# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-250.el10]
changelog:
  - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189660] {CVE-2026-23168}
  - PCI/TPH: Expose pcie_tph_get_st_table_loc() (CKI Backport Bot) [RHEL-186643]
  - PCI/TPH: Expose pcie_tph_get_st_table_size() (CKI Backport Bot) [RHEL-186643]
  - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-179033]
  - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-183513]
  - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-183513] {CVE-2026-31554}
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-183513] {CVE-2026-31555}
  - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-183513] {CVE-2026-23415}
  - tools: ynl: cli: order set->list conversion in JSON output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-route sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-addr sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert ethtool sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert devlink sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add netdevsim wrapper library for YNL tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert tc and tc-filter-add samples to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-link sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert ovs sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert netdev sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: move samples to tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add uns-admin-perm to genetlink (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Fill out operation attributes (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Add sub-messages (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Update attribute sets (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Add definitions (Hangbin Liu) [RHEL-156508]
  - doc/netlink: netlink-raw: Add max check (Hangbin Liu) [RHEL-156508]
  - tools: ynl: produce kselftest-list.txt from tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: support INSTALL_PATH in the tests Makefile (Hangbin Liu) [RHEL-156508]
  - tools: ynl: don't install tests in /usr/bin/ (Hangbin Liu) [RHEL-156508]
  - tools: ynl: rename TESTS variable to TEST_PROGS (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: make the output compact (Hangbin Liu) [RHEL-156508]
  - tools/net/ynl: Makefile's install target now installs ynltool (Hangbin Liu) [RHEL-156508]
  - tools/net/ynl: suppress jobserver warning in ynltool version detection (Hangbin Liu) [RHEL-156508]
  - tools: ynl: render event op docs correctly (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: print reply in combined format if possible (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: extract the