PMUs on probe failure (Marcin Juszkiewicz) [RHEL-122953] {CVE-2025-38168}
  - perf/arm-cmn: Remove CMN-600 DTC domain special case (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm_cspmu: Fix missing io.h include (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm_cspmu: Add PMEVFILT2R support (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm_cspmu: Generalise event filtering (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm_cspmu: Move register definitons to header (Marcin Juszkiewicz) [RHEL-122953]
  - perf/dwc_pcie: fix duplicate pci_dev devices (Marcin Juszkiewicz) [RHEL-122953] {CVE-2025-37746}
  - perf/dwc_pcie: fix some unreleased resources (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Minor event type housekeeping (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_pmuv3: Don't disable counter in armv8pmu_enable_event() (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_pmuv3: Add support for ARM Rainier PMU (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Do not allow invalid raw event config (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Return error for default case (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Fix Platform firmware event data (Marcin Juszkiewicz) [RHEL-122953]
  - drivers perf: remove unused field pmu_node (Marcin Juszkiewicz) [RHEL-122953]
  - arm64: sysreg: Add new PMSFCR_EL1 fields and PMSDSFR_EL1 register (Marcin Juszkiewicz) [RHEL-122953]
  - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-102875]
  - redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
  - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
  - platform/x86/intel/hid: Add Wildcat Lake support (Steve Best) [RHEL-95646]
  - platform/x86/intel: hid: Add Pantherlake support (Steve Best) [RHEL-95646]
  - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet (Steve Best) [RHEL-95646]
  - intel-hid: fix volume buttons on Thinkpad X12 Detachable Tablet Gen 1 (Steve Best) [RHEL-95646]
  - selftests: bonding: add ipsec offload test (Hangbin Liu) [RHEL-97042]
  - selftests: bonding: add vlan over bond testing (Hangbin Liu) [RHEL-97042]
  - selftests: bonding: add test for LACP actor port priority (Hangbin Liu) [RHEL-97042]
  - bonding: support aggregator selection based on port priority (Hangbin Liu) [RHEL-97042]
  - bonding: fix NULL pointer dereference in actor_port_prio setting (Hangbin Liu) [RHEL-97042]
  - bonding: add support for per-port LACP actor priority (Hangbin Liu) [RHEL-97042]
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124612] {CVE-2025-39806}
  - ext4: fail unaligned direct IO write with EINVAL (Brian Foster) [RHEL-121230]
  - iomap: Fix broken data integrity guarantees for O_SYNC writes (Brian Foster) [RHEL-121230]
  - iomap: build the writeback code without CONFIG_BLOCK (Brian Foster) [RHEL-121230]
  - iomap: add read_folio_range() handler for buffered writes (Brian Foster) [RHEL-121230]
  - iomap: improve argument passing to iomap_read_folio_sync (Brian Foster) [RHEL-121230]
  - iomap: replace iomap_folio_ops with iomap_write_ops (Brian Foster) [RHEL-121230]
  - iomap: export iomap_writeback_folio (Brian Foster) [RHEL-121230]
  - iomap: move folio_unlock out of iomap_writeback_folio (Brian Foster) [RHEL-121230]
  - iomap: rename iomap_writepage_map to iomap_writeback_folio (Brian Foster) [RHEL-121230]
  - iomap: move all ioend handling to ioend.c (Brian Foster) [RHEL-121230]
  - iomap: add public helpers for uptodate state manipulation (Brian Foster) [RHEL-121230]
  - iomap: hide ioends from the generic writeback code (Brian Foster) [RHEL-121230]
  - iomap: refactor the writeback interface (Brian Foster) [RHEL-121230]
  - iomap: cleanup the pending writeback tracking in iomap_writepage_map_blocks (Brian Foster) [RHEL-121230]
  - iomap: pass more arguments using the iomap writeback context (Brian Foster) [RHEL-121230]
  - iomap: header diet (Brian Foster) [RHEL-121230]
  - iomap: avoid unnecessary ifs_set_range_uptodate() with locks (Brian Foster) [RHEL-121230]
  - iomap: rework iomap_write_begin() to return folio offset and length (Brian Foster) [RHEL-121230]
  - iomap: push non-large folio check into get folio path (Brian Foster) [RHEL-121230]
  - iomap: helper to trim pos/bytes to within folio (Brian Foster) [RHEL-121230]
  - iomap: drop pos param from __iomap_[get|put]_folio() (Brian Foster) [RHEL-121230]
  - iomap: drop unnecessary pos param from iomap_write_[begin|end] (Brian Foster) [RHEL-121230]
  - iomap: resample iter->pos after iomap_write_begin() calls (Brian Foster) [RHEL-121230]
  - iomap: trace: Add missing flags to [IOMAP_|IOMAP_F_]FLAGS_STRINGS (Brian Foster) [RHEL-121230]
  - iomap: skip unnecessary ifs_block_is_uptodate check (Brian Foster) [RHEL-121230]
  - iomap: Fix conflicting values of iomap flags (Brian Foster) [RHEL-121230]
  - iomap: rework IOMAP atomic flags (Brian Foster) [RHEL-121230]
  - iomap: comment on atomic write checks in iomap_dio_bio_iter() (Brian Foster) [RHEL-121230]
  - iomap: inline iomap_dio_bio_opflags() (Brian Foster) [RHEL-121230]
  - iomap: fix inline data on buffered read (Brian Foster) [RHEL-121230]
  - iomap: Lift blocksize restriction on atomic writes (Brian Foster) [RHEL-121230]
  - iomap: Support SW-based atomic writes (Brian Foster) [RHEL-121230]
  - iomap: Rename IOMAP_ATOMIC -> IOMAP_ATOMIC_HW (Brian Foster) [RHEL-121230]
  - iomap: introduce a full map advance helper (Brian Foster) [RHEL-121230]
  - iomap: rename iomap_iter processed field to status (Brian Foster) [RHEL-121230]
  - iomap: remove unnecessary advance from iomap_iter() (Brian Foster) [RHEL-121230]
  - dax: advance the iomap_iter on pte and pmd faults (Brian Foster) [RHEL-121230]
  - dax: advance the iomap_iter on dedupe range (Brian Foster) [RHEL-121230]
  - dax: advance the iomap_iter on unshare range (Brian Foster) [RHEL-121230]
  - dax: advance the iomap_iter on zero range (Brian Foster) [RHEL-121230]
  - dax: push advance down into dax_iomap_iter() for read and write (Brian Foster) [RHEL-121230]
  - dax: advance the iomap_iter in the read/write path (Brian Foster) [RHEL-121230]
  - iomap: convert misc simple ops to incremental advance (Brian Foster) [RHEL-121230]
  - iomap: advance the iter on direct I/O (Brian Foster) [RHEL-121230]
  - iomap: advance the iter directly on buffered read (Brian Foster) [RHEL-121230]
  - iomap: Minor code simplification in iomap_dio_bio_iter() (Brian Foster) [RHEL-121230]
  - iomap: advance the iter directly on zero range (Brian Foster) [RHEL-121230]
  - iomap: advance the iter directly on unshare range (Brian Foster) [RHEL-121230]
  - iomap: advance the iter directly on buffered writes (Brian Foster) [RHEL-121230]
  - iomap: support incremental iomap_iter advances (Brian Foster) [RHEL-121230]
  - iomap: export iomap_iter_advance() and return remaining length (Brian Foster) [RHEL-121230]
  - iomap: lift iter termination logic from iomap_iter_advance() (Brian Foster) [RHEL-121230]
  - iomap: lift error code check out of iomap_iter_advance() (Brian Foster) [RHEL-121230]
  - iomap: refactor iomap_iter() length check and tracepoint (Brian Foster) [RHEL-121230]
  - iomap: split out iomap check and reset logic from iter advance (Brian Foster) [RHEL-121230]
  - iomap: factor out iomap length helper (Brian Foster) [RHEL-121230]
  - iomap: pass private data to iomap_truncate_page (Brian Foster) [RHEL-121230]
  - iomap: pass private data to iomap_zero_range (Brian Foster) [RHEL-121230]
  - iomap: pass private data to iomap_page_mkwrite (Brian Foster) [RHEL-121230]
  - iomap: add a io_private field to struct iomap_ioend (Brian Foster) [RHEL-121230]
  - iomap: optionally use ioends for direct I/O (Brian Foster) [RHEL-121230]
  - iomap: factor out a iomap_dio_done helper (Brian Foster) [RHEL-121230]
  - iomap: move common ioend code to ioend.c (Brian Foster) [RHEL-121230]
  - iomap: split bios to zone append limits in the submission handlers (Brian Foster) [RHEL-121230]
  - iomap: add a IOMAP_F_ANON_WRITE flag (Brian Foster) [RHEL-121230]
  - iomap: simplify io_flags and io_type in struct iomap_ioend (Brian Foster) [RHEL-121230]
  - iomap: allow the file system to submit the writeback bios (Brian Foster) [RHEL-121230]
  - wifi: libertas: cap SSID len in lbs_associate() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cw1200: cap SSID length in cw1200_do_join() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix reporting of all valid links in sta_set_sinfo() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: nl80211: call kfree without a NULL check (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Make CONNECTION_MONITOR optional for MLO sta (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: avoid bit operation on key flags (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: Add missing platform IDs for quirk table (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix peer lookup in ath12k_dp_mon_rx_deliver_msdu() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: avoid circular locking dependency in ser_state_run() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: avoid possible TX wait initialization race (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: fix leak in rtw89_core_send_nullfunc() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix overflow warning on num_pwr_levels (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: initialize eirp_power before use (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: simplify return value handling of cfg80211_get_radio_idx_by_chan() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: fix return value in cfg80211_get_radio_idx_by_chan() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: consider links for validating SCAN_FLAG_AP in scan request during MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39937}
  - wifi: iwlwifi: pcie: fix byte count table for some devices (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: nl80211: completely disable per-link stats for now (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: virt_wifi: Fix page fault on connect (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Fix "no buffer space available" error in nl80211_get_station() for MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fix 130/1030 configs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix WMI TLV header misalignment (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix missing station power save configuration (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: wilc1000: avoid buffer overflow in WID string configuration (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39952}
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (Jose Ignacio Tornos Martinez) [RHEL-114889 RHEL-117582] {CVE-2025-39849}
  - wifi: ath11k: fix group data packet drops during rekey (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Set EMLSR support flag in MLO flags for EML-capable stations (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: cfg: add back more lost PCI IDs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fix byte count table for old devices (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: cfg: restore some 1000 series configs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mwifiex: Initialize the chan_stats array to zero (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39891}
  - wifi: mac80211: do not permit 40 MHz EHT operation on 5/6 GHz (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: uefi: check DSM item validity (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: acpi: check DSM func validity (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: if scratch is ~0U, consider it a failure (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-114889 RHEL-123069] {CVE-2025-39918}
  - wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7915: fix list corruption after hardware restart (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39862}
  - wifi: mt76: mt7996: add missing check for rx wcid entries (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39919}
  - wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: fix crash on some tx status reports (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: use the correct vif link for scanning/roc (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: disable beacons when going offchannel (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: prevent non-offchannel mgmt tx during scan/roc (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: skip EHT MLD TLV on non-MLD and pass conn_state for sta_cmd (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925u: use connac3 tx aggr check in tx complete (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: fix the wrong bss cleanup for SAP (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: fix locking in mt7925_change_vif_links() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7921: don't disconnect when CSA to DFS chan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: increase scan_ies_len for S1G (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39957}
  - wifi: mac80211: fix incorrect type for ret (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39863}
  - wifi: cfg80211: fix use-after-free in cmp_bss() (Jose Ignacio Tornos Martinez) [RHEL-114889 RHEL-122877] {CVE-2025-39864}
  - wifi: rt2x00: fix CRC_CCITT dependency (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2800: select CONFIG_RT2X00_LIB as needed (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - selftests/tc-testing: Check backlog stats in gso_skb case (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39677}
  - wifi: Fix typos (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmsmac: Use str_true_false() helper (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: fix EXTSAE WPA3 connection failure due to AUTH TX failure (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcm80211: Remove yet more unused functions (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcm80211: Remove more unused functions (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcm80211: Remove unused functions (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Revert "wifi: iwlwifi: remove support of several iwl_ppag_table_cmd versions" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: check validity of the FW API range (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: don't export symbols that we shouldn't (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: use spec link id and not FW link id (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: decode EOF bit for AMPDUs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Remove support for rx OMI bandwidth reduction (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: stop supporting iwl_omi_send_status_notif ver 1 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove SC2F firmware support (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: Remove NAN support (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: disable certain features for fips_enabled (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: support channel survey collection for ACS scans (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: disable RX aggregation if requested (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - dt-bindings: net: wireless: rt2800: add SOC Wifi (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - MIPS: dts: ralink: mt7620a: add wifi (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2x00: soc: modernize probe (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2800: move 2x00soc to 2800soc (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2800soc: allow loading from OF (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2x00: remove mod_name from platform_driver (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2x00: add COMPILE_TEST (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix WARN_ON for monitor mode on some devices (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38642}
  - wifi: brcmfmac: cyw: Fix __counted_by to be LE variant (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix unassigned variable access (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't require cipher and keylen in gtk rekey (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: nl80211: Set num_sub_specs before looping through sub_specs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm/fw: Avoid -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Fix typo "ransport" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fix cmd length when sending WOWLAN_TSC_RSC_PARAM (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Correct tid cleanup when tid setup fails (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39750}
  - wifi: ath12k: bring DFS support back for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Prefer {} to {0} in initializers (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: Prefer {} to {0} in initializers (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath10k: Prefer {} to {0} in initializers (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211/mac80211: report link ID for unexpected frames (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: determine missing link_id in ieee80211_rx_for_interface() based on frequency (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: support CYW54591 PCIE device (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: reject HTC bit for management frames (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: remove ieee80211_remove_key (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Advertise encapsulation/decapsulation offload support to mac80211 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix TX status reporting to mac80211 when offload is enabled (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix the handling of TX packets in Ethernet mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add support to parse max ext2 wmi service bit (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix endianness handling while accessing wmi service bit (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Don't call fq_flow_idx() for management frames (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Do not schedule stopped TXQs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38643}
  - wifi: mac80211: support returning the S1G short beacon skb (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: support initialising current S1G short beacon index (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: support initialising an S1G short beaconing BSS (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: support configuring an S1G short beaconing BSS (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: Add support for the SDIO 43751 device (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: wilc1000: Use min() to improve code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mwifiex: Use max_t() to improve code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcm80211: Use min() to improve code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: Fix typo "notifer" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: reject TDLS operations when station is not associated (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38644}
  - wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: extend connection monitoring for MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: extend beacon monitoring for MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Add link iteration macro for link data with rcu_dereference (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix macro scoping in for_each_link_data (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211/mac80211: remove wrong scan request n_channels (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtlwifi: Use min()/max() to improve code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Lower the timeout in rtw89_fwdl_check_path_ready_ax() for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: check path range before using in rtw89_fw_h2c_rf_ps_info() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: purge obsoleted scan events with software sequence number (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: dynamically update EHT preamble puncturing (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mac: reduce PPDU status length for WiFi 6 chips (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: trigger TX stuck if FIFO full (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39732}
  - wifi: ath12k: remove unneeded semicolon in ath12k_mac_parse_tx_pwr_env() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Validate peer_id before searching for peer (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Use HTT_TCL_METADATA_VER_V1 in FTM mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Fix botched indexing conversion (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: fix double free for link_sinfo in nl80211_station_dump() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: fix off channel operation allowed check for MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: use RCU-safe iteration in ieee80211_csa_finish (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211_hwsim: Update comments in header (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: parse unsolicited broadcast probe response data (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: parse attribute to update unsolicited probe response template (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't use TPE data from assoc response (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: handle WLAN_HT_ACTION_NOTIFY_CHANWIDTH async (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: simplify __ieee80211_rx_h_amsdu() loop (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't mark keys for inactive links as uploaded (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: only assign chanctx in reconfig (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211_hwsim: Declare support for AP scanning (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: clean up cipher suite handling (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't send keys to driver when fips_enabled (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Fix interface type validation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: remove ieee80211_link_unreserve_chanctx() return value (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't unreserve never reserved chanctx (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: make VHT opmode NSS ignore a debug message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: remove scan request n_channels counted_by (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw88: Fix macid assigned to TDLS station (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw88: enable TX reports for the management queue (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852b: implement RFK multi-channel handling and support chanctx up to 2 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852b: configure FW version for SCAN_OFFLOAD_EXTRA_OP feature (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852bt: implement RFK multi-channel handling and support chanctx up to 2 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852bt: configure FW version for SCAN_OFFLOAD_EXTRA_OP feature (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: tweak tx wake notify matching condition (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: update SER L2 type default value (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: introduce fw feature group and redefine CRASH_TRIGGER (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: check LPS H2C command complete by C2H reg instead of done ack (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mcc: solve GO's TBTT change and TBTT too close to NoA issue (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: extend HW scan of WiFi 7 chips for extra OP chan when concurrency (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mcc: when MCC stop forcing to stay at GO role (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mcc: enlarge GO NoA duration to cover channel switching time (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: add DIG suspend/resume flow when scan and connection (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mcc: add H2C command to support different PD level in MCC (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: regd/acpi: support 6 GHz VLP policy via ACPI DSM (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: regd/acpi: support regulatory rules via ACPI DSM and parse rule of regd_UK (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: regd/acpi: update field definition to specific country in UNII-4 conf (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: regd/acpi: support country CA by BIT(1) in 6 GHz SP conf (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove support of several iwl_ppag_table_cmd versions (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove support of version 4 of iwl_wowlan_rsc_tsc_params_cmd (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove support of versions 4 and 5 of iwl_alive_ntf (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: remove support for iwl_mcc_update_resp versions (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: Revert "wifi: iwlwifi: mld: allow EMLSR with 2.4 GHz when BT is ON" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: Revert "wifi: iwlwifi: mld: add kunit test for emlsr with bt on" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: support iwl_omi_send_status_notif version 2 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: remove support for iwl_geo_tx_power_profiles_cmd version 4 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove an unused struct (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: remove support for REDUCE_TX_POWER_CMD ver 9 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove support for REDUCE_TX_POWER_CMD ver 6 and 7 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: Add dump handler to iwl_mvm (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm/mld: use average RSSI for beacons (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove extra link ID (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove IWL_MVM_ESR_EXIT_FAIL_ENTRY (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add support to enqueue management frame at MLD level (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Enable memory profile selection for QCN9274 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Refactor macros to use memory profile-based values (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Remove redundant TID calculation for QCN9274 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add a table of parameters entries impacting memory consumption (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: support average ack rssi in station dump (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add support for accepting raw DSM tables by firmware (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: don't WARN on bad firmware input (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: don't remove all keys in mcast rekey (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: don't remove all keys in mcast rekey (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: always set the key idx in gtk_seq (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: set gtk id also in older FWs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fix HE/EHT capabilities (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add iwl_trans_is_dead() API (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add iwl_trans_device_enabled() API (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add suppress_cmd_error_once() API (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: restrict puncturing disable to FM (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove regulatory puncturing setup (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: update expected range response notification version (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: update the P2P device mac before starting the GO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: fix scan request validation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix packets received in WBM error ring with REO LUT enabled (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: fix scan request validation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: add a missing include (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: trans: remove retake_ownership parameter from sw_reset (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: assign a FW API range for GF (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: assign a FW API range for HR (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: accept new devices for MVM-only configs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: inform me when op mode leaving (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: simplify iwl_poll_bits_mask return value (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove support for iwl_wowlan_status_v9 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove support for iwl_wowlan_status_v12 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add a reference to iwl_wowlan_info_notif_v3 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove support for iwl_wowlan_info_notif_v2 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: bump minimum API version for SO/MA/TY (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: assign a FW API range for JF (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: handle non-overlapping API ranges (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: allow beacon protection keys to be installed in hardware (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: set RX_FLAG_SKIP_MONITOR in WBM error path (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: pack HTT pdev rate stats structs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: update unsupported bandwidth flags in reg rules (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add the virtual monitor after reconfig complete (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: always initialize sdata::key_list (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't complete management TX on SAE commit (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211/mac80211: implement dot11ExtendedRegInfoSupport (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: send extended MLD capa/ops if AP has it (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: copy first_part into HW scan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: add a flag for the first part of a scan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: remove DISALLOW_PUNCTURING_5GHZ code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: only verify part of Extended MLD Capabilities (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: nl80211: make nl80211_check_scan_flags() type safe (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: hide scan internals (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix deactivated link CSA (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add mandatory bitrate support for 6 GHz (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: remove spurious blank line (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: verify state before connection (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Fix uninitialized variable with __free() in ieee80211_ml_epcs() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: avoid weird state in error path (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove support for iwl_wowlan_info_notif_v4 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: bump minimum API version in BZ (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove unneeded argument (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove MLO GTK rekey code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: rename iwl_pci_gen1_2_probe() argument (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: match discrete/integrated to fix some names (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove Intel driver load message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm/mld: make PHC messages debug messages (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: trans: remove iwl_trans_init (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie move common probe logic (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: bump FW API to 102 for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: Move txcmd size/align calculation to callers (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie move gen1_2 probe to gen1_2/trans.c (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: use PNVM data embedded in .ucode files (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Add an helper function for polling bits (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix rx link assignment for non-MLO stations (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: move away from using a fake platform device (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add num_stations counter for each interface (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: properly set bit for pdev mask for firmware PPDU_STATS request (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Block radio bring-up in FTM mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: advertise NL80211_FEATURE_TX_POWER_INSERTION support (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: add support for Tx Power insertion in RRM action frame (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fetch tx_retry and tx_failed from htt_ppdu_stats_user_cmpltn_common_tlv (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: correctly update bw for ofdma packets (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: add EHT support for TX rate (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: add link support for multi-link in arsta (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fill link station statistics for MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7921s: Introduce SDIO WiFi/BT combo module card reset (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt792x: improve monitor interface handling (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt792x: Limit the concurrent STA and SoftAP to operate on the same channel (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38541}
  - wifi: mt76: Get rid of dma_sync_single_for_device() for MMIO devices (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Move num_sta accounting in mt7996_mac_sta_{add,remove}_links (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Add MLO support to mt7996_tx_check_aggr() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Fix valid_links bitmask in mt7996_mac_sta_{add,remove} (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38599}
  - wifi: mt76: mt7996: Fix mlink lookup in mt7996_tx_prepare_skb (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Do not set wcid.sta to 1 in mt7996_mac_sta_event() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Rely on for_each_sta_active_link() in mt7996_mcu_sta_mld_setup_tlv() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Fix secondary link lookup in mt7996_mcu_sta_mld_setup_tlv() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: fix vif link allocation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: fix queue assignment for deauth packets (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: add a wrapper for wcid access with validation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7921: prevent decap offload config before STA initialization (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38450}
  - wifi: mt76: mt7925: fix incorrect scan probe IE handling for hw_scan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw scan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: fix the wrong config for tx interrupt (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: Remove RCU section in mt7996_mac_sta_rc_work() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: Move RCU section in mt7996_mcu_add_rate_ctrl() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: Move RCU section in mt7996_mcu_add_rate_ctrl_fixed() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: Move RCU section in mt7996_mcu_set_fixed_field() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: Assume __mt76_connac_mcu_alloc_sta_req runs in atomic context (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: prevent A-MSDU attacks in mesh networks (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38512}
  - wifi: rt2x00: fix remove callback type mismatch (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: reject VHT opmode for unsupported channel widths (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38509}
  - wifi: mwifiex: discard erroneous disassoc frames on STA interface (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38505}
  - wifi: mac80211: fix non-transmitted BSSID profile search (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: clear frame buffer to never leak stack (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: correctly identify S1G short beacon (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Enable the new rtw89_8852bu module (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add rtw8852bu.c (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852b: Add rtw8852b_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852b: Add rtw8852b_dle_mem_usb3 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852b: Fix rtw8852b_pwr_{on,off}_func() for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852bx: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: enter power save mode aggressively (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Enable the new USB modules (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add rtw8851bu.c (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add usb.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add some definitions for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: Modify rtw8851b_pwr_{on,off}_func() for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Hide some errors when the device is unplugged (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add extra TX headroom for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Disable deep power saving for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add rtw8851b_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add rtw8851b_dle_mem_usb{2,3} (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Make hfc_param_ini in rtw89_chip_info an array (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Make dle_mem in rtw89_chip_info an array (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: rfk: update IQK to 0x14 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: rfk: update DPK to 0x11 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: update NCTL 0xB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: adjust ADC setting for RF calibration (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: set ADC bandwidth select according to calibration value (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: rfk: extend DPK path_ok type to u8 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw88: coex: Use bitwise instead of arithmetic operator for flags (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38600}
  - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7915: mcu: lower default timeout (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7915: mcu: increase eeprom command timeout (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38656}
  - wifi: ath12k: add extended NSS bandwidth support for 160 MHz (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: add support for 160 MHz bandwidth (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: clean up 80P80 support (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: add support for setting fixed HE rate/GI/LTF (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: generate rx and tx mcs maps for supported HE mcs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: move HE MCS mapper to a separate function (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: push EHT MU-MIMO params to hardware (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: push HE MU-MIMO params to hardware (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath10k: shutdown driver when hardware is unreliable (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39746}
  - wifi: cfg80211: fix S1G beacon head validation in nl80211 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: fix locking on invalid TOP reset (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix timeout while waiting for regulatory update during interface creation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath10k: Fix Spelling (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add support to RTT stats (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add support to TDMA and MLO stats (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add support for transmit histogram stats (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Clear auth flag only for actual association in security mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix dest ring-buffer corruption when ring is full (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix source ring-buffer corruption (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: use plain access for descriptor length (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix dest ring-buffer corruption (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: fix dest ring-buffer corruption when ring is full (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: fix source ring-buffer corruption (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: use plain accesses for monitor descriptor (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: use plain access for descriptor length (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: fix dest ring-buffer corruption (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Send WMI_VDEV_SET_TPC_POWER_CMD for AP vdev (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add memset and update default rate value in wmi tx completion (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix beacon reception for sta associated to Non-TX AP (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: use real noise floor instead of default value (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: handle WMI event for real noise floor calculation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: Make read-only const array svc_id static const (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: fix suspend use-after-free after probe failure (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: clear initialized flag for deinit-ed srng lists (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38601}
  - dt-bindings: net: wireless: ath11k-pci: describe firmware-name property (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: support usercase-specific firmware overrides (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - dt-bindings: net: wireless: ath9k: add WIFI bindings (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath9k: ahb: replace id_table with of (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath9k: ahb: reorder includes (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath9k: ahb: reorder declarations (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: Add missing check for alloc_ordered_workqueue (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38602}
  - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: api: delete repeated words (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: remove unused no_sleep_autoadjust declaration (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: Fix comment typo (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: use DECLARE_BITMAP macro (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: fw: simplify the iwl_fw_dbg_collect_trig() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: ftm: fix switch end indentation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: don't exit EMLSR when we shouldn't (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: move _iwl_trans_set_bits_mask utilities (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: make iwl_mld_add_all_rekeys void (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: move iwl_trans_pcie_write_mem to iwl-trans.c (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: move iwl_trans_pcie_dump_regs() to utils.c (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: advertise support for TTLM changes (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: Block EMLSR when scanning on P2P Device (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: use the correct struct size for tracing (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: support RZL platform device ID (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add HE 1024QAM for <242-tone RU for PE (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: make FSEQ version a debug message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: convert to use secs_to_jiffies() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fw: make PNVM version a debug message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: make PHY config a debug message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: fix kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mei: fix kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: fix kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: dvm: fix some kernel-doc issues (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: defer MLO scan after link activation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: fix last_mlo_scan_time type (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: remove special FW error resume handling (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: add timer host wakeup debugfs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: phy periph read - flow modification (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: Add dump handler to iwl_mld (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add support for the devcoredump (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: abort D3 handshake on error (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: reinit device properly during TOP reset (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: fix misspelling of 'established' (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Remove unused cfg parameter from iwl_nvm_get_regdom_bw_flags (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: move dBm averaging function into utils (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: initiate TOP reset if requested (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: move generation specific files to a folder (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: enable antenna selection for AX210 family (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: parse VLP AP not allowed nvm channel flag (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: bump minimum API version in BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add support for S1G aggregation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add support for storing station S1G capabilities (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: handle station association response with S1G (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: support configuration of S1G station capabilities (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Set RTS threshold on per-radio basis (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Report per-radio RTS threshold to userspace (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Add Support to Set RTS Threshold for each Radio (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211/mac80211: Add support to get radio index (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add link_sta_statistics ops to fill link station statistics (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: correct RX stats packet increment for multi-link (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: extend support to fill link level sinfo structure (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: clear sinfo->filled for MLO station statistics (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add support to accumulate removed link statistics (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: allocate memory for link_station info structure (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: add statistics for providing overview for MLO station (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: extend to embed link level statistics in NL message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: add link_station_info structure to support MLO statistics (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add support towards MLO handling of station statistics (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: finish link init before RCU publish (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: update radar_required in channel context after channel switch (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: don't allow arp/nd offload to be enabled if ap mode exists (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: assume '1' as the default mac_config_cmd version (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`. (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix beacon interval calculation overflow (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: report boottime of receiving beacon and probe response (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38646}
  - wifi: rtw89: correct length for IE18/19 PHY report and IE parser (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: update EDCCA report for subband 40M/80M/sub-20M (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mac: differentiate mem_page_size by chip generation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Update Wi-Fi/Bluetooth coexistence version to 9.0.0 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: RTL8852B coexistence Wi-Fi firmware support for v0.29.122.0 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Update Bluetooth slot length when Wi-Fi is scanning (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Not to set slot duration to zero to avoid firmware issue (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Assign priority table before entering power save (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Update scoreboard to avoid Bluetooth re-link fail (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Get Bluetooth desired version by WiFi firmware version (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: RTL8922A add Wi-Fi firmware support for v0.35.71.0 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Query Bluetooth TX power when firmware support (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Enable outsource info H2C command (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Add v1 Bluetooth AFH handshake for WiFi 7 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38605}
  - wifi: ath12k: Fix double budget decrement while reaping monitor ring (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add missing include of export.h (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: Add missing include of export.h (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath10k: Add missing include of export.h (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath9k: Add missing include of export.h (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath: Add missing include of export.h (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: remove monitor handling from ath12k_dp_rx_deliver_msdu() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: install pairwise key first (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: avoid bit operation on key flags (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: handle regulatory hints during mac registration (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: update channel list in worker when wait flag is set (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: combine channel list for split-phy devices in single-wiphy (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Split scan request for split band device (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Prepare ahvif scan link for parallel scan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: disable pdev for non supported country (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38606}
  - wifi: brcmfmac: Make read-only array cfg_offset static const (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Add support for link reconfiguration negotiation offload to driver (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Improve the documentation for NL80211_CMD_ASSOC_MLO_RECONF (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mwifiex: enable host mlme on sdio W8997 chipsets (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Fix bssid_indicator for MBSSID in AP mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Allow scan on a radio while operating on DFS on another radio (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Allow DFS/CSA on a radio if scan is ongoing on another radio (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Add utility API to get radio index from channel (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ieee80211: add Radio Measurement action fields (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - PM: hibernate: shrink shmem pages after dev_pm_ops.prepare() (Anusha Srivatsa) [RHEL-116879]
  - redhat/configs: Add new configs from DRM 6.17 backport (Anusha Srivatsa) [RHEL-116879]
  - Revert "mm: rename call_mmap/mmap_prepare to vfs_mmap/mmap_prepare" (Anusha Srivatsa) [RHEL-116879]
  - Revert "mm: remove callers of pfn_t functionality" (Anusha Srivatsa) [RHEL-116879]
  - Merge DRM changes from upstream v6.16..v6.17 (Anusha Srivatsa) [RHEL-116879]
  - iommufd/selftest: Fix ioctl return value in _test_cmd_trigger_vevents() (Eder Zulian) [RHEL-116573]
  - lib/scatterlist: Add SG_MITER_LOCAL and use it (Eder Zulian) [RHEL-116573]
  - PCI: Fix driver_managed_dma check (Eder Zulian) [RHEL-116573]
  - iommu/selftest: prevent use of uninitialized variable (Eder Zulian) [RHEL-116573]
  - dma: kmsan: export kmsan_handle_dma() for modules (Eder Zulian) [RHEL-116573]
  - gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: debugfs: Fix legacy mode page table dump logic (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk (Eder Zulian) [RHEL-116573 RHEL-125486] {CVE-2025-40058}
  - iommufd: Register iommufd mock devices with fwspec (Eder Zulian) [RHEL-116573]
  - dma-mapping: fix direction in dma_alloc direction traces (Eder Zulian) [RHEL-116573]
  - KVM: PPC: Enable CAP_SPAPR_TCE_VFIO on pSeries KVM guests (Eder Zulian) [RHEL-116573]
  - redhat/configs: Enable CONFIG_X86_POSTED_MSI (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Update the fail_nth limit (Eder Zulian) [RHEL-116573]
  - iommufd: WARN if an object is aborted with an elevated refcount (Eder Zulian) [RHEL-116573]
  - iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-116573 RHEL-123791] {CVE-2025-39966}
  - iommufd: Fix refcounting race during mmap (Eder Zulian) [RHEL-116573]
  - iommu/amd/pgtbl: Fix possible race while increase page table level (Eder Zulian) [RHEL-116573] {CVE-2025-39961}
  - iommu/amd: Fix alias device DTE setting (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() (Eder Zulian) [RHEL-116573]
  - iommu/amd: Fix ivrs_base memleak in early_amd_iommu_init() (Eder Zulian) [RHEL-116573]
  - dma-debug: don't enforce dma mapping check on noncoherent allocations (Eder Zulian) [RHEL-116573]
  - dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted (Eder Zulian) [RHEL-116573]
  - iommufd: Fix spelling errors in iommufd.rst (Eder Zulian) [RHEL-116573]
  - iommufd: viommu: free memory allocated by kvcalloc() using kvfree() (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Fix missing cpu_to_le64 at lvcmdq_err_map (Eder Zulian) [RHEL-116573]
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline (Eder Zulian) [RHEL-116573] {CVE-2025-38676}
  - iommu/arm-smmu-v3: Replace vsmmu_size/type with get_viommu_size (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3: Do not bother impl_ops if IOMMU_VIOMMU_TYPE_ARM_SMMUV3 (Eder Zulian) [RHEL-116573]
  - iommufd: Rename some shortterm-related identifiers (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add coverage for vdevice tombstone (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Explicitly skip tests for inapplicable variant (Eder Zulian) [RHEL-116573]
  - iommufd/vdevice: Remove struct device reference from struct vdevice (Eder Zulian) [RHEL-116573]
  - iommufd: Destroy vdevice on idevice destroy (Eder Zulian) [RHEL-116573]
  - iommufd: Add a pre_destroy() op for objects (Eder Zulian) [RHEL-116573]
  - iommufd: Add iommufd_object_tombstone_user() helper (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Roll back to use iommufd_object_alloc() for vdevice (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Test reserved regions near ULONG_MAX (Eder Zulian) [RHEL-116573]
  - iommufd: Prevent ALIGN() overflow (Eder Zulian) [RHEL-116573] {CVE-2025-38688}
  - iommu/tegra241-cmdqv: import IOMMUFD module namespace (Eder Zulian) [RHEL-116573]
  - iommufd: Do not allow _iommufd_object_alloc_ucmd if abort op is set (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Add IOMMU_VEVENTQ_TYPE_TEGRA241_CMDQV support (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Add user-space use support (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Do not statically map LVCMDQs (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Simplify deinit flow in tegra241_cmdqv_remove_vintf() (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Use request_threaded_irq (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3-iommufd: Add hw_info to impl_ops (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3-iommufd: Add vsmmu_size/type and vsmmu_init impl ops (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Update hw_info coverage for an input data_type (Eder Zulian) [RHEL-116573]
  - iommufd: Allow an input data_type via iommu_hw_info (Eder Zulian) [RHEL-116573]
  - iommu: Allow an input type in hw_info op (Eder Zulian) [RHEL-116573]
  - Documentation: userspace-api: iommufd: Update HW QUEUE (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add coverage for the new mmap interface (Eder Zulian) [RHEL-116573]
  - iommufd: Add mmap interface (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add coverage for IOMMUFD_CMD_HW_QUEUE_ALLOC (Eder Zulian) [RHEL-116573]
  - iommufd/driver: Add iommufd_hw_queue_depend/undepend() helpers (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Add IOMMUFD_CMD_HW_QUEUE_ALLOC ioctl (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Introduce IOMMUFD_OBJ_HW_QUEUE and its related struct (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Add driver-defined vDEVICE support (Eder Zulian) [RHEL-116573]
  - iommufd/access: Bypass access->ops->unmap for internal use (Eder Zulian) [RHEL-116573]
  - iommufd/access: Add internal APIs for HW queue to use (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add coverage for viommu data (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Support user_data in mock_viommu_alloc (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Allow driver-specific user data for a vIOMMU object (Eder Zulian) [RHEL-116573]
  - iommu: Pass in a driver-level user data structure to viommu_init op (Eder Zulian) [RHEL-116573]
  - iommu: Add iommu_copy_struct_to_user helper (Eder Zulian) [RHEL-116573]
  - iommu: Use enum iommu_hw_info_type for type in hw_info op (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Explicitly define vdev->virt_id (Eder Zulian) [RHEL-116573]
  - iommufd: Correct virt_id kdoc at struct iommu_vdevice_alloc (Eder Zulian) [RHEL-116573]
  - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (Eder Zulian) [RHEL-116573]
  - iommufd: Apply the new iommufd_object_alloc_ucmd helper (Eder Zulian) [RHEL-116573]
  - iommufd: Introduce iommufd_object_alloc_ucmd helper (Eder Zulian) [RHEL-116573]
  - iommufd: Move _iommufd_object_alloc out of driver.c (Eder Zulian) [RHEL-116573]
  - iommu: Deprecate viommu_alloc op (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3: Replace arm_vsmmu_alloc with arm_vsmmu_init (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Replace mock_viommu_alloc with mock_viommu_init (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Drop parent domain from mock_iommu_domain_nested (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Support get_viommu_size and viommu_init ops (Eder Zulian) [RHEL-116573]
  - iommu: Introduce get_viommu_size and viommu_init ops (Eder Zulian) [RHEL-116573]
  - iommufd: Return EOPNOTSUPP for failures due to driver bugs (Eder Zulian) [RHEL-116573]
  - iommufd: Use enum iommu_veventq_type for type in struct iommufd_veventq (Eder Zulian) [RHEL-116573]
  - iommufd: Use enum iommu_viommu_type for type in struct iommufd_viommu (Eder Zulian) [RHEL-116573]
  - iommufd: Drop unused ictx in struct iommufd_vdevice (Eder Zulian) [RHEL-116573]
  - iommufd: Apply obvious cosmetic fixes (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu: disable PRR on SM8250 (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3: Revert vmaster in the error path (Eder Zulian) [RHEL-116573]
  - iommu/io-pgtable-arm: Remove unused macro iopte_prot (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (Eder Zulian) [RHEL-116573] {CVE-2025-39739}
  - iommu/amd: Fix geometry.aperture_end for V2 tables (Eder Zulian) [RHEL-116573]
  - iommu/amd: Wrap debugfs ABI testing symbols snippets in literal code blocks (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add documentation for AMD IOMMU debugfs support (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add debugfs support to dump IRT Table (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add debugfs support to dump device table (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add support for device id user input (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add debugfs support to dump IOMMU command buffer (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add debugfs support to dump IOMMU Capability registers (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add debugfs support to dump IOMMU MMIO registers (Eder Zulian) [RHEL-116573]
  - iommu/amd: Refactor AMD IOMMU debugfs initial setup (Eder Zulian) [RHEL-116573]
  - iommu/amd: Enable PASID and ATS capabilities in the correct order (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (Eder Zulian) [RHEL-116573] {CVE-2025-38594}
  - iommu/vt-d: Make iotlb_sync_map a static property of dmar_domain (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Split paging_domain_compatible() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Split intel_iommu_enforce_cache_coherency() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Create unique domain ops for each stage (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Split intel_iommu_domain_alloc_paging_flags() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Do not wipe out the page table NID when devices detach (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Fold domain_exit() into intel_iommu_domain_free() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Lift the __pa to domain_setup_first_level/intel_svm_set_dev_pasid() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Remove the CONFIG_X86 wrapping from iommu init hook (Eder Zulian) [RHEL-116573]
  - iommu/intel: Convert to msi_create_parent_irq_domain() helper (Eder Zulian) [RHEL-116573]
  - iommu/amd: Convert to msi_create_parent_irq_domain() helper (Eder Zulian) [RHEL-116573]
  - iommu: Remove ops->pgsize_bitmap (Eder Zulian) [RHEL-116573]
  - iommu: Remove iommu_ops pgsize_bitmap from simple drivers (Eder Zulian) [RHEL-116573]
  - iommu: Remove ops.pgsize_bitmap from drivers that don't use it (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu: Remove iommu_ops pgsize_bitmap (Eder Zulian) [RHEL-116573]
  - qiommu/arm-smmu-v3: Remove iommu_ops pgsize_bitmap (Eder Zulian) [RHEL-116573]
  - dmaengine: idxd: Remove unnecessary IOMMU_DEV_FEAT_IOPF (Eder Zulian) [RHEL-116573]
  - dma-contiguous: hornor the cma address limit setup by user (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Fix build warnings due to uninitialized mfd (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add asserts testing global mfd (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add missing close(mfd) in memfd_mmap() (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes (Eder Zulian) [RHEL-116573]
  - iommu/tegra: Fix incorrect size calculation (Eder Zulian) [RHEL-116573]
  - scatterlist: fix extraneous '@'-sign kernel-doc notation (Eder Zulian) [RHEL-116573]
  - scatterlist: inline sg_next() (Eder Zulian) [RHEL-116573]
  - iommu: Clear the freelist after iommu_put_pages_list() (Eder Zulian) [RHEL-116573]
  - iommu: make inclusion of amd directory conditional (Eder Zulian) [RHEL-116573]
  - iommu: make inclusion of intel directory conditional (Eder Zulian) [RHEL-116573]
  - iommu: Cleanup comments for dev_enable/disable_feat (Eder Zulian) [RHEL-116573]
  - iommu: Hide ops.domain_alloc behind CONFIG_FSL_PAMU (Eder Zulian) [RHEL-116573]
  - iommu: Do not call domain_alloc() in iommu_sva_domain_alloc() (Eder Zulian) [RHEL-116573]
  - iommu/virtio: Move to domain_alloc_paging() (Eder Zulian) [RHEL-116573]
  - iommu: Add domain_alloc_identity() (Eder Zulian) [RHEL-116573]
  - iommu/virtio: Break out bypass identity support into a global static (Eder Zulian) [RHEL-116573]
  - iommu: Remove iommu_dev_enable/disable_feature() (Eder Zulian) [RHEL-116573]
  - iommufd: Remove unnecessary IOMMU_DEV_FEAT_IOPF (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Put iopf enablement in domain attach path (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Put iopf enablement in domain attach path (Eder Zulian) [RHEL-116573]
  - iommu: Remove IOMMU_DEV_FEAT_SVA (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3: Put iopf enablement in the domain attach path (Eder Zulian) [RHEL-116573]
  - iommu: Split out and tidy up Arm Kconfig (Eder Zulian) [RHEL-116573]
  - iommu: Avoid introducing more races (Eder Zulian) [RHEL-116573]
  - iommu/vtd: Remove iommu_alloc_pages_node() (Eder Zulian) [RHEL-116573]
  - iommu/amd: Use iommu_alloc_pages_node_sz() for the IRT (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove iommu_alloc_page_node() (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove iommu_alloc_page/pages() (Eder Zulian) [RHEL-116573]
  - iommu: Update various drivers to pass in lg2sz instead of order to iommu pages (Eder Zulian) [RHEL-116573]
  - iommu/amd: Use roundup_pow_two() instead of get_order() (Eder Zulian) [RHEL-116573]
  - iommu/amd: Change rlookup, irq_lookup, and alias to use kvalloc() (Eder Zulian) [RHEL-116573]
  - iommu/pages: Allow sub page sizes to be passed into the allocator (Eder Zulian) [RHEL-116573]
  - iommu/pages: Move the __GFP_HIGHMEM checks into the common code (Eder Zulian) [RHEL-116573]
  - iommu/pages: Move from struct page to struct ioptdesc and folio (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove iommu_put_pages_list_old and the _Generic (Eder Zulian) [RHEL-116573]
  - iommu: Change iommu_iotlb_gather to use iommu_page_list (Eder Zulian) [RHEL-116573]
  - iommu/amd: Convert to use struct iommu_pages_list (Eder Zulian) [RHEL-116573]
  - iommu/pages: Formalize the freelist API (Eder Zulian) [RHEL-116573]
  - iommu/pages: De-inline the substantial functions (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove iommu_free_page() (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove the order argument to iommu_free_pages() (Eder Zulian) [RHEL-116573]
  - iommu/pages: Make iommu_put_pages_list() work with high order allocations (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove __iommu_alloc_pages()/__iommu_free_pages() (Eder Zulian) [RHEL-116573]
  - iommu/tegra: Do not use struct page as the handle for pts (Eder Zulian) [RHEL-116573]
  - iommu/terga: Do not use struct page as the handle for as->pd memory (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add support for HTRangeIgnore feature (Eder Zulian) [RHEL-116573]
  - iommu/amd: Ensure GA log notifier callbacks finish running before module unload (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Change dmar_ats_supported() to return boolean (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Eliminate pci_physfn() in dmar_find_matched_satc_unit() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Replace spin_lock with mutex to protect domain ida (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Use ida to manage domain id (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Restore WO permissions on second-level paging entries (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-qcom: Add SAR2130P MDSS compatible (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-qcom: Make set_stall work when the device is on (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu: Move handing of RESUME to the context fault handler (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-qcom: Enable threaded IRQ for Adreno SMMUv2/MMU500 (Eder Zulian) [RHEL-116573]
  - iommu/io-pgtable-arm: Add quirk to quiet WARN_ON() (Eder Zulian) [RHEL-116573]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-168.el10]
changelog:
  - iommufd/driver: Fix counter initialization for counted_by annotation (Eder Zulian) [RHEL-131337]
  - iommufd/iommufd_private.h: Avoid -Wflex-array-member-not-at-end warning (Eder Zulian) [RHEL-131337]
  - iommufd: Don't overflow during division for dirty tracking (Eder Zulian) [RHEL-131337]
  - Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" (CKI Backport Bot) [RHEL-131050] {CVE-2025-40210}
  - arm64: Kconfig: Enable GICv5 (Mark Salter) [RHEL-125230]
  - of/irq: Add msi-parent check to of_msi_xlate() (Mark Salter) [RHEL-125230]
  - of/irq: Convert of_msi_map_id() callers to of_msi_xlate() (Mark Salter) [RHEL-125230]
  - Enable Rockchip erratum workaround (Mark Salter) [RHEL-125230]
  - arm64: cpucaps: Add GICv5 Legacy vCPU interface (GCIE_LEGACY) capability (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Drop has_gcie_v3_compat from gic_kvm_info (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Fix error handling in gicv5_its_irq_domain_alloc() (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Fix loop in gicv5_its_create_itt_two_level() cleanup path (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Delete a stray tab (Mark Salter) [RHEL-125230]
  - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment (Mark Salter) [RHEL-125230]
  - irqchip: Use int type to store negative error codes (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Remove the redundant ITS cache invalidation (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Remove undue WARN_ON()s in the IRS affinity parsing (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Fix kmemleak L2 IST table entries false positives (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Remove IRQD_RESEND_WHEN_IN_PROGRESS for ITS IRQs (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: iwb: Fix iounmap probe failure path (Mark Salter) [RHEL-125230]
  - irqchip/gic-v3: Fix GICD_CTLR register naming (Mark Salter) [RHEL-125230]
  - arm64/sysreg: Add ICH_VCTLR_EL2 (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Populate struct gic_kvm_info (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Skip deactivate for forwarded PPI interrupts (Mark Salter) [RHEL-125230]
  - docs: arm64: gic-v5: Document booting requirements for GICv5 (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Add GICv5 IWB support (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Add GICv5 ITS support (Mark Salter) [RHEL-125230]
  - irqchip/gic-v3: Rename GICv3 ITS MSI parent (Mark Salter) [RHEL-125230]
  - PCI/MSI: Add pci_msi_map_rid_ctlr_node() helper function (Mark Salter) [RHEL-125230]
  - of/irq: Add of_msi_xlate() helper function (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Enable GICv5 SMP booting (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Add GICv5 LPI/IPI support (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Add GICv5 IRS/SPI support (Mark Salter) [RHEL-125230]
  - irqchip/gic-v5: Add GICv5 PPI support (Mark Salter) [RHEL-125230]
  - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI (Mark Salter) [RHEL-125230]
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Mark Salter) [RHEL-125230]
  - irqchip/gic-v3: Add Rockchip 3568002 erratum workaround (Mark Salter) [RHEL-125230]
  - irqchip/gic-v3: Fix rk3399 workaround when secure interrupts are enabled (Mark Salter) [RHEL-125230]
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Mark Salter) [RHEL-125230]
  - irqchip/gic-v3: Work around insecure GIC integrations (Mark Salter) [RHEL-125230]
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Mark Salter) [RHEL-125230]
  - irqchip/gic-v3: Fix irq_complete_ack() comment (Mark Salter) [RHEL-125230]
  - net: tun: Update napi->skb after XDP process (CKI Backport Bot) [RHEL-122243] {CVE-2025-39984}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-169.el10]
changelog:
  - crypto: iaa - Fix incorrect return value in save_iaa_wq() (CKI Backport Bot) [RHEL-132474]
  - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-127604]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-171.el10]
changelog:
  - be2net: pass wrb_params in case of OS2BMC (Mohammad Heib) [RHEL-96555 RHEL-99249]
  - be2net: Use correct byte order and format string for TCP seq and ack_seq (Mohammad Heib) [RHEL-96555 RHEL-99249]
  - s390/stp: Default to enabled (Mete Durlu) [RHEL-62194]
  - s390/stp: Remove leap second support (Mete Durlu) [RHEL-62194]
  - s390/time: Remove in-kernel time steering (Mete Durlu) [RHEL-62194]
  - s390/sclp: Use monotonic clock in sclp_sync_wait() (Mete Durlu) [RHEL-62194]
  - s390/smp: Use monotonic clock in smp_emergency_stop() (Mete Durlu) [RHEL-62194]
  - s390/time: Use monotonic clock in get_cycles() (Mete Durlu) [RHEL-62194]
  - s390/stp: Remove udelay from stp_sync_clock() (Mete Durlu) [RHEL-62194]
  - ice: fix NULL pointer dereference in ice_unplug_aux_dev() on reset (Michal Schmidt) [RHEL-127155]
  - iidc/ice/irdma: Update IDC to support multiple consumers (Michal Schmidt) [RHEL-127155]
  - ice: Replace ice specific DSCP mapping num with a kernel define (Michal Schmidt) [RHEL-127155]
  - iidc/ice/irdma: Break iidc.h into two headers (Michal Schmidt) [RHEL-127155]
  - iidc/ice/irdma: Rename to iidc_* convention (Michal Schmidt) [RHEL-127155]
  - iidc/ice/irdma: Rename IDC header file (Michal Schmidt) [RHEL-127155]
  - scsi: qla4xxx: Fix typos in comments (Chris Leech) [RHEL-121668]
  - scsi: qla4xxx: Prevent a potential error pointer dereference (Chris Leech) [RHEL-121668]
  - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (Chris Leech) [RHEL-121668]
  - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (Chris Leech) [RHEL-121668]
  - scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() (Chris Leech) [RHEL-121668]
  - scsi: iscsi: Fix incorrect error path labels for flashnode operations (Chris Leech) [RHEL-121668]
  - scsi: qla4xxx: Remove duplicate struct crb_addr_pair (Chris Leech) [RHEL-121668]
  - scsi: qedi: Remove unused qedi_get_proto_itt() (Chris Leech) [RHEL-121668]
  - scsi: qedi: Remove unused sysfs functions (Chris Leech) [RHEL-121668]
  - ata: libata-core: relax checks in ata_read_log_directory() (Tomas Henzl) [RHEL-105431]
  - ata: libata-sff: drop nth_page() usage within SG entry (Tomas Henzl) [RHEL-105431]
  - ata: ahci_xgene: Use int type for 'rc' to store error codes (Tomas Henzl) [RHEL-105431]
  - ata: ahci: Allow ignoring the external/hotplug capability of ports (Tomas Henzl) [RHEL-105431]
  - ata: libata-scsi: Fix CDL control (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Fix link state check for IDE/PATA ports (Tomas Henzl) [RHEL-105431]
  - ata: pata_pdc2027x: Remove space before newline and abbreviations (Tomas Henzl) [RHEL-105431]
  - ata: pata_macio: Remove space before newline (Tomas Henzl) [RHEL-105431]
  - ata: libata-core: Remove space before newline (Tomas Henzl) [RHEL-105431]
  - ata: libata-sata: Add link_power_management_supported sysfs attribute (Tomas Henzl) [RHEL-105431]
  - ata: libata-scsi: Return aborted command when missing sense and result TF (Tomas Henzl) [RHEL-105431]
  - ata: libata-scsi: Fix ata_to_sense_error() status handling (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Simplify reset operation management (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Remove ata_do_eh() (Tomas Henzl) [RHEL-105431]
  - ata: pata_rdc: Use registered definition for the RDC vendor (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Make ata_eh_followup_srst_needed() return a bool (Tomas Henzl) [RHEL-105431]
  - ata: libata-transport: replace scnprintf with sysfs_emit for simple attributes (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: use bool for fastdrain in ata_eh_set_pending() (Tomas Henzl) [RHEL-105431]
  - ata: libata: Introduce ata_port_eh_scheduled() (Tomas Henzl) [RHEL-105431]
  - ata: libata-core: Rename ata_do_set_mode() (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Rename and make ata_set_mode() static (Tomas Henzl) [RHEL-105431]
  - ata: libata-core: Make ata_dev_cleanup_cdl_resources() static (Tomas Henzl) [RHEL-105431]
  - ata: libata-core: Cache the general purpose log directory (Tomas Henzl) [RHEL-105431]
  - ata: libata_eh: Add debug messages to ata_eh_link_set_lpm() (Tomas Henzl) [RHEL-105431]
  - ata: libata-core: Reduce the number of messages signaling broken LPM (Tomas Henzl) [RHEL-105431]
  - ata: ahci: Disallow LPM policy control if not supported (Tomas Henzl) [RHEL-105431]
  - ata: ahci: Disallow LPM policy control for external ports (Tomas Henzl) [RHEL-105431]
  - ata: ahci: Disable DIPM if host lacks support (Tomas Henzl) [RHEL-105431]
  - ata: libata-sata: Disallow changing LPM state if not supported (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Avoid unnecessary resets when revalidating devices (Tomas Henzl) [RHEL-105431]
  - ata: libata-core: Advertize device support for DIPM and HIPM features (Tomas Henzl) [RHEL-105431]
  - ata: libata-core: Move device LPM quirk settings to ata_dev_config_lpm() (Tomas Henzl) [RHEL-105431]
  - ata: libata-core: Introduce ata_dev_config_lpm() (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Move and rename ata_eh_set_lpm() (Tomas Henzl) [RHEL-105431]
  - ata: ahci: Clarify mobile_lpm_policy description (Tomas Henzl) [RHEL-105431]
  - ata: libata: Improve LPM policies description (Tomas Henzl) [RHEL-105431]
  - ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig (Tomas Henzl) [RHEL-105431]
  - ata: libata-scsi: Cleanup ata_scsi_offline_dev() (Tomas Henzl) [RHEL-105431]
  - ata: libata: Remove ATA_DFLAG_ZAC device flag (Tomas Henzl) [RHEL-105431]
  - ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Tomas Henzl) [RHEL-105431]
  - ata: ahci: Disallow LPM for Asus B550-F motherboard (Tomas Henzl) [RHEL-105431]
  - ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Tomas Henzl) [RHEL-105431]
  - ata: ahci: Use correct BIOS build date for ThinkPad W541 quirk (Tomas Henzl) [RHEL-105431]
  - ata: pata_cs5536: fix build on 32-bit UML (Tomas Henzl) [RHEL-105431]
  - ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled (Tomas Henzl) [RHEL-105431]
  - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Keep DIPM disabled while modifying the allowed LPM states (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Rename no_dipm variable to be more clear (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Rename hipm and dipm variables (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Add ata_eh_set_lpm() WARN_ON_ONCE (Tomas Henzl) [RHEL-105431]
  - ata: libata-eh: Update DIPM comments to reflect reality (Tomas Henzl) [RHEL-105431]
  - ata: libata: Print if port is external on boot (Tomas Henzl) [RHEL-105431]
  - ata: libata-scsi: Do not set the INFORMATION field twice for ATA PT (Tomas Henzl) [RHEL-105431]
  - ata: sata_sx4: Fix spelling mistake "parttern" -> "pattern" (Tomas Henzl) [RHEL-105431]
  - ata: libata-scsi: Improve CDL control (Tomas Henzl) [RHEL-105431]
  - ata: libata-scsi: Fix ata_msense_control_ata_feature() (Tomas Henzl) [RHEL-105431]
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Tomas Henzl) [RHEL-105431]
  - ata: libata-sata: Use BIT() macro to convert tag to bit field (Tomas Henzl) [RHEL-105431]
  - ata: libata-sata: Simplify sense_valid fetching (Tomas Henzl) [RHEL-105431]
  - ata: libata-core: Simplify ata_print_version_once (Tomas Henzl) [RHEL-105431]
  - ata: libata-sata: Save all fields from sense data descriptor (Tomas Henzl) [RHEL-105431]
  - ata: libata: Remove unused macro definitions (Tomas Henzl) [RHEL-105431]
  - tools headers x86 cpufeatures: Sync with the kernel sources (Maxim Levitsky) [RHEL-120168]
  - tools headers x86 svm: Sync svm headers with the kernel sources (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Re-load current, not host, TSC_AUX on #VMEXIT from SEV-ES guest (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Add helper to retrieve current value of user return MSR (Maxim Levitsky) [RHEL-120168]
  - KVM: SEV: Reject non-positive effective lengths during LAUNCH_UPDATE (Maxim Levitsky) [RHEL-120168]
  - selftests/kvm: remove stale TODO in xapic_state_test (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Handle Intel Atom errata that leads to PMU event overcount (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Validate more arch-events in pmu_counters_test (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Reduce number of "unavailable PMU events" combos tested (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Track unavailable_mask for PMU events as 32-bit value (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Add timing_info bit support in vmx_pmu_caps_test (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Fix hypercalls docs section number order (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Don't treat ENTER and LEAVE as branches, because they aren't (Maxim Levitsky) [RHEL-120168]
  - KVM: TDX: Fix uninitialized error code for __tdx_bringup() (Maxim Levitsky) [RHEL-120168]
  - crypto: ccp - Add AMD Seamless Firmware Servicing (SFS) driver (Maxim Levitsky) [RHEL-120168]
  - crypto: ccp - Add new HV-Fixed page allocation/free API (Maxim Levitsky) [RHEL-120168]
  - x86/sev: Add new dump_rmp parameter to snp_leak_pages() API (Maxim Levitsky) [RHEL-120168]
  - Documentation: KVM: Call out that KVM strictly follows the 8254 PIT spec (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Use guard() instead of mutex_lock() to simplify code (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/pmu: Correct typo "_COUTNERS" to "_COUNTERS" (Maxim Levitsky) [RHEL-120168]
  - KVM: TDX: Reject fully in-kernel irqchip if EOIs are protected, i.e. for TDX VMs (Maxim Levitsky) [RHEL-120168]
  - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT (Maxim Levitsky) [RHEL-120168]
  - x86/kvm: Make kvm_async_pf_task_wake() a local static helper (Maxim Levitsky) [RHEL-120168]
  - KVM: TDX: Do not retry locally when the retry is caused by invalid memslot (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/mmu: Return -EAGAIN if userspace deletes/moves memslot during prefault (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Move vector_hashing into lapic.c (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Make "lowest priority" helpers local to lapic.c (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Move kvm_irq_delivery_to_apic() from irq.c to lapic.c (Maxim Levitsky) [RHEL-120168]
  - KVM: SEV: Save the SEV policy if and only if LAUNCH_START succeeds (Maxim Levitsky) [RHEL-120168]
  - x86/tdx: Skip clearing reclaimed pages unless X86_BUG_TDX_PW_MCE is present (Maxim Levitsky) [RHEL-120168]
  - x86/tdx: Tidy reset_pamt functions (Maxim Levitsky) [RHEL-120168]
  - x86/tdx: Eliminate duplicate code in tdx_clear_page() (Maxim Levitsky) [RHEL-120168]
  - kvm: x86: simplify kvm_vector_to_index() (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs (Maxim Levitsky) [RHEL-120168]
  - arch/x86/kvm/ioapic: Remove license boilerplate with bad FSF address (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 (Maxim Levitsky) [RHEL-120168]
  - KVM: TDX: Remove redundant __GFP_ZERO (Maxim Levitsky) [RHEL-120168]
  - KVM: remove redundant __GFP_NOWARN (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Fix an indentation (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Move Intel and AMD module param helpers to x86/processor.h (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Fix signedness issue with vCPU mmap size check (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active (Maxim Levitsky) [RHEL-120168]
  - selftests: harness: Rename is_signed_type() to avoid collision with overflow.h (Maxim Levitsky) [RHEL-120168]
  - KVM: SEV: don't check have_run_cpus in sev_writeback_caches() (Maxim Levitsky) [RHEL-120168]
  - tools headers: Sync KVM headers with the kernel source (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: use array_index_nospec with indices that come from guest (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: fix typo "notifer" (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Reject KVM_SET_TSC_KHZ VM ioctl when vCPUs have been created (Maxim Levitsky) [RHEL-120168]
  - x86/apic: Rename 'reg_off' to 'reg' (Maxim Levitsky) [RHEL-120168]
  - x86/apic: KVM: Move apic_test)vector() to common code (Maxim Levitsky) [RHEL-120168]
  - x86/apic: KVM: Move lapic set/clear_vector() helpers to common code (Maxim Levitsky) [RHEL-120168]
  - x86/apic: KVM: Move lapic get/set helpers to common code (Maxim Levitsky) [RHEL-120168]
  - x86/apic: KVM: Move apic_find_highest_vector() to a common header (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Rename lapic set/clear vector helpers (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Rename lapic get/set_reg64() helpers (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Rename lapic get/set_reg() helpers (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Rename find_highest_vector() (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Change lapic regs base address to void pointer (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Rename VEC_POS/REG_POS macro usages (Maxim Levitsky) [RHEL-120168]
  - x86/apic: KVM: Deduplicate APIC vector => register+bit math (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Remove redundant parentheses around 'bitmap' (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Open code setting/clearing of bits in the ISR (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Add CONFIG_EVENTFD for irqfd selftest (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Flush cache only on CPUs running SEV guest (Maxim Levitsky) [RHEL-120168]
  - x86/lib: Add WBINVD and WBNOINVD helpers to target multiple CPUs (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Use wbinvd_on_cpu() instead of an open-coded equivalent (Maxim Levitsky) [RHEL-120168]
  - KVM: SEV: Prefer WBNOINVD over WBINVD for cache maintenance efficiency (Maxim Levitsky) [RHEL-120168]
  - x86/lib: Add WBNOINVD helper functions (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Remove wbinvd in sev_vm_destroy() (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Convert arch_timer tests to common helpers to pin task (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Test behavior of KVM_X86_DISABLE_EXITS_APERFMPERF (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Expand set of APIs for pinning tasks to a single CPU (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Provide a capability to disable APERF/MPERF read intercepts (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Replace growing set of *_in_guest bools with a u64 (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Advertise support for LKGS (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Add a macro to track which DEBUGCTL bits are host-owned (Maxim Levitsky) [RHEL-120168]
  - KVM: guest_memfd: Remove redundant kvm_gmem_getattr implementation (Maxim Levitsky) [RHEL-120168]
  - VFIO: KVM: x86: Drop kvm_arch_{start,end}_assignment() (Maxim Levitsky) [RHEL-120168]
  - Revert "kvm: detect assigned device via irqbypass manager" (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Apply MMIO Stale Data mitigation if KVM maps MMIO into the guest (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/mmu: Locally cache whether a PFN is host MMIO when making a SPTE (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Avoid calling kvm_is_mmio_pfn() when kvm_x86_ops.get_mt_mask is NULL (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Simplify MSR interception logic for IA32_XSS MSR (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Deduplicate MSR interception enabling and disabling (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/mmu: Defer allocation of shadow MMU's hashed page list (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Use kvzalloc() to allocate VM struct (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/mmu: Dynamically allocate shadow MMU's hashed page list (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Add utilities to create eventfds and do KVM_IRQFD (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Assert that eventfd() succeeds in Xen shinfo test (Maxim Levitsky) [RHEL-120168]
  - KVM: Drop sanity check that per-VM list of irqfds is unique (Maxim Levitsky) [RHEL-120168]
  - KVM: Disallow binding multiple irqfds to an eventfd with a priority waiter (Maxim Levitsky) [RHEL-120168]
  - sched/wait: Add a waitqueue helper for fully exclusive priority waiters (Maxim Levitsky) [RHEL-120168]
  - xen: privcmd: Don't mark eventfd waiter as EXCLUSIVE (Maxim Levitsky) [RHEL-120168]
  - sched/wait: Drop WQ_FLAG_EXCLUSIVE from add_wait_queue_priority() (Maxim Levitsky) [RHEL-120168]
  - KVM: Add irqfd to eventfd's waitqueue while holding irqfds.lock (Maxim Levitsky) [RHEL-120168]
  - KVM: Add irqfd to KVM's list via the vfs_poll() callback (Maxim Levitsky) [RHEL-120168]
  - assorted variants of irqfd setup: convert to CLASS(fd) (Maxim Levitsky) [RHEL-120168]
  - KVM: Initialize irqfd waitqueue callback when adding to the queue (Maxim Levitsky) [RHEL-120168]
  - KVM: Acquire SCRU lock outside of irqfds.lock during assignment (Maxim Levitsky) [RHEL-120168]
  - KVM: Use a local struct to do the initial vfs_poll() on an irqfd (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Rename kvm_set_msi_irq() => kvm_msi_to_lapic_irq() (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Generate GA log IRQs only if the associated vCPUs is blocking (Maxim Levitsky) [RHEL-120168]
  - iommu/amd: KVM: SVM: Allow KVM to control need for GA log interrupts (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Consolidate IRTE update when toggling AVIC on/off (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Don't check vCPU's blocking status when toggling AVIC on/off (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Fold avic_set_pi_irte_mode() into its sole caller (Maxim Levitsky) [RHEL-120168]
  - iommu/amd: WARN if KVM calls GA IRTE helpers without virtual APIC support (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Use vcpu_idx, not vcpu_id, for GA log tag/metadata (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: WARN if VT-d Posted IRQs aren't possible when starting IRQ bypass (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Decouple device assignment from IRQ bypass (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: WARN if ir_list is non-empty at vCPU free (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: WARN if IRQ bypass routing is updated without in-kernel local APIC (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: WARN if IRQ bypass isn't supported in kvm_pi_update_irte() (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Drop superfluous "has assigned device" check in kvm_pi_update_irte() (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: WARN if updating IRTE GA fields in IOMMU fails (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Process all IRTEs on affinity change even if one update fails (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: WARN if (de)activating guest mode in IOMMU fails (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Don't check for assigned device(s) when activating AVIC (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Don't check for assigned device(s) when updating affinity (Maxim Levitsky) [RHEL-120168]
  - iommu/amd: KVM: SVM: Add IRTE metadata to affined vCPU's list if AVIC is inhibited (Maxim Levitsky) [RHEL-120168]
  - iommu/amd: KVM: SVM: Set pCPU info in IRTE when setting vCPU affinity (Maxim Levitsky) [RHEL-120168]
  - iommu/amd: Factor out helper for manipulating IRTE GA/CPU info (Maxim Levitsky) [RHEL-120168]
  - iommu/amd: KVM: SVM: Infer IsRun from validity of pCPU destination (Maxim Levitsky) [RHEL-120168]
  - iommu/amd: Document which IRTE fields amd_iommu_update_ga() can modify (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Take and hold ir_list_lock across IRTE updates in IOMMU (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Revert IRTE to legacy mode if IOMMU doesn't provide IR metadata (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Don't update IRTE entries when old and new routes were !MSI (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Skip IOMMU IRTE updates if there's no old or new vCPU being targeted (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Track irq_bypass_vcpu in common x86 code (Maxim Levitsky) [RHEL-120168]
  - KVM: Fold kvm_arch_irqfd_route_changed() into kvm_arch_update_irqfd_routing() (Maxim Levitsky) [RHEL-120168]
  - KVM: Don't WARN if updating IRQ bypass route fails (Maxim Levitsky) [RHEL-120168]
  - iommu: KVM: Split "struct vcpu_data" into separate AMD vs. Intel structs (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Clean up return handling in avic_pi_update_irte() (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Move posted interrupt tracepoint to common code (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Dedup AVIC vs. PI code for identifying target vCPU (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Nullify irqfd->producer after updating IRTEs (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Move IRQ routing/delivery APIs from x86.c => irq.c (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Extract SVM specific code out of get_pi_vcpu_info() (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Stop walking list of routing table entries when updating IRTE (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Stop walking list of routing table entries when updating IRTE (Maxim Levitsky) [RHEL-120168]
  - iommu/amd: KVM: SVM: Pass NULL @vcpu_info to indicate "not guest mode" (Maxim Levitsky) [RHEL-120168]
  - iommu/amd: KVM: SVM: Use pi_desc_addr to derive ga_root_ptr (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Add a comment to explain why avic_vcpu_blocking() ignores IRQ blocking (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Suppress PI notifications whenever the vCPU is put (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Disable (x2)AVIC IPI virtualization if CPU has erratum #1235 (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Add enable_ipiv param, never set IsRunning if disabled (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Move enable_ipiv knob to common x86 (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Drop superfluous "cache" of AVIC Physical ID entry pointer (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Track AVIC tables as natively sized pointers, not "struct pages" (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Drop redundant check in AVIC code on ID during vCPU creation (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Inhibit AVIC if ID is too big instead of rejecting vCPU creation (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Drop vcpu_svm's pointless avic_backing_page field (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Add helper to deduplicate code for getting AVIC backing page (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Drop pointless masking of kernel page pa's with AVIC HPA masks (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Drop pointless masking of default APIC base when setting V_APIC_BAR (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Delete IRTE link from previous vCPU irrespective of new routing (Maxim Levitsky) [RHEL-120168]
  - iommu/amd: KVM: SVM: Delete now-unused cached/previous GA tag fields (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Delete IRTE link from previous vCPU before setting new IRTE (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Track per-vCPU IRTEs using kvm_kernel_irqfd structure (Maxim Levitsky) [RHEL-120168]
  - KVM: Pass new routing entries and irqfd when updating IRTEs (Maxim Levitsky) [RHEL-120168]
  - KVM: arm64: WARN if unmapping a vLPI fails in any path (Maxim Levitsky) [RHEL-120168]
  - KVM: fix typo in kvm_vm_set_mem_attributes() comment (Maxim Levitsky) [RHEL-120168]
  - KVM: Add trace_kvm_vm_set_mem_attributes() (Maxim Levitsky) [RHEL-120168]
  - KVM: Allow CPU to reschedule while setting per-page memory attributes (Maxim Levitsky) [RHEL-120168] {CVE-2025-38506}
  - KVM: x86: Fold irq_comm.c into irq.c (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Move IRQ mask notifier infrastructure to I/O APIC emulation (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Fall back to split IRQ chip if full in-kernel chip is unsupported (Maxim Levitsky) [RHEL-120168]
  - KVM: Squash two CONFIG_HAVE_KVM_IRQCHIP #ifdefs into one (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Add CONFIG_KVM_IOAPIC to allow disabling in-kernel I/O APIC (Maxim Levitsky) [RHEL-120168]
  - KVM: Move x86-only tracepoints to x86's trace.h (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Explicitly check for in-kernel PIC when getting ExtINT (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Don't clear PIT's IRQ line status when destroying PIT (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Hardcode the PIT IRQ source ID to '2' (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Move kvm_{request,free}_irq_source_id() to i8254.c (PIT) (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Move kvm_setup_default_irq_routing() into irq.c (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Rename irqchip_kernel() to irqchip_full() (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Move KVM_{GET,SET}_IRQCHIP ioctl helpers to irq.c (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Move PIT ioctl helpers to i8254.c (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Drop superfluous kvm_hv_set_sint() => kvm_hv_synic_set_irq() wrapper (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Drop superfluous kvm_set_ioapic_irq() => kvm_ioapic_set_irq() wrapper (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Drop superfluous kvm_set_pic_irq() => kvm_pic_set_irq() wrapper (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Trigger I/O APIC route rescan in kvm_arch_irq_routing_update() (Maxim Levitsky) [RHEL-120168]
  - KVM: Assert that slots_lock is held when resetting per-vCPU dirty rings (Maxim Levitsky) [RHEL-120168]
  - KVM: Use mask of harvested dirty ring entries to coalesce dirty ring resets (Maxim Levitsky) [RHEL-120168]
  - KVM: Check for empty mask of harvested dirty ring entries in caller (Maxim Levitsky) [RHEL-120168]
  - KVM: Conditionally reschedule when resetting the dirty ring (Maxim Levitsky) [RHEL-120168]
  - KVM: Bail from the dirty ring reset flow if a signal is pending (Maxim Levitsky) [RHEL-120168]
  - KVM: Bound the number of dirty ring entries in a single reset at INT_MAX (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Print a more helpful message for EACCESS in access tracking test (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Play nice with EACCES errors in open_path_or_exit() (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Add __open_path_or_exit() variant to provide extra help info (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Verify KVM is loaded when getting a KVM module param (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Fix spelling of 'occurrences' in sparsebit.c comments (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Allow SNP guest policy to specify SINGLE_SOCKET (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Allow SNP guest policy disallow running with SMT enabled (Maxim Levitsky) [RHEL-120168]
  - KVM: TDX: Move TDX hardware setup from main.c to tdx.c (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/mmu: Exempt nested EPT page tables from !USER, CR0.WP=0 logic (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Refactor handling of SIPI_RECEIVED when setting MP_STATE (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Move INIT_RECEIVED vs. INIT/SIPI blocked check to KVM_RUN (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: WARN and reject KVM_RUN if vCPU's MP_STATE is SIPI_RECEIVED (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Drop pending_smi vs. INIT_RECEIVED check when setting MP_STATE (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Verify KVM disable interception (for userspace) on filter change (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Simplify userspace filter logic when disabling MSR interception (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Add a helper to allocate and initialize permissions bitmaps (Maxim Levitsky) [RHEL-120168]
  - KVM: nSVM: Merge MSRPM in 64-bit chunks on 64-bit kernels (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Return -EINVAL instead of MSR_INVALID to signal out-of-range MSR (Maxim Levitsky) [RHEL-120168]
  - KVM: nSVM: Access MSRPM in 4-byte chunks only for merging L0 and L1 bitmaps (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Store MSRPM pointer as "void *" instead of "u32 *" (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Move svm_msrpm_offset() to nested.c (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Drop explicit check on MSRPM offset when emulating SEV-ES accesses (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Merge "after set CPUID" intercept recalc helpers (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Fold svm_vcpu_init_msrpm() into its sole caller (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Rename init_vmcb_after_set_cpuid() to make it intercepts specific (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Rename msr_filter_changed() => recalc_msr_intercepts() (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Manually recalc all MSR intercepts on userspace MSR filter change (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Manually recalc all MSR intercepts on userspace MSR filter change (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Move definition of X2APIC_MSR() to lapic.h (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Drop "always" flag from list of possible passthrough MSRs (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Pass through GHCB MSR if and only if VM is an SEV-ES guest (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Implement and adopt VMX style MSR intercepts APIs (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Add helpers for accessing MSR bitmap that don't rely on offsets (Maxim Levitsky) [RHEL-120168]
  - KVM: nSVM: Don't initialize vmcb02 MSRPM with vmcb01's "always passthrough" (Maxim Levitsky) [RHEL-120168]
  - KVM: nSVM: Omit SEV-ES specific passthrough MSRs from L0+L1 bitmap merge (Maxim Levitsky) [RHEL-120168]
  - KVM: nSVM: Use dedicated array of MSRPM offsets to merge L0 and L1 bitmaps (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Clean up macros related to architectural MSRPM definitions (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Massage name and param of helper that merges vmcb01 and vmcb12 MSRPMs (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Use non-atomic bit ops to manipulate "shadow" MSR intercepts (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Kill the VM instead of the host if MSR interception is buggy (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Use ARRAY_SIZE() to iterate over direct_access_msrs (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Tag MSR bitmap initialization helpers with __init (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Don't BUG if setting up the MSR intercept bitmaps fails (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Allocate IOPM pages after initial setup in svm_hardware_setup() (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls (Maxim Levitsky) [RHEL-120168] {CVE-2025-38469}
  - KVM: Documentation: document how KVM is tested (Maxim Levitsky) [RHEL-120168]
  - KVM: Documentation: minimal updates to review-checklist.rst (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Add back the missing check of MONITOR/MWAIT availability (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table. (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Initialize vmsa_pa in VMCB to INVALID_PAGE if VMSA page is NULL (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (Maxim Levitsky) [RHEL-120168] {CVE-2025-38455}
  - x86/traps: Initialize DR7 by writing its architectural reset value (Maxim Levitsky) [RHEL-120168]
  - x86/traps: Initialize DR6 by writing its architectural reset value (Maxim Levitsky) [RHEL-120168]
  - KVM: SEV: Disable SEV-SNP support on initialization failure (Maxim Levitsky) [RHEL-120168]
  - Documentation: virt/kvm: remove unreferenced footnote (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: access_tracking_perf_test: Use MGLRU for access tracking (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Build and link selftests/cgroup/lib into KVM selftests (Maxim Levitsky) [RHEL-120168]
  - cgroup: selftests: Add API to find root of specific controller (Maxim Levitsky) [RHEL-120168]
  - cgroup: selftests: Move cgroup_util into its own library (Maxim Levitsky) [RHEL-120168]
  - cgroup: selftests: Move memcontrol specific helpers out of common cgroup_util.c (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Add test to verify KVM_CAP_X86_BUS_LOCK_EXIT (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Add support for KVM_CAP_X86_BUS_LOCK_EXIT on SVM CPUs (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Add architectural definitions/assets for Bus Lock Threshold (Maxim Levitsky) [RHEL-120168]
  - x86/cpufeatures: Add CPUID feature bit for the Bus Lock Threshold (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Make kvm_pio_request.linear_rip a common field for user exits (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Add a test for x86's fastops emulation (Maxim Levitsky) [RHEL-120168]
  - KVM: Remove obsolete comment about locking for kvm_io_bus_read/write (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Add a basic SEV-SNP smoke test (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Decouple SEV policy from VM type (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Force GUEST_MEMFD flag for SNP VM type (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Add library support for interacting with SNP (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Introduce SEV VM type check (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Replace assert() with TEST_ASSERT_EQ() (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Add SMT control state helper (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: Add vmgexit helper (Maxim Levitsky) [RHEL-120168]
  - KVM: selftests: SEV-SNP test for KVM_SEV_INIT2 (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Unify cross-vCPU IBPB (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs (Maxim Levitsky) [RHEL-120168]
  - x86/sev: Remove unnecessary GFP_KERNEL_ACCOUNT for temporary variables (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/mmu: Warn if PFN changes on shadow-present SPTE in shadow MMU (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/tdp_mmu: WARN if PFN changes for spurious faults (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/tdp_mmu: Merge prefetch and access checks for spurious faults (Maxim Levitsky) [RHEL-120168]
  - KVM: x86/mmu: Further check old SPTE is leaf for spurious prefetch fault (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Flush shadow VMCS on emergency reboot (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: avoid frequency indirect calls (Maxim Levitsky) [RHEL-120168]
  - KVM: SEV: Configure "ALLOWED_SEV_FEATURES" VMCB Field (Maxim Levitsky) [RHEL-120168]
  - x86/cpufeatures: Add "Allowed SEV Features" Feature (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Add a mutex to dump_vmcb() to prevent concurrent output (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Include the vCPU ID when dumping a VMCB (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Add the type of VM for which the VMCB/VMSA is being dumped (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Dump guest register state in dump_vmcb() (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Decrypt SEV VMSA in dump_vmcb() if debugging is enabled (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Use LEAVE in vmx_do_interrupt_irqoff() (Maxim Levitsky) [RHEL-120168]
  - KVM: nVMX: Check MSR load/store list counts during VM-Enter consistency checks (Maxim Levitsky) [RHEL-120168]
  - KVM: SVM: Fix SNP AP destroy race with VMRUN (Maxim Levitsky) [RHEL-120168]
  - x86/irq: KVM: Add helper for harvesting PIR to deduplicate KVM and posted MSIs (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Use arch_xchg() when processing PIR to avoid instrumentation (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Isolate pure loads from atomic XCHG when processing PIR (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Process PIR using 64-bit accesses on 64-bit kernels (Maxim Levitsky) [RHEL-120168]
  - x86/irq: KVM: Track PIR bitmap as an "unsigned long" array (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Ensure vIRR isn't reloaded at odd times when sync'ing PIR (Maxim Levitsky) [RHEL-120168]
  - x86/irq: Track if IRQ was found in PIR during initial loop (to load PIR vals) (Maxim Levitsky) [RHEL-120168]
  - x86/irq: Ensure initial PIR loads are performed exactly once (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Add module param to control and enumerate device posted IRQs (Maxim Levitsky) [RHEL-120168]
  - KVM: VMX: Don't send UNBLOCK when starting device assignment without APICv (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Rescan I/O APIC routes after EOI interception for old routing (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Add a helper to deduplicate I/O APIC EOI interception logic (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Isolate edge vs. level check in userspace I/O APIC route scanning (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Advertise support for AMD's PREFETCHI (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Sort CPUID_8000_0021_EAX leaf bits properly (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: clean up a return (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Advertise support for WRMSRNS (Maxim Levitsky) [RHEL-120168]
  - x86/msr: Rename the WRMSRNS opcode macro to ASM_WRMSRNS (for KVM) (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Generalize IBRS virtualization on emulated VM-exit (Maxim Levitsky) [RHEL-120168]
  - KVM: x86: Propagate AMD's IbrsSameMode to the guest (Maxim Levitsky) [RHEL-120168]
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBRS_SAME_MODE (Maxim Levitsky) [RHEL-120168]
  - x86/virt: Provide "nosnp" boot option for sev kernel command line (Maxim Levitsky) [RHEL-120168]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-172.el10]
changelog:
  - powerpc/kdump: Fix size calculation for hot-removed memory ranges (Mamatha Inamdar) [RHEL-126704]
  - idpf: fix possible vport_config NULL pointer deref in remove (Michal Schmidt) [RHEL-99641]
  - idpf: cleanup remaining SKBs in PTP flows (Michal Schmidt) [RHEL-99641]
  - idpf: fix mismatched free function for dma_alloc_coherent (Michal Schmidt) [RHEL-99641]
  - idpf: add HW timestamping statistics (Michal Schmidt) [RHEL-99641]
  - idpf: add support for nointerrupt queues (Michal Schmidt) [RHEL-99641]
  - idpf: remove SW marker handling from NAPI (Michal Schmidt) [RHEL-99641]
  - idpf: add 4-byte completion descriptor definition (Michal Schmidt) [RHEL-99641]
  - idpf: use a saner limit for default number of queues to allocate (Michal Schmidt) [RHEL-99641]
  - idpf: fix Rx descriptor ready check barrier in splitq (Michal Schmidt) [RHEL-99641]
  - idpf: do not linearize big TSO packets (Michal Schmidt) [RHEL-99641]
  - idpf: fix UAF in RDMA core aux dev deinitialization (Michal Schmidt) [RHEL-99641]
  - idpf: remove obsolete stashing code (Michal Schmidt) [RHEL-99641]
  - idpf: stop Tx if there are insufficient buffer resources (Michal Schmidt) [RHEL-99641]
  - idpf: replace flow scheduling buffer ring with buffer pool (Michal Schmidt) [RHEL-99641]
  - idpf: simplify and fix splitq Tx packet rollback error path (Michal Schmidt) [RHEL-99641]
  - idpf: improve when to set RE bit logic (Michal Schmidt) [RHEL-99641]
  - idpf: add support for Tx refillqs in flow scheduling mode (Michal Schmidt) [RHEL-99641]
  - idpf: preserve coalescing settings across resets (Michal Schmidt) [RHEL-99641]
  - idpf: add cross timestamping (Michal Schmidt) [RHEL-99641]
  - idpf: add flow steering support (Michal Schmidt) [RHEL-99641]
  - virtchnl2: add flow steering support (Michal Schmidt) [RHEL-99641]
  - virtchnl2: rename enum virtchnl2_cap_rss (Michal Schmidt) [RHEL-99641]
  - idpf: implement get LAN MMIO memory regions (Michal Schmidt) [RHEL-99641]
  - idpf: implement IDC vport aux driver MTU change handler (Michal Schmidt) [RHEL-99641]
  - idpf: implement remaining IDC RDMA core callbacks and handlers (Michal Schmidt) [RHEL-99641]
  - idpf: implement RDMA vport auxiliary dev create, init, and destroy (Michal Schmidt) [RHEL-99641]
  - idpf: implement core RDMA auxiliary dev create, init, and destroy (Michal Schmidt) [RHEL-99641]
  - idpf: use reserved RDMA vectors from control plane (Michal Schmidt) [RHEL-99641]
  - idpf: return 0 size for RSS key if not supported (Michal Schmidt) [RHEL-99641]
  - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-99641]
  - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-99641]
  - idpf: add support for Rx timestamping (Michal Schmidt) [RHEL-99641]
  - idpf: add Tx timestamp flows (Michal Schmidt) [RHEL-99641]
  - idpf: add Tx timestamp capabilities negotiation (Michal Schmidt) [RHEL-99641]
  - idpf: add PTP clock configuration (Michal Schmidt) [RHEL-99641]
  - idpf: add mailbox access to read PTP clock time (Michal Schmidt) [RHEL-99641]
  - idpf: negotiate PTP capabilities and get PTP clock (Michal Schmidt) [RHEL-99641]
  - idpf: move virtchnl structures to the header file (Michal Schmidt) [RHEL-99641]
  - virtchnl: add PTP virtchnl definitions (Michal Schmidt) [RHEL-99641]
  - idpf: add initial PTP support (Michal Schmidt) [RHEL-99641]
  - idpf: change the method for mailbox workqueue allocation (Michal Schmidt) [RHEL-99641]
  - idpf: remove unreachable code from setting mailbox (Michal Schmidt) [RHEL-99641]
  - idpf: assign extracted ptype to struct libeth_rqe_info field (Michal Schmidt) [RHEL-99641]
  - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-99641]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-17
changelog:
  - Support storing of __crc_* symbols in sections other than .rodata.
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-19
changelog:
  - Capture local __crc_* symbols for "Provides: kernel()".
  - Add support for XZ compression for the symvers file.
  - Fix "Provides: kernel()" generation when both __kcrctab and __kcrctab_gpl
    are present.
  - Fix regression for "Provides:" generation in cases when modversions are stored
    in a section that is over 64K in size.
  - Speedup and cleanup changes in find-provides.ksyms and find-requires.ksyms.
  - Fix regex usage in kmod.attr. (Denys Vlasenko)
  - Implement modalias "Provides:" grouping. (Denys Vlasenko)
  - Speedup and cleanup changes in modalias.prov and kmod.attr. (Denys Vlasenko)


author: keycloak-httpd-client-install fails to build with Python 3.12 - 1.1.14
changelog:
  - Resolves: rhbz#2155009 - keycloak-httpd-client-install fails to build with
    Python 3.12: ModuleNotFoundError: No module named 'distutils'


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Marek Safarik <msafarik@redhat.com> - 7.12.1-16
changelog:
  - Added manpages for keylime services and the tenant
  - Added support for ECC attestation
  - Fixed man page RST formatting for rst2man compatibility


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 7.9.0-7
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook server
    certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Mike FABIAN <mfabian@redhat.com> - 0.0.62-1
changelog:
  - Update to 0.0.62
  - Get translation changes from CLDR
  - Add more translations from CLDR
  - Add Norwegian keyboard layout to keyboards.xml
    (Resolves: https://github.com/mike-fabian/langtable/issues/16)
  - Add Hang script to Southern Aymara


author: Mike FABIAN <mfabian@redhat.com> - 0.0.63-1
changelog:
  - Update to 0.0.63
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Japanese: prefer anthy over kkc
    (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
  - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
    (Resolves: https://github.com/mike-fabian/langtable/issues/18)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.64-1
changelog:
  - Update to 0.0.64
  - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
    (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.65-1
changelog:
  - Update to 0.0.65
  - Add wuu, tok, glk, gbm, ssy
  - Remove aa_ER.UTF-8@saaho
  - Add kv_RU.UTF-8, chr_RU.UTF-8
  - Add EU, EZ
  - Improve README and Makefile (Resolves: https://github.com/mike-
    fabian/langtable/issues/19)
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 2.015-16
changelog:
  - Convert to new fonts packaging guidelines
  - Migrate to SPDX license expression
  - Drop very very old obsoletes for google-lato-fonts
  - Add gating CI tests in Fedora


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-20
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113472 - "cannot seek on data source" in TLS lftp sessions


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-3
changelog:
  - Fix creating MD RAID arrays without specifying bitmap localtion
    Resolves: RHEL-31379
  - crypto: Fix double free in bd_crypto_luks_remove_key
    Resolves: RHEL-31489
  - tests: Fix running tests without ntfsprogs
    Resolves: RHEL-32875


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.57.3-1
changelog:
  - Rebase to libguestfs 1.57.3
    resolves: RHEL-111240
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.57.3-2
changelog:
  - Rebase to libguestfs 1.57.3
    resolves: RHEL-111240
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.57.4-1
changelog:
  - Rebase to libguestfs 1.57.4
    resolves: RHEL-111240
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.57.5-1
changelog:
  - Rebase to libguestfs 1.57.5
    resolves: RHEL-111240
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.57.6-2
changelog:
  - Rebase to libguestfs 1.57.6
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Richard W.M. Jones <rjones@redhat.com> - 10.0-2
changelog:
  - Import package into CentOS Stream 10
  - Remove resolves refs to work around check-gitbz bug (RHELBLD-14966)
  - Add gating tests
  - Set ExclusiveArch/ExcludeArch to the same as for libguestfs


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Paul Wouters <paul.wouters@aiven.io> - 4.15-1
changelog:
  - Update libreswan to 4.15 for CVE-2024-3652
  - Resolves rhbz#2274448 CVE-2024-3652 libreswan: IKEv1 default AH/ESP
    responder can crash and restart
  - Allow "ipsec import" to try importing PKCS#12 non-interactively if there
    is no password


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-3
changelog:
  - qemu: Enable I/O APIC even more frequently (RHEL-71414)
  - cpu_map: Add avx10* CPU features (RHEL-71897)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-71897)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-71898)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-73088)
  - qemu: Add support for direct and extended tlbflush features (RHEL-73088)
  - conf: refactor hyperv features formatting (RHEL-73088)
  - conf: Adjust hyperv tlbflush formatting (RHEL-73088)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73699)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68065)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-70627)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-70627)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74040)
  - storage_file: de-modularize the local file backend (RHEL-73506)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73506)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75589)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-74492)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-76802)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-76802)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-76802)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-76802)
  - qemuProcessHandleIOError: Rename local variables (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-76802)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-76802)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-76802)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-76802)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-76802)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-76802)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-76802)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-76802)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-78186)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-78186)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-78186)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-78353)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-78353)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-78353)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-1071)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-1071)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-78398)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-78398)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-78398)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-78398)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-78398)
  - conf: change virDomainHostdevInsert() to return void (RHEL-77086)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-77086)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-77086)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-77086)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-77086)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-77086)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-77086)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-77086)
  - qemu: complete vhostuser + passt support (RHEL-77086)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-77086)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-77086)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-77086)
  - utils: Canonicalize paths before comparing them (RHEL-79165)


author: Jiri Denemark <jdenemar@redhat.com> - 11.1.0-1
changelog:
  - Rebased to libvirt-11.1.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7041, RHEL-7042, RHEL-7104, RHEL-7342, RHEL-20294
      RHEL-41264, RHEL-52493, RHEL-58933, RHEL-70656, RHEL-71042
      RHEL-71810, RHEL-72021, RHEL-72052, RHEL-72192, RHEL-72994
      RHEL-79088, RHEL-79460, RHEL-79465, RHEL-79953


author: Jiri Denemark <jdenemar@redhat.com> - 11.2.0-1
changelog:
  - Rebased to libvirt-11.2.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7035, RHEL-24046, RHEL-40077, RHEL-58151, RHEL-68043
      RHEL-71883, RHEL-72994, RHEL-77552, RHEL-80166, RHEL-80533
      RHEL-80688, RHEL-81731, RHEL-81890, RHEL-83148, RHEL-84257
      RHEL-84688
  - cpu_map: Install Ampere-1 ARM CPU models (RHEL-71662)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Joerg Schmidbauer <jschmidb@de.ibm.com> - 1.2.0
changelog:
  - Support for get/set intermediate iv for CBC and XTS
  - Support for internal iv for GCM
  - Exploit KBLOB2PROTK3 ioctl for clear AES and EC keys
  - Fix AES EP11 version 6 key support for generate and import_clear


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-6
changelog:
  - add support for dropping root privileges (disabled by default) (RHEL-12183)
  - create linuxptp user and /run/ptp directory


author: Brian C. Lane <bcl@redhat.com> 40.5.1-1
changelog:
  - New lorax documentation - 40.5.1 (bcl@redhat.com)
    Resolves: RHEL-30615
  - Dockerfile.test: Use Fedora 40 for test image (bcl@redhat.com)
  - Change macboot default to false (bcl@redhat.com)
  - Change defaults to Red Hat Enterprise Linux 10 (bcl@redhat.com)
  - runtime-cleanup: wget2-wget has replaced wget (yselkowi@redhat.com)
  - Added example of how to use livemedia-creator in github actions, and still
    build in fedora. (cjshowalter@alaska.edu)
  - Require lorax-templates-rhel when building for ELN, CentOS Stream and RHEL (sgallagh@redhat.com)
  - workflows: Switch to actions/checkout@v4 (bcl@redhat.com)
  - New lorax documentation - 40.5 (bcl@redhat.com)
  - maint: Switch default platform to F40 (bcl@redhat.com)
  - runtime-cleanup: Update to cleanup more (akira@tagoh.org)
  - runtime-install: Update font packages (akira@tagoh.org)
  - mkksiso: Add support for adding an anaconda updates.img (jkonecny@redhat.com)
  - runtime-install: drop kdump-anaconda-addon (awilliam@redhat.com)
  - s390: Escape volid before using it (bcl@redhat.com)
  - aarch64: Escape volid before using it (bcl@redhat.com)
  - runtime-install: drop retired pcmciautils (awilliam@redhat.com)
  - runtime-install: Drop unneeded packages libmlx4, systemd-sysv, and systemd-units (bcl@redhat.com)
  - runtime-install: wget2-wget has replaced wget (awilliam@redhat.com)
  - runtime-cleanup: anaconda's new interface needs stdbuf (kkoukiou@redhat.com)
  - test-in-podman: Fix problem running in github actions (bcl@redhat.com)
  - test: Add pigz to test-packages (bcl@redhat.com)
  - Adjust runtime-postinstall.tmpl for systemd config files move (zbyszek@in.waw.pl)


author: Brian C. Lane <bcl@redhat.com> 40.5.3-1
changelog:
  - tito: Add RHEL tagger with support for rhbz and RHEL (bcl)
    Related: RHEL-31830
  - livemedia-creator: Use /usr/libexec/qemu-kvm on supported arches (bcl)
    Related: RHEL-31830
  - spec: edk2-aarch64 has the UEFI firmware on aarch64 (bcl)
    Related: RHEL-31830
  - Add prefixdevname to Anaconda image (msekleta)
    Related: RHEL-30010
  - spec: exclude the files section for lmc-virt on ppc64le (bcl)
    Resolves: RHEL-31830


author: Brian C. Lane <bcl@redhat.com> 40.5.4-1
changelog:
  - tito: Add tito to container's test-packages (bcl)
    Related: RHEL-31830
  - creator: Fix pylint error in run_creator (bcl)
    Related: RHEL-31830
  - livemedia-creator: Check for BIOS vs. UEFI qemu support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Enable s390x virt support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Make use of virtio devices more generic (bcl)
    Related: RHEL-31830
  - Set requirement on lorax-templates-rhel for prefixdevname change (bcl)
    Related: RHEL-30010


author: Brian C. Lane <bcl@redhat.com> 40.5.5-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-35396
  - docs: Update livemedia-creator documentation for RHEL 10 (bcl)
    Related: RHEL-31853
  - livemedia-creator: The --make-tar option requires tar (bcl)
    Related: RHEL-31853
  - docs: Update example kickstarts for RHEL/CentOS (bcl)
    Resolves: RHEL-31853
  - lorax: Change default rootfs size to 3GiB (bcl)
    Resolves: RHEL-32504


author: Brian C. Lane <bcl@redhat.com> 40.5.6-1
changelog:
  - New lorax documentation - 40.5.6 (bcl)
    Related: RHEL-48606
  - ltmpl: Remove * from docstring (bcl)
    Related: RHEL-48606
  - docs: Update intersphinx and add _static dir (bcl)
    Related: RHEL-48606
  - docs: Document --rootfs-type options (bcl)
    Related: RHEL-48606
  - erofs: Use dedupe and all-fragments options (bcl)
    Related: RHEL-48606
  - imgutils: mkfs.erofs options should come first (bcl)
    Related: RHEL-48606
  - Accept but ignore the old --squashfs-only argument (awilliam)
    Related: RHEL-48606
  - Add compression.erofs section to lorax.conf (bcl)
    Resolves: RHEL-48606
  - Add erofs and erofs-ext4 support to --rootfs-type (bcl)
    Related: RHEL-48606
  - Replace squashfs_only with rootfs_type (bcl)
    Related: RHEL-48606
  - imgutils: Add mkerofs function and test (bcl)
    Related: RHEL-48606
  - runtime-postinstall: Make sure blacklist_exceptions has been removed (jstodola)
    Resolves: RHEL-53721


author: Brian C. Lane <bcl@redhat.com> 40.5.7-1
changelog:
  - templates: Sync template changes from lorax-templates-rhel (bcl)
    Resolves: RHEL-54713
  - tests: Add a test to make sure redhat-release-eula isn't included (bcl)
    Related: RHEL-54381


author: Brian C. Lane <bcl@redhat.com> 40.5.8-1
changelog:
  - tests: Fix mkksiso unit test (bcl)
    Related: RHEL-61778
  - pylint: Print astroid version (bcl)
    Related: RHEL-61778
  - Extend help for --updates and --ks parameters (jkonecny)
    Related: RHEL-61778
  - Fix --updates the updates image wasn't loaded (jkonecny)
    Resolves: RHEL-61778
  - Implement --replace also for S390 (sebastian.stark)
    Related: RHEL-61778
  - mkksiso: option --replace to replace arbitrary text in boot config.  (sebastian.stark)
    Related: RHEL-61778
  - livemedia: Add isomd5sum (bcl)
    Resolves: RHEL-58896


author: Brian C. Lane <bcl@redhat.com> 40.5.9-1
changelog:
  - tests: Swap nomodeset for inst.text in mkksiso test data (bcl)
    Related: RHEL-66603
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: RHEL-66603
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.10-1
changelog:
  - erofs: Change the erofs compression default to zstd (bcl)
    Related: RHEL-48606
  - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl)
    Related: RHEL-66603
  - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl)
    Related: RHEL-66603
  - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.11-1
changelog:
  - erofs: Make smaller lzma erofs images by default (bcl)
    Related: RHEL-48606
  - Revert "erofs: Change the erofs compression default to zstd" (bcl)
    Related: RHEL-48606


author: Brian C. Lane <bcl@redhat.com> 40.5.12-1
changelog:
  - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl)
    Resolves: RHEL-83202
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl)
    Resolves: RHEL-83519


author: Brian C. Lane <bcl@redhat.com> - 10.0-47
changelog:
  - Makefile: Add PREV support for clog (bcl)
    Related: RHEL-40021
  - git-changelog: Change line length limit to 120 (bcl)
    Related: RHEL-40021
  - README: Update README with note about PREV= (bcl)
    Related: RHEL-40021
  - Remove libvisual from runtime-cleanup as it's being removed from RHEL 10 (tpopela)
    Resolves: RHEL-39949
  - tests: Do not use fedora.repo for the test build (bcl)
    Resolves: RHEL-40021
  - Drop libreport from templates (mkolman)
    Resolves: RHEL-39794


author: Brian C. Lane <bcl@redhat.com> - 10.0-49
changelog:
  - SERIAL: Bump to 48 to match spec change for mass rebuild (bcl)
  - firmware: Exclude installation of audio firmware (bcl)
    Related: RHEL-44311
  - tests: Replace $stream with 10-stream (bcl)
    Related: RHEL-44311
  - runtime-install: Only install qcom-firmware on aarch64 (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to brcmfmac-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to intel-audio-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to dvb-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: qcom firmware is now in the qcom-firmware package (bcl)
    Related: RHEL-44311
  - Drop Tiger VNC from templates (mkolman)
    Resolves: RHEL-38741


author: Brian C. Lane <bcl@redhat.com> - 10.0-50
changelog:
  - runtime-cleanup: Fix gshadow typo (bcl)
    Resolves: RHEL-35396
  - runtime-install: Add redhat-release-eula (bcl)
    Related: RHEL-35396
  - kernel: Keep nvram module (bcl)
    Resolves: RHEL-36443
  - kernel: Keep hid-multitouch module (bcl)
    Resolves: RHEL-49546


author: Brian C. Lane <bcl@redhat.com> - 10.0-53
changelog:
  - runtime-cleanup: fonttosfnt no longer installed (bcl)
    Resolves: RHEL-54717
  - Use the same page args in all the per-arch templates (bcl)
    Resolves: RHEL-54535
  - Remove manual /root/lorax-packages.log creation (bcl)
    Resolves: RHEL-54534
  - Remove libuser.conf (bcl)
    Resolves: RHEL-54533


author: Brian C. Lane <bcl@redhat.com> - 10.0-55
changelog:
  - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl)
    Related: RHEL-67586
  - tests: Fix the repos used for the test (bcl)
    Related: RHEL-67586
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-67586


author: Brian C. Lane <bcl@redhat.com> - 10.1-1
changelog:
  - Bump release version to 10.1 (bcl)
    Related: RHEL-91929
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91929


author: Brian C. Lane <bcl@redhat.com> - 10.1-3
changelog:
  - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk)
    Resolves: RHEL-102872
  - runtime-postinstall: allow pipewire to run as root (awilliam)
    Resolves: RHEL-102419
  - runtime-cleanup: Do not clean up rpm binaries (bcl)
    Resolves: RHEL-101695


author: Brian C. Lane <bcl@redhat.com> - 10.2-1
changelog:
  - Do not remove SELinux from the runtime (ppolawsk)
    Resolves: RHEL-126547
  - Bump release version to 10.2 (bcl)
    Related: RHEL-126547


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.7-1
changelog:
  - Rebase to 10.11.7
  - Patch 10 removed, the main.ssl_cipher test has been fixed
    and re-enabled by upstream and now passes on all architectures


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57014 - Rebase qemu-ga to 9.1.0
  - RHEL-32297 - guest agent public ssh injection api support for Windows
  - RHEL-36718 - The version of mingw-qemu-ga-win doesn't match inside query and via command 'guest-info'
  - Set version to 109.1.0


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.0.0-1
changelog:
  - RHEL-83547 - Rebase mingw-qemu-ga-win to QEMU 10.0.0 
  - RHEL-96980 - mingw-qga: Drop mingw-pixman build deps
  - RHEL-98947 - [mingw-qemu-ga-win] MSI installer ignore VSS installation result 
  - RHEL-11824 - [QGA] VSS installation retry, if previously VSS service was not un-registered correctly


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.1.0-1
changelog:
  - RHEL-111001 Rebase mingw-qemu-ga-win to QEMU 10.1.0
  - RHEL-107458 [mingw-qemu-ga-win] QAPI error desc does not contain Windows error
  - RHEL-107446 QGA VSS wasn't removed if the QGA installation fail and quit
  - RHEL-107215 Fix don't daemonize before channel is initialized patch for Windows behavior


author: Joe Orton <jorton@redhat.com> - 1.14.2-21
changelog:
  - restore plaintext password storage by default (per upstream)
  - restrict symbols exposed by DSOs built for httpd


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-3
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.2-4
changelog:
  - Rebase to nbdkit 1.42.2
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
    resolves: RHEL-78830
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.2-8
changelog:
  - Rebase to nbdkit 1.42.2
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
    resolves: RHEL-78830
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.5-1
changelog:
  - Rebase to nbdkit 1.42.5
    resolves: RHEL-78830
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.12-1
changelog:
  - Rebase to nbdkit 1.45.12
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.26.0-1
changelog:
  - update to 1.26.0
  - add Sergey Kandaurov's PGP public key
  - add Roman Arutyunyan's PGP public key
  - remove Maxim Dounin's PGP public key
  - enable experimental HTTP/3 module
  - refresh patches
  - update default config http2 directive
  - remove outdated custom error pages, reducing maintenance burden


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.1-3
changelog:
  - Resolves: RHEL-33742 - Disable ENGINE support by default
  - disable ENGINE support by default
  - add engine bcond


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Andrei Radchenko <aradchen@redhat.com> - 2023.10-11
changelog:
  - Add test case for symlinked dependencies bug fix
  - added test/symlinked scenario
  - verifies nodejs.req correctly generates requirements for symlinked deps
  - added mock 'external' packages to support this test


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Jerry James <loganjerry@gmail.com> - 9-1
changelog:
  - Update OCaml native arches for OCaml 5.1
  - Remove the Python file and some macros (now in ocaml-rpm-macros)
  - Add %ocaml_pkg macro for common declarations


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80811
    Resolves: RHEL-57022
    Resolves: RHEL-24098
    Resolves: RHEL-24097
    Resolves: RHEL-86865


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream 
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs: 
  - CVE-2024-45338
  - CVE-2024-45337
    Resolves: RHEL-78346


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-78944


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Fix reversion of previous dependency updates post golang update
    Resolves: RHEL-79109


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify pre-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-76915


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-84025


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Update addresses CVE-2025-29786
    Resolves: RHEL-84153


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-84160


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-9
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85035


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90009


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337
    Resolves: RHEL-78346


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0 Add systemd-journal group to Requires Bump go-
    tpm-keyfiles Resolves: RHEL-119363


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.5.3-2
changelog:
  - We run tests with specially crafted OpenSSL configuration, not the system one
    Resolves: RHEL-25983


author: Lukas Tyrychtr <ltyrycht@redhat.com> - 46.1-2
changelog:
  - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Chris Lumens <clumens@redhat.com> - 3.0.1-4
changelog:
  - Fix promoting instances of a cloned resource
  - Handle large timeouts correctly in crm_resource --wait
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-120932
  - Resolves: RHEL-86148
  - Resolves: RHEL-114895


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-8
changelog:
  - Make sure redhat-package-notes spec is skipped if _package_note_flags is
    undefined (rbhz#2184553)


author: Sudip Shil <sshil@redhat.com> - 6.0-7
changelog:
  - Convert to new fonts packaging guidelines and SPDX license
  - Update the fonts package
  - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.018-1
changelog:
  - Update to 0.018
    - Fix version requirement for CPAN::Meta::Prereqs
    - Move issue tracker to GitHub


author: Paul Howarth <paul@city-fan.org> - 2.143-1
changelog:
  - Update to 2.143 (rhbz#2216187)
    - Fix regression with implicit minimum value and multiple requirements (GH#38)
  - Don't package perlcritic.rc


author: Paul Howarth <paul@city-fan.org> - 2.142-1
changelog:
  - Update to 2.142
    - confess() replaced with croak(): fewer stack traces
    - Broke the version range handling into the Range class
    - Note: this version now requires perl v5.10 rather than v5.6
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.114-1
changelog:
  - Update to 0.114
    - Data::OptList now requires perl v5.12.0
    - Tests no longer add "-T" to shebang, so do not invoke taint mode


author: Packit <hello@packit.dev> - 6.93-1
changelog:
  - Release: v6.93 (Sullivan Beck)
  - Checkpoint: v6.93 (Sullivan Beck)
  - Remove Travis (Sullivan Beck)
  - Initial checkin of next release cycle: 6.93 (Sullivan Beck)


author: Paul Howarth <paul@city-fan.org> - 1.006000-1
changelog:
  - Update to 1.006000
    - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var
      module
    - Refactored the Perl 5.37.2+ lexical exporter support


author: Paul Howarth <paul@city-fan.org> - 1.006001-1
changelog:
  - Update to 1.006001
    Documentation
    - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual
    Packaging
    - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl


author: Paul Howarth <paul@city-fan.org> - 1.006002-1
changelog:
  - Update to 1.006002
    Documentation
    - Link to Exporter::Almighty in pod
    - Update copyright dates
    Packaging
    - Set homepage in metadata to https://exportertiny.github.io


author: Michal Josef Špaček <mspacek@redhat.com> - 6.01-34
changelog:
  - Package tests
  - Patch for remove warning in test
  - Simplify build and install phases
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 2.205-1
changelog:
  - Update to 2.205
    - Add perl 5.38 to CI matrix
    - Add on workflow_dispatch
    - Add some OO examples


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 4.09-1
changelog:
  - Update to 4.09
    - Updated backportPP with JSON::PP 4.11
    - Fix a test to pass under perl with core bool support


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 2:0.42.34-1
changelog:
  - 0.4234 bump
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Michal Josef Špaček <mspacek@redhat.com> - 6.0.1-42
changelog:
  - Add patch to add tests for other USM scenarios
  - Add patch to rewrite from Digest::SHA1 to Digest::SHA
  - Add patch to rewrite usage of HMAC with same dependencies
  - Add patch to split test files for better readability
  - Improve patch for switch from Socket6 to Socket
  - Package tests
  - Rename patch to better name with source dist version


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Michal Josef Špaček <mspacek@redhat.com> - 2.014-9
changelog:
  - Fix running of tests in perl-Net-Server-tests subpackage
    Resolves: RHEL-65278
  - Sync OpenSSL Engine patch with upstream


author: Paul Howarth <paul@city-fan.org> - 0.104003-1
changelog:
  - Update to 0.104003 (rhbz#2208530)
    - Add Artistic 1.0 Perl license and make Perl license use it
    - Remove extra "59" from LGPL-2.1
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.104004-1
changelog:
  - Update to 0.104004 (rhbz#2209461)
    - Rename Perl Artistic License to avoid confusion in detecting license


author: Paul Howarth <paul@city-fan.org> - 0.991-1
changelog:
  - Update to 0.991
    - Make the requirement for perl v5.12.0 explicit; previously, it was only
      implicit because of prerequisites


author: Paul Howarth <paul@city-fan.org> - 0.929-1
changelog:
  - Update to 0.929 (rhbz#2157199)
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Use %license
  - Fix permissions verbosely
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 3:1.302196-1
changelog:
  - Update to 1.302196
    - Raise error on missing Hub ID, which should never happen (GH#882)
    - Fix handling of VSTRING and LVALUE refs in is_deeply() (GH#918)
    - Merge several documentation fixes (GH#910, GH#911, GH#912)


author: Paul Howarth <paul@city-fan.org> - 3:1.302197-1
changelog:
  - Update to 1.302197
    - Add ability to attach timestamps to trace objects via API or environment
      variable


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2255994)
    - Update docs to recommend YAML::PP
  - Package description updated as per upstream documentation


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 1:1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80610


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Brian C. Lane <bcl@redhat.com> - 3.52.4-1
changelog:
  - timezone: Remove the --isUtc, --nontp, and --ntpserver arguments (bcl)
    Related: RHEL-34009
  - packages: Remove the old camel case arguments on RHEL10 (bcl)
    Resolves: RHEL-34009
  - nvdimm: Remove support for the nvdimm command on RHEL10 (bcl)
    Related: RHEL-34009


author: Brian C. Lane <bcl@redhat.com> - 3.52.6-1
changelog:
  - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl)
    Related: RHEL-61426
  - workflow: Use python 3.12.7 for testing (bcl)
    Related: RHEL-61426
  - options: adjust to behavior change in upstream _parse_optional (awilliam)
    Resolves: RHEL-61426


author: Brian C. Lane <bcl@redhat.com> - 3.52.7-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61435


author: Brian C. Lane <bcl@redhat.com> - 3.52.8-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61435
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76502


author: Brian C. Lane <bcl@redhat.com> - 3.52.9-1
changelog:
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-80086
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-80086


author: Brian C. Lane <bcl@redhat.com> - 3.52.10-1
changelog:
  - pylint: Ignore files in .git (bcl)
    Related: RHEL-96217
  - Add support for RDP (jkonecny)
    Resolves: RHEL-96217


author: Brian C. Lane <bcl@redhat.com> - 3.52.11-1
changelog:
  - Add support for new bootc kickstart command (ppolawsk)
    Resolves: RHEL-132612
    Related: RHEL-58215


author: Brian C. Lane <bcl@redhat.com> - 3.52.1-1
changelog:
  - New release: 3.52.1 (bcl)
    Resolves: RHEL-30566
  - docs: Generate RHEL10 docs (bcl)
  - Makefile: Use .z for scratch builds too (bcl)
  - rhel10: autopart on RHEL does not support --type=btrfs (bcl)
  - rhel10: Add test for btrfs command deprecation (bcl)
  - rhel10: Add missing rhsm and syspurpose commands (bcl)
  - Update RHEL 9 handler (bcl)
  - Update RHEL 10 handler classes (bcl)
  - tox.ini: Only test with Python 3.12 to speed things up (bcl)
  - Add RHEL 10 handler (RHEL-30566) (bcl)
  - Use .z version for new builds, start with 3.52.0 (bcl)
  - workflow: Use python 3.12.2 for tests (bcl)
  - workflow: Bump checkout and setup-python actions to new versions (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.52.2-1
changelog:
  - Switch DEFAULT_VERSION to RHEL10 (bcl)
    Resolves: RHEL-30566
  - Add a DEFAULT_VERSION variable to version.py (bcl)
  - Deprecate network team options on RHEL 10 (rvykydal)


author: Brian C. Lane <bcl@redhat.com> - 3.52.3-1
changelog:
  - btrfs: Remove support for the btrfs command on RHEL10 (bcl)
    Resolves: RHEL-34009
  - Deprecate modularity on RHEL 10 (marusak.matej)
    Resolves: RHEL-34829


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-10
changelog:
  - Don't assume %_smp_mflags only ever contains -jX, use -j%_smp_build_ncpus directly
  - Fixes: rhbz#2179149


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Vendula Poncova <vponcova@redhat.com> - 1.7-1
changelog:
  - CI: Use dnf instead of yum to install CentOS packages (vponcova)
  - Documentation: Improve the installation instruction (vponcova)
  - Remove untracked files from the git repository interactively (vponcova)
  - UnixFD: Document the support for Unix file descriptors (vponcova)
  - Documentation: Clean up examples in the documentation (vponcova)
  - Documentation: Simplify the README.md file (vponcova)
  - Documentation: Fix bullet point lists (vponcova)
  - Documentation: Simplify the hostname example (vponcova)
  - CI: Run tests for all supported Python version (vponcova)
  - UnixFD: Handle DBus signals with Unix file descriptors (vponcova)
  - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova)
  - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova)
  - UnixFD: Process results of client calls in the low-level library (vponcova)
  - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova)
  - CI: Always pull the latest container image (vponcova)
  - CI: Disable the unhashable-member warning (vponcova)
  - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova)
  - UnixFD: Move the unit tests to a new file (vponcova)
  - UnixFD: Manage the testing bus on set up and tear down (vponcova)
  - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova)
  - UnixFD: Create a new testing DBus interface (vponcova)
  - UnixFD: Fix the indentation in unit tests (vponcova)
  - Add unit tests for variants with variant types (vponcova)
  - Simplify the code for replacing values of the UnixFD type (vponcova)
  - Add classes for unpacking and unwrapping a variant (vponcova)
  - Don't use pylint from pip on Fedora Rawhide (vponcova)
  - UnixFD: Rename a parameter to server_arguments (vponcova)
  - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova)
  - Raise TimeoutError if a DBus call times out (vponcova)
  - Fix pylint tests in CentOS Stream 8 (vponcova)
  - Fix the ENV instruction in Dockerfiles (vponcova)
  - Fix pylint issues (vponcova)
  - run forked tests using subprocess, instead of multiprocessing (wdouglass)
  - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass)
  - Add test case for method call only returning fd (jlyda)
  - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda)
  - fix some lint discovered errors (wdouglass)
  - seperate unixfd functionality, to better support systems that don't have them (wdouglass)
  - Remove note in documentation about unsupported Unix file descriptors (wdouglass)
  - Add a test for UnixFD transfer (wdouglass)
  - Allow UnixFDs to be replaced and passed into Gio (wdouglass)
  - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo)
  - Extend the .coveragerc file (vponcova)
  - Disable builds for Fedora ELN on commits (vponcova)
  - Test Debian with Travis (vponcova)
  - Test Ubuntu with Travis (vponcova)
  - Test CentOS Stream 9 with Travis (vponcova)
  - Use CentOS Stream 8 for testing (vponcova)
  - add remove dbus object function on bus and update tests (matthewcaswell)
  - properly measure coverage across multiprocess test cases (wdouglass)
  - Move handle typing tests into a new class (and a new file) (wdouglass)
  - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass)
  - Add functions for generating/consuming fdlists with variants (wdouglass)
  - Provide a language argument for the code blocks (seahawk1986)
  - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass)
  - Allow to run tests in a container (vponcova)
  - Add C0209 to the ignore list for pylint (tjoslin)
  - Use the latest distro in Travis CI (vponcova)
  - Always update the container (vponcova)
  - Document limitations of the DBus specification generator (vponcova)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Evan Goode <egoode@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 (RHEL-38831)
  - Added pre-transaction plugin
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
    (RHEL-35577)


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: RHEL-113652
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: RHEL-113656


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Martin Kolman <mkolman@redhat.com> - 0.51-1
changelog:
  - SPDX compatible License: line (mkolman)
  - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com)
  - Improve formatting and data in setup.py (vslavik)


author: John Eckersberg <jeckersb@redhat.com> - 0.10.1-1
changelog:
  - New upstream release 0.10.1 (rhbz#2256342)
  - Remove patch for Python 3.13 compatibility (merged upstream in 0.10.0)
  - Add new depencency on furo
  - Include missing THANKS file (https://github.com/netaddr/netaddr/pull/345)


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Jindrich Novy <jnovy@redhat.com> - 3:5.0.0-1
changelog:
  - python-podman-5.0.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.0.0
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 3:5.2.0-1
changelog:
  - python-podman-5.2.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.2.0
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 3:5.3.0-1
changelog:
  - python-podman-5.3.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.3.0
  - Resolves: RHEL-69004


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <mhroncok@redhat.com> - 14-3
changelog:
  - Avoid needless pkg_resources import in pythonbundles.py
  - Ignore environment markers in pythonbundles.py


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Jiri Konecny <jkonecny@redhat.com> - 1.9.0-5
changelog:
  - Migrate to SPDX license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#Detailed_Description


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-2
changelog:
  - kvm-file-posix-probe-discard-alignment-on-Linux-block-de.patch [RHEL-87642]
  - kvm-block-io-skip-head-tail-requests-on-EINVAL.patch [RHEL-87642]
  - kvm-file-posix-Fix-crash-on-discard_granularity-0.patch [RHEL-87642]
  - kvm-Enable-vhost-user-gpu-pci-for-RHIVOS.patch [RHEL-86056]
  - Resolves: RHEL-87642
    (QEMU sends unaligned discards on 4K devices[RHEL-10])
  - Resolves: RHEL-86056
    (Enable 'vhost-user-gpu-pci' in qemu-kvm for RHIVOS)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-3
changelog:
  - kvm-migration-postcopy-Spatial-locality-page-hint-for-pr.patch [RHEL-85635]
  - kvm-meson-configure-add-valgrind-option-en-dis-able-valg.patch [RHEL-88457]
  - kvm-distro-add-an-explicit-valgrind-devel-build-dep.patch [RHEL-88457]
  - kvm-Allow-guest-get-load-QGA-command.patch [RHEL-91219]
  - Resolves: RHEL-85635
    (Video stuck about 1 min after switchover phase when play one video during postcopy-preempt migration)
  - Resolves: RHEL-88457
    (qemu inadvertantly built with valgrind coroutine stack debugging on x86_64)
  - Resolves: RHEL-91219
    ([qemu-guest-agent] Enable 'guest-get-load' by default [RHEL-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-4
changelog:
  - kvm-block-Expand-block-status-mode-from-bool-to-flags.patch [RHEL-88435 RHEL-88437]
  - kvm-file-posix-gluster-Handle-zero-block-status-hint-bet.patch [RHEL-88435 RHEL-88437]
  - kvm-block-Let-bdrv_co_is_zero_fast-consolidate-adjacent-.patch [RHEL-88435 RHEL-88437]
  - kvm-block-Add-new-bdrv_co_is_all_zeroes-function.patch [RHEL-88435 RHEL-88437]
  - kvm-iotests-Improve-iotest-194-to-mirror-data.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Minor-refactoring.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Pass-full-sync-mode-rather-than-bool-to-inter.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Allow-QMP-override-to-declare-target-already-.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Drop-redundant-zero_target-parameter.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Skip-pre-zeroing-destination-if-it-is-already.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Skip-writing-zeroes-when-target-is-already-ze.patch [RHEL-88435 RHEL-88437]
  - kvm-iotests-common.rc-add-disk_usage-function.patch [RHEL-88435 RHEL-88437]
  - kvm-tests-Add-iotest-mirror-sparse-for-recent-patches.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Reduce-I-O-when-destination-is-detect-zeroes-.patch [RHEL-88435 RHEL-88437]
  - Resolves: RHEL-88435
    (--migrate-disks-detect-zeroes doesn't take effect for disk migration [rhel-10.1])
  - Resolves: RHEL-88437
    (Disk size of target raw image is full allocated when doing mirror with default discard value [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-5
changelog:
  - kvm-file-posix-Define-DM_MPATH_PROBE_PATHS.patch [RHEL-65852]
  - kvm-file-posix-Probe-paths-and-retry-SG_IO-on-potential-.patch [RHEL-65852]
  - kvm-io-Fix-partial-struct-copy-in-qio_dns_resolver_looku.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-setting-client-sockopts-i.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-success-and-failure-paths.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Add-support-for-keep-alive-flag-to.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-inet_parse-to-use-QemuOpt.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Introduce-inet-socket-options-cont.patch [RHEL-67706]
  - kvm-tests-unit-test-util-sockets-fix-mem-leak-on-error-o.patch [RHEL-67706]
  - Resolves: RHEL-65852
    (Support multipath failover with scsi-block)
  - Resolves: RHEL-67706
    (postcopy on the destination host can't switch into pause status under the network issue if boot VM with '-S')


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-6
changelog:
  - kvm-scsi-disk-Add-native-FUA-write-support.patch [RHEL-71962]
  - kvm-Fix-handling-of-have_block_rbd.patch [RHEL-96057]
  - kvm-Delete-obsolete-references-to-architectures.patch [RHEL-96057]
  - kvm-Fix-arch-list-for-vgabios-and-ipxe-roms.patch [RHEL-96057]
  - kvm-Disable-virtio-net-pci-romfile-loading-on-riscv64.patch [RHEL-96057]
  - Resolves: RHEL-71962
    ([RFE] Implement FUA support in scsi-disk)
  - Resolves: RHEL-96057
    (qemu-kvm: Various small issues in the spec file)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-7
changelog:
  - kvm-s390x-Fix-leak-in-machine_set_loadparm.patch [RHEL-98555]
  - kvm-hw-s390x-ccw-device-Fix-memory-leak-in-loadparm-sett.patch [RHEL-98555]
  - kvm-target-i386-Update-EPYC-CPU-model-for-Cache-property.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Rome-CPU-model-for-Cache-pro.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Milan-CPU-model-for-Cache-pr.patch [RHEL-52650]
  - kvm-target-i386-Add-couple-of-feature-bits-in-CPUID_Fn80.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Genoa-for-Cache-property-per.patch [RHEL-52650]
  - kvm-target-i386-Add-support-for-EPYC-Turin-model.patch [RHEL-52650]
  - kvm-include-qemu-compiler-add-QEMU_UNINITIALIZED-attribu.patch [RHEL-95479]
  - kvm-hw-virtio-virtio-avoid-cost-of-ftrivial-auto-var-ini.patch [RHEL-95479]
  - kvm-block-skip-automatic-zero-init-of-large-array-in-ioq.patch [RHEL-95479]
  - kvm-chardev-char-fd-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-chardev-char-pty-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-chardev-char-socket-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-audio-ac97-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-cs4231a-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-audio-es1370-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-audio-gus-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-audio-marvell_88w8618-skip-automatic-zero-init-of.patch [RHEL-95479]
  - kvm-hw-audio-sb16-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-via-ac97-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-char-sclpconsole-lm-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-dma-xlnx_csu_dma-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-display-vmware_vga-skip-automatic-zero-init-of-la.patch [RHEL-95479]
  - kvm-hw-hyperv-syndbg-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-misc-aspeed_hace-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-net-rtl8139-skip-automatic-zero-init-of-large-arr.patch [RHEL-95479]
  - kvm-hw-net-tulip-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-net-virtio-net-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-net-xgamc-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-nvme-ctrl-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-ppc-pnv_occ-skip-automatic-zero-init-of-large-str.patch [RHEL-95479]
  - kvm-hw-ppc-spapr_tpm_proxy-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-usb-hcd-ohci-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-scsi-lsi53c895a-skip-automatic-zero-init-of-large.patch [RHEL-95479]
  - kvm-hw-scsi-megasas-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-ufs-lu-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-socket-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-stream-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-i386-amd_iommu-Isolate-AMDVI-PCI-from-amd-iommu-d.patch [RHEL-85649]
  - kvm-hw-i386-amd_iommu-Allow-migration-when-explicitly-cr.patch [RHEL-85649]
  - kvm-Enable-amd-iommu-device.patch [RHEL-85649]
  - kvm-ui-vnc-Update-display-update-interval-when-VM-state-.patch [RHEL-83883]
  - Resolves: RHEL-98555
    ([s390x][RHEL10.1][ccw-device] there would be memory leak with virtio_blk disks)
  - Resolves: RHEL-52650
    ([AMDSERVER 10.1 Feature] Turin: Qemu EPYC-Turin Model)
  - Resolves: RHEL-95479
    (-ftrivial-auto-var-init=zero reduced performance)
  - Resolves: RHEL-85649
    ([RHEL 10]Qemu/amd-iommu: Add ability to manually specify the AMDVI-PCI device)
  - Resolves: RHEL-83883
    (Video stuck after switchover phase when play one video during migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-8
changelog:
  - kvm-migration-multifd-move-macros-to-multifd-header.patch [RHEL-59697]
  - kvm-migration-refactor-channel-discovery-mechanism.patch [RHEL-59697]
  - kvm-migration-Add-save_postcopy_prepare-savevm-handler.patch [RHEL-59697]
  - kvm-migration-ram-Implement-save_postcopy_prepare.patch [RHEL-59697]
  - kvm-tests-qtest-migration-consolidate-set-capabilities.patch [RHEL-59697]
  - kvm-migration-write-zero-pages-when-postcopy-enabled.patch [RHEL-59697]
  - kvm-migration-enable-multifd-and-postcopy-together.patch [RHEL-59697]
  - kvm-migration-Add-qtest-for-migration-over-RDMA.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Enforce-RLIMIT_MEMLOCK-128MB-re.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Add-test-for-rdma-migration-wit.patch [RHEL-59697]
  - kvm-tests-qtest-migration-add-postcopy-tests-with-multif.patch [RHEL-59697]
  - kvm-file-posix-Fix-aio-threads-performance-regression-af.patch [RHEL-96854]
  - kvm-block-remove-outdated-comments-about-AioContext-lock.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_reopen_.patch [RHEL-88561]
  - kvm-block-snapshot-move-drain-outside-of-read-locked-bdr.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_inactiv.patch [RHEL-88561]
  - kvm-block-mark-bdrv_parent_change_aio_context-GRAPH_RDLO.patch [RHEL-88561]
  - kvm-block-mark-change_aio_ctx-callback-and-instances-as-.patch [RHEL-88561]
  - kvm-block-mark-bdrv_child_change_aio_context-GRAPH_RDLOC.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_change_aio_context-.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_try_change_aio_cont.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child_common.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_set_backing_hd_drai.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_add_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_unref_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_del_child.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-internal_snapshot_a.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-external_snapshot_a.patch [RHEL-88561]
  - kvm-block-mark-bdrv_drained_begin-and-friends-as-GRAPH_U.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-remove-image-file-aft.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-add-test-case-with-re.patch [RHEL-88561]
  - Resolves: RHEL-59697
    (Allow multifd+postcopy features being enabled together, but only use multifd during precopy )
  - Resolves: RHEL-96854
    (Performance Degradation(aio=threads) between Upstream Commit b75c5f9 and 984a32f)
  - Resolves: RHEL-88561
    (qemu graph deadlock during job-dismiss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-9
changelog:
  - kvm-Declare-rtl8139-as-deprecated.patch [RHEL-45624]
  - Resolves: RHEL-45624
    (Deprecate rtl8139 NIC in QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-10
changelog:
  - kvm-Enable-uefi-variable-service-for-edk2.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-11
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-105440]
  - Resolves: RHEL-105440
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-12
changelog:
  - kvm-RHEL-Pack-uefi-vars-module.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-16
changelog:
  - kvm-migration-Fix-UAF-for-incoming-migration-on-Migratio.patch [RHEL-69776]
  - kvm-scripts-improve-error-from-qemu-trace-stap-on-missin.patch [RHEL-83535]
  - kvm-Recommend-systemtap-client-from-qemu-tools.patch [RHEL-83535]
  - Resolves: RHEL-69776
    ([rhel10]Guest crashed on the target host when the migration was canceled)
  - Resolves: RHEL-83535
    ([Qemu RHEL-10] qemu-trace-stap should handle lack of stap more gracefully)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-17
changelog:
  - kvm-Also-recommend-systemtap-devel-from-qemu-tools.patch [RHEL-83535]
  - Resolves: RHEL-83535
    ([Qemu RHEL-10] qemu-trace-stap should handle lack of stap more gracefully)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-2
changelog:
  - kvm-e1000e-Prevent-crash-from-legacy-interrupt-firing-af.patch [RHEL-112882]
  - Resolves: RHEL-112882
    ([DEV Task]: Assertion `core->delayed_causes == 0' failed with e1000e NIC)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-3
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-119368]
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-116443]
  - kvm-target-i386-add-compatibility-property-for-arch_capa.patch [RHEL-120253]
  - kvm-target-i386-add-compatibility-property-for-pdcm-feat.patch [RHEL-120253]
  - Resolves: RHEL-119368
    ([rhel10] Backport "arm/kvm: report registers we failed to set")
  - Resolves: RHEL-116443
    (qemu crash after hot-unplug disk from the multifunction enabled bus,crash point PCIDevice *vf = dev->exp.sriov_pf.vf[i])
  - Resolves: RHEL-120253
    (Backport fixes for PDCM and ARCH_CAPABILITIES migration incompatibility)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-4
changelog:
  - kvm-qapi-machine-s390x-add-QAPI-event-SCLP_CPI_INFO_AVAI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-tests-functional-add-tests-for-SCLP-event-CPI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-redhat-Add-new-rhel9.8.0-and-rhel10.2.0-machine-type.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-vfio-rename-field-to-num_initial_regions.patch [RHEL-118810]
  - kvm-vfio-only-check-region-info-cache-for-initial-region.patch [RHEL-118810]
  - kvm-arm-create-new-rhel-10.2-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-arm-create-new-rhel-9.8-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-10.2-specific-pc-q35-machine-typ.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-9.8-specific-pc-q35-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-rh-enable-CONFIG_USB_STORAGE_BOT.patch [RHEL-101929]
  - Resolves: RHEL-104009
    ([IBM 10.2 FEAT] KVM: Enhance machine type definition to include CPI and PCI passthru capabilities (qemu))
  - Resolves: RHEL-105823
    (Add new -rhel10.2.0 machine type to qemu-kvm [s390x])
  - Resolves: RHEL-73008
    ([IBM 10.2 FEAT] KVM: Implement Control Program Identification (qemu))
  - Resolves: RHEL-118810
    ([RHEL 10.2] Windows 11 VM fails to boot up with ramfb='on' with QEMU 10.1)
  - Resolves: RHEL-105826
    (Add new -rhel10.2.0 machine type to qemu-kvm [aarch64])
  - Resolves: RHEL-105828
    (Add new -rhel10.2.0 machine type to qemu-kvm [x86_64])
  - Resolves: RHEL-101929
    (enable 'usb-bot' device for proper support of USB CD-ROM drives via libvirt  )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-5
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120116]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120116]
  - kvm-vfio-Disable-VFIO-migration-with-MultiFD-support.patch [RHEL-126573]
  - kvm-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-from-10..patch [RHEL-67323]
  - kvm-hw-arm-smmu-common-Check-SMMU-has-PCIe-Root-Complex-.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Re-arrange-SMMUv3-IORT-build.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Update-IORT-for-multiple-smmu.patch [RHEL-73800]
  - kvm-hw-arm-virt-Factor-out-common-SMMUV3-dt-bindings-cod.patch [RHEL-73800]
  - kvm-hw-arm-virt-Add-an-SMMU_IO_LEN-macro.patch [RHEL-73800]
  - kvm-hw-pci-Introduce-pci_setup_iommu_per_bus-for-per-bus.patch [RHEL-73800]
  - kvm-hw-arm-virt-Allow-user-creatable-SMMUv3-dev-instanti.patch [RHEL-73800]
  - kvm-qemu-options.hx-Document-the-arm-smmuv3-device.patch [RHEL-73800]
  - kvm-bios-tables-test-Allow-for-smmuv3-test-data.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Add-tests-for-legacy-smmuv3-a.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Update-tables-for-smmuv3-test.patch [RHEL-73800]
  - kvm-qtest-Do-not-run-bios-tables-test-on-aarch64.patch []
  - Resolves: RHEL-120116
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-10.2])
  - Resolves: RHEL-126573
    (VFIO migration using multifd should be disabled by default)
  - Resolves: RHEL-67323
    ([aarch64] Support ACPI based PCI hotplug on ARM)
  - Resolves: RHEL-73800
    (NVIDIA:Grace-Hopper:Backport support for user-creatable nested SMMUv3 - RHEL 10.1)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-8
changelog:
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!) chronologically
    from the latest:
    - Resolve libs for executable links in COPY_AS_IS, PR 3073
    - Skip invalid disk drives when saving layout PR 3047
    - Do not delete NetBackup logs in case of errors and save
      /usr/openv/netbackup/logs to the restored system after a successful recovery
    - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen
      with NetBackup 10.2.0.1
    - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-10
changelog:
  - skip btrfs subvolumes when detecting ESP partitions
  - fix booting on UEFI systems with multiple CDROM devices
  - fix copying of console kernel cmdline parameters
  - Use git to apply patches in %prep
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!):
    - Backport PR 3250 to fix useless warning that libsystemd-core requires
      additional libraries and ReaR recovery system needs additional libraries
    - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs://
      BACKUP/OUTPUT_URL
  - fix backup of btrfs subvolumes


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-11
changelog:
  - Generate /etc/rear/os.conf during build again, it is better than generating it
    in %post, but do not mark it as config file to allow it to be updated during
    package upgrade and avoid containing an old OS version information


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-3
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Tomas Popela <tpopela@redhat,com> - 0.1-4
changelog:
  - Migrate to the new flatpak preinstall config format
  - Add collection id to rhel registry config file and reference it from
    preinstall config files
  - Use org.mozilla.Firefox (and not firefox) which is in RHEL


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 284-1
changelog:
  - Use --config=xxx for clang configs instead of two separate arguments to work
    around a bug in meson
  - Add clang link config file


author: Michal Domonkos <mdomonko@redhat.com> - 290-1
changelog:
  - Use upstream versions of find-provides/requires (RHEL-39760)
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-84703)


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: pkoprda <pkoprda@redhat.com> - 1.0.0-2
changelog:
  - rhc-playbook-verifier-v1.0.0-2
  - Removes rhc-playbook-signer subpackage from .spec file
  - Resolves: RHEL-115794


author: Gael Chamoulaud <gchamoul@redhat.com> 0.1.8-4
changelog:
  - Use thread.join(timeout) to avoid busy waiting and simplify interval event posting logic (rhbz#2115848)


author: Rich Megginson <rmeggins@redhat.com> - 1.101.1-0.1
changelog:
  - Resolves: RHEL-93294 : selinux - fix: Set the kernel command line selinux parameter correctly when changing selinux state


author: Rich Megginson <rmeggins@redhat.com> - 1.105.0-0.1
changelog:
  - Resolves: RHEL-99087 : ad_integration - feat: control sssd domain/realm section name to use; merge settings into chosen name
  - Resolves: RHEL-101676 : bootloader - fix: Fix removing kernel options with values
  - Resolves: RHEL-101671 : bootloader - Add functionality to set default kernel with bootloader [rhel-10]
  - Resolves: RHEL-100819 : ha_cluster - Fix missing /var/lib/pcsd directory after pcs installation
  - Resolves: RHEL-95846 : journald - feat: Add support for SystemKeepFree journald.conf option
  - Resolves: RHEL-95883 : storage - fix: Fix getting PVs from raid_disks for RAID LVs
  - several roles work with ansible 2.19
  - several roles work with bootc
  - network test fix


author: Rich Megginson <rmeggins@redhat.com> - 1.106.0-0.1
changelog:
  - Resolves: RHEL-46225 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export resources configuration
  - Resolves: RHEL-102635 : journald - feat: Add MaxRetention configuration
  - All roles support ansible 2.19
  - All roles support the latest ansible-lint


author: Rich Megginson <rmeggins@redhat.com> - 1.106.1-0.1
changelog:
  - Resolves: RHEL-103887 : postfix - fix: configure postfix to listen only to IPv4 if IPv6 is disabled
  - Resolves: RHEL-103573 : selinux - fix: tempdir path not defined in check mode; __selinux_item.path may be undefined
  - ha_cluster - ansible 2.19 support
  - bootloader - fix wording in README


author: Rich Megginson <rmeggins@redhat.com> - 1.107.0-0.1
changelog:
  - Resolves: RHEL-105093 : podman - specifying multiple users causes resources to be associated with wrong user
  - Resolves: RHEL-95757 : storage - Improve error reporting when invalid or unsupported RAID configuration is given
  - Resolves: RHEL-95729 : storage - [RHEL10] Incorrect key file in crypttab entry for volume encrypted_vol
  - refactor ha_cluster to have empty __init__.py in module_utils for ansible-test
  - fix tests in postfix, selinux


author: Rich Megginson <rmeggins@redhat.com> - 1.108.1-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - Resolves: RHEL-95719 : storage - Tests verification fails on encrypted LVM on top of MD RAID
  - Resolves: RHEL-106261 : sudo - redhat.rhel_system_roles.sudo takes 6-7 hours to scan /etc/sudoers.d
  - fix storage role tests related to encrypted LVM on top of MD RAID and el7 raid errors
  - fix postfix role tests related to rebooting
  - fix ha_cluster role tests related to missing fence agent
  - add firewall test debugging for interface tests


author: Rich Megginson <rmeggins@redhat.com> - 1.108.3-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - add bootloader test for this fix


author: Rich Megginson <rmeggins@redhat.com> - 1.108.4-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - no actual code changes, test fixes for bootloader, ha_cluster, kdump, tlog


author: Rich Megginson <rmeggins@redhat.com> - 1.108.5-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - This fixes tests in certificate, ha_cluster, kdump, selinux


author: Rich Megginson <rmeggins@redhat.com> - 1.108.6-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - This fixes ha_cluster tests


author: Rich Megginson <rmeggins@redhat.com> - 1.110.0-0.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - Resolves: RHEL-46227 : ha_cluster - export CIB properties configuration
  - Resolves: RHEL-110865 : network - Ansible RHEL network system role fails cannot find route table main
  - Resolves: RHEL-123026 : network - Skip the loopback profile when deleting all profiles except the ones explicitly included
  - Resolves: RHEL-123016 : sshd - fix: include external config files first so they can override all options
  - Resolves: RHEL-66738 : storage - add support for disk partitioning
  - Resolves: RHEL-115033 : storage - Storage role crashes on systems without /etc/fstab
  - support podman, timesync in container builds


author: Rich Megginson <rmeggins@redhat.com> - 1.110.1-0.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - fixes ansible-test and ansible-lint issues in firewall


author: Rich Megginson <rmeggins@redhat.com> - 1.110.1-1.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - fixes ansible-test issue with firewall


author: Rich Megginson <rmeggins@redhat.com> - 1.111.0-0.1
changelog:
  - Resolves: RHEL-46226 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
  - Resolves: RHEL-128428 : nbde_client - Error in using the RHEL system role for nbde client [rhel-10]
  - Resolves: RHEL-104931 : snapshot - add support for bootable snapsets
  - new role hpc
  - minor firewall update


author: Rich Megginson <rmeggins@redhat.com> - 1.111.0-0.2
changelog:
  - Resolves: RHEL-46226 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
  - revert to community.general 11.4.1 - we cannot use 12.* anymore as they have dropped support for py27 and py36


author: Rich Megginson <rmeggins@redhat.com> - 1.112.0-0.1
changelog:
  - Resolves: RHEL-127971 : sshd - feat: Add new configuration option CanonicalMatchUser on RHEL/CentOS


author: Rich Megginson <rmeggins@redhat.com> - 1.113.0-0.1
changelog:
  - Resolves: RHEL-127971 : sshd - feat: Add new configuration option CanonicalMatchUser on RHEL/CentOS
  - fix ansible-test issues in ha_cluster, sshd
  - rebase all roles to version which has community.general 11.x support (no code changes, only meta)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Jan Černý <jcerny@redhat.com> - 0.1.68-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.68 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.68


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.69 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.69


author: Matthew Burket <mburket@redhat.com> - 0.1.70-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.70 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.70


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.71-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.71 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.71


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.72-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.72 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.72


author: Matthew Burket <mburket@redhat.com>
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.74 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.77-2
changelog:
  - fix incorrect applicability of Grub2 UEFI specific rules
  - replace grub-mkconfig with grub2-mkconfig in rule descriptions


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.4-1
changelog:
  - Allow systemd-coredump the sys_chroot capability
  Resolves: RHEL-97586
  - Add the rhcd_rw_fifo_files() interface
  Related: RHEL-99318
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-99318


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.5-1
changelog:
  - Confine nfs-server generator
  Resolves: RHEL-106119
  - Support virtqemud handle hotplug hostdev devices
  Resolves: RHEL-65266
  - Allow virtstoraged create qemu /var/run files
  Resolves: RHEL-104344
  - Allow virtqemud write to sysfs files
  Resolves: RHEL-104378
  - Allow unconfined_domain_type cap2_userns capabilities
  Resolves: RHEL-93656


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.6-1
changelog:
  - Apply generator template to selinux-autorelabel generator
  Resolves: RHEL-107516
  - Allow systemd-coredumpd capabilities in the user namespace
  Resolves: RHEL-97586
  - Allow virtqemud start a vm which uses nbdkit
  Resolves: RHEL-69118
  - Add nbdkit_signal() and nbdkit_signull() interfaces
  Resolves: RHEL-69118
  - Allow openvswitch read virtqemud process state
  Resolves: RHEL-65322
  - Add binsbin-convert.sh script
  Resolves: RHEL-69118


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.7-1
changelog:
  - Revert "Add policy for insights-core"
  Resolves: RHEL-110651
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110651


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.8-1
changelog:
  - Reapply "Add insights_core interfaces"
  Resolves: RHEL-112368
  - Reapply "Add policy for insights-core"
  Resolves: RHEL-112368


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.9-1
changelog:
  - Allow systemd-oomd watch tmpfs dirs
  Resolves: RHEL-106998
  - Allow systemd-oomd watch dbus pid sock files
  Resolves: RHEL-106998
  - Allow userdomain to connect to systemd-oomd over a unix socket
  Resolves: RHEL-106998
  - Allow 'oomctl dump' to interact with systemd-oomd
  Resolves: RHEL-106998
  - Basic functionality for systemd-oomd
  Resolves: RHEL-106998
  - Basic enablement for systemd-oomd
  Resolves: RHEL-106998
  - Remove permissive domains
  Resolves: RHEL-107038
  - Allow iptables manage its private fifo_files in /tmp
  Resolves: RHEL-83775
  - Allow ras-mc-ctl write to sysfs files
  Resolves: RHEL-86926
  - Allow nfs generator create and use netlink sockets
  Resolves: RHEL-111556
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.10-1
changelog:
  - Allow sshd-auth read generic proc files
  Resolves: RHEL-107732
  - Allow sshd-auth read and write user domain ptys
  Resolves: RHEL-107732
  - Allow sshd-session get attributes of sshd vsock socket
  Resolves: RHEL-107732
  - Adjust guest and xguest users policy for sshd-session
  Resolves: RHEL-107732
  - Update files_search_base_file_types()
  Resolves: RHEL-107732
  - Allow sshd-session read cockpit pid files
  Resolves: RHEL-107732
  - Add default contexts for sshd-seesion
  Resolves: RHEL-107732
  - Define types for new openssh executables
  Resolves: RHEL-107732
  - Allow ras-mc-ctl get attributes of the kmod executable
  Resolves: RHEL-102535
  - Define file equivalency for /var/opt
  Resolves: RHEL-116512
  - Update specfile triggers for DSP modules
  Resolves: RHEL-116044


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.11-1
changelog:
  - Allow iotop stream connect to systemd-userdbd
  Resolves: RHEL-105481
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-107589
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-124855
  - Allow nfsidmapd search virt lib directories
  Resolves: RHEL-68722
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.12-1
changelog:
  - Update kernel_secretmem_use()
  Resolves: RHEL-116154
  - Allow system_mail_t read apache system content conditionally
  Resolves: RHEL-114970
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-119619
  - Update specfile trigger for smartmontools
  Resolves: RHEL-113167


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.13-1
changelog:
  - Add the rpm_signal() interface
  Related: RHEL-107589
  - Allow tuned_t use its private tmpfs files
  Related: RHEL-107589
  - Allow samba-bgqd send to smbd over a unix datagram socket
  Resolves: RHEL-93731
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041
  - Confine redfish_finder - host api discovery service
  Resolves: RHEL-50299
  - Update policy for dhcpc_hook_t
  Resolves: RHEL-113937
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  Resolves: RHEL-113937
  - Allow systemd to map files under /sys
  Resolves: RHEL-132638


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.3-1
changelog:
  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-104069
  - Allow virtqemud handle virt_content_t chr files
  Resolves: RHEL-76104
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-77047
  - All sblim-sfcbd the dac_read_search capability
  Resolves: RHEL-98287
  - Allow sblim domain read systemd session files
  Resolves: RHEL-98287
  - Allow sblim-sfcbd execute dnsdomainname
  Resolves: RHEL-98287
  - Allow systemd-importd create and unlink init pid socket
  Resolves: RHEL-98490


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - new upstream release
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: Jan Macku <jamacku@redhat.com> - 257-1
changelog:
  - Rebase to new upstream release v257 (RHEL-71409)
  - netif-naming-scheme: introduce rhel-10.0 scheme (RHEL-44417)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-2
changelog:
  - Resolves: RHEL-50166 - Rebase tomcat to version 9.0.87
  - Resolves: RHEL-12274 - Use src.zip file as a Source0 instead of tar.gz
  - Resolves: RHEL-51277 - Prune changelog to remove non-relevant history
  - Resolves: RHEL-52906 - tomcat: Switch to using Java 21 as the default JDK
  - Resolves: RHEL-55194 - Fix changelog version
  - Resolves: RHEL-46156
    tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-1
changelog:
  - Rebase tomcat to 10.1.36
  - Resolves: RHEL-82925
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)
  - Resolves: RHEL-87272
    tomcat: DoS in examples web application (CVE-2024-54677)
  - Resolves: RHEL-87273
    tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316)
  - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-2
changelog:
  - Resolves: RHEL-108900
    tomcat: Apache  FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108902
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108904
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108908
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-3
changelog:
  - Resolves: RHEL-102184
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
  - Resolves: RHEL-108906
    tomcat: Denial of service (CVE-2025-52520)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-2
changelog:
  - Initial commit on c10s
    Resolves: RHEL-69841
  - tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-5
changelog:
  - Resolves: RHEL-82927
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-5.el10_0.1
changelog:
  - Resolves: RHEL-91750
    tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)
  - Resolves: RHEL-94960
    tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-7
changelog:
  - Resolves: RHEL-108485
    tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108493
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108501
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108509
    tomcat: Denial of service (CVE-2025-52434)
  - Resolves: RHEL-108522
    tomcat: Denial of service (CVE-2025-52520)
  - Resolves: RHEL-108517
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-8
changelog:
  - Resolves: RHEL-102186
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-7
changelog:
  - Unbreak Podman's downstream Fedora CI
  - Update the BuildRequires on golang to reflect reality
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-8
changelog:
  - Unbreak Podman's downstream Fedora CI (part 2)
  - Backport some new upstream tests
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Tomas Popela <tpopela@redhat.com> - 3.7.4-1
changelog:
  - Update to 3.7.4 and sync the macro naming with Fedora
    Resolves: RHEL-71387
  - Drop references to non-existent tracker-extract-3.service
    Resolves: RHEL-70242


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94809
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
    - functions: make calc_isolated_cores return CPU ranges
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: disable appropriate P-State drivers
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    - gui: fix the profile deleter script


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2023d-2
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <pats@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84740)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Vit Mojzis <vmojzis@redhat.com> - 0.2.7-5
changelog:
  - Show diff when checking formatting
  - Fix several lint findings
  - Fix generating policy for Crio mounts


author: Jens Petersen <petersen@redhat.com> - 15.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode15.0.0/ (#2126234)
  - http://blog.unicode.org/2022/09/announcing-unicode-standard-version-150.html


author: Jens Petersen <petersen@redhat.com> - 15.1.0-0.1
changelog:
  - update to draft 15.1.0: https://unicode.org/versions/Unicode15.1.0/
  - do not add copyright.html file from website
  - add missing Unicode-TOU license tag


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - selinux: comply with with the "Unify bin and sbin" change
    Resolves: RHEL-113206
  - Restore permissions of the log directory
    Resolves: RHEL-92260


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-1
changelog:
  - Upstream 3.23.0 final
  - configure --enable-lto
  - Remove all upstreamed patches
  - Add BuildRequires: python3-devel for running testsuite.
  - Update license tags to spdx


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later
  - Clarify License of valgrind-scripts.


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Luboš Uhliarik <luhliari@redhat.com> - 7.6.0-3
changelog:
  - Resolves: RHEL-59267 - varnish rebase to 7.6.0
  - Resolves: RHEL-30333 CVE-2024-30156 varnish: HTTP/2 Broken Window
    Attack may result in denial of service


author: Hedayat Vatankhah <hedayat.fwd@gmail.com> - 33.003-1
changelog:
  - Update to latest upstream version: 33.003, and increase the priority of
    vazirmatn font so that it'll be used in Qt apps in fa locale too


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-7
changelog:
  - cloner: Sync <uuid> and <sysinfo> system uuid (RHEL-34608)
  - virtinstall: fix regression with --boot and no install method (RHEL-34608)
  - progress: Fix showing correct final total (RHEL-34608)
  - virtinstall: Fix the allocating disk size printed by the progress bar (RHEL-34608)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (RHEL-34608)
  - virt-install: Recommend '--boot uefi' (RHEL-34608)
  - virt-install: Document Secure Boot setups (RHEL-34608)
  - tests: Add more cloud-init and TPM test cases (RHEL-34608)
  - installer: drop default TPM for --cloud-init install phase (RHEL-34608)
  - Add gating for centos stream 10 (RHEL-34608)
  - xmleditor: make gtksourceview optional (RHEL-35859)


author: Pavel Hrdina <phrdina@redhat.com> - 5.0.0-1
changelog:
  - Rebased to virt-manager-5.0.0 (RHEL-46783)
  - The rebase also fixes the following bugs:
      RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371
      RHEL-65189, RHEL-66768


author: William Poteat <wpoteat@redhat.com> 1.31.25-1
changelog:
  - 2099925: Drop support for RHEVM on RHEL 9 (jhnidek@redhat.com)
  - Update virt-who-config.5 (s10w.1ife.31@gmail.com)
  - Big optimization and refactoring of Nutanix code (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.31.26-1
changelog:
  - Fix stylish issue in migrateconfiguration.py (jhnidek@redhat.com)
  - Added next rhel-9.x subversion to releasers.conf file. (jhnidek@redhat.com)
  - 2158710: Migrated virt-who.conf, when necessary (jhnidek@redhat.com)
  - Added documentation for the 'rhsm_insecure' option, for insecure connections
    (fernandez.santos.d@gmail.com)
  - Added configuration for rhel-9.x into releasers.conf (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.31.27-1
changelog:
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Change /var/run -> /run (orion@nwra.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Drop unused copy of python-daemon sources (ptoscano@redhat.com)
  - Migrate to SPDX license (jhnidek@redhat.com)
  - fix: disable complex tests for ESX (jhnidek@redhat.com)
  - fix: use ssl.SSLContext.wrap_socket for wrapping socket (jhnidek@redhat.com)
  - fix: stylish issue discovered by flake8 (jhnidek@redhat.com)
  - fix: Use ConfigParser and not SafeConfigParser (jhnidek@redhat.com)
  - spec: drop unused openssl dependency (ptoscano@redhat.com)
  - spec: hardcode/inline Python 3 variables (ptoscano@redhat.com)
  - spec: drop unused Group tag (ptoscano@redhat.com)
  - spec: do not Require setuptools (ptoscano@redhat.com)
  - spec: drop $RPM_BUILD_ROOT manual cleanup (ptoscano@redhat.com)
  - Updated README.md file to reflect current state (jhnidek@redhat.com)
  - Drop outdated/unused requirements (ptoscano@redhat.com)
  - Removed support for Jenkins (jhnidek@redhat.com)
  - Added support for GitHub actions (jhnidek@redhat.com)
  - Removed some unused parts of Makefile (jhnidek@redhat.com)
  - Removed support for docker (jhnidek@redhat.com)
  - spec: assume the python3-libvirt package name everywhere
    (ptoscano@redhat.com)
  - spec: drop redundant "release_number" variable (ptoscano@redhat.com)
  - spec: drop outdated variables and comments (ptoscano@redhat.com)
  - spec: drop six dependency (ptoscano@redhat.com)
  - Drop non-systemd support (ptoscano@redhat.com)
  - Feature: improve log message, when wrong value is provided
    (jhnidek@redhat.com)
  - Fix: default value for prism_central cannot be None (jhnidek@redhat.com)
  - spec: drop support for Python < 3 (ptoscano@redhat.com)
  - spec: drop support for Fedora < 36 (ptoscano@redhat.com)
  - spec: drop support for RHEL < 8 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.32.1-1
changelog:
  - feat: Run Github CI action py.test every month (jhnidek@redhat.com)
  - fix: Added missing .el10 to virt-who.spec (jhnidek@redhat.com)
  - fix: Replace all warn() with warning() (jhnidek@redhat.com)


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-97010]
  - Resolves: RHEL-97010
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-1
changelog:
  - Rebase to 1.13.3 [RHEL-133034]
  - Resolves: RHEL-133034
    (Rebase virtiofsd to latest version for RHEL 10.2)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Neal Gompa <ngompa@centosproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races
    Resolves: RHEL-79119
  - Fix minor spec formatting inconsistencies


author: Rafael Guterres Jeffman <rjeffman@redhat.com> - 1.1.3-15
changelog:
  - Use "grep -E" instead of the obsoleted "egrep"
    Resolves: BZ#2140197
  - mark LICENSE as %license
  - Spec cleanup
  - Small patches, as a rule, are in git dist, to be more easy to read.
  - Migrated to SPDX license (noop)


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-1
changelog:
  - Update to 0.0.4
  - Require xorg-x11-xauth and dbus-daemon
  - Use mutter as default compositor if none is specified


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-2
changelog:
  - Backport fix for waitpid errors (RHEL-46355)
  - Suggest mutter since this is the default compositor


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


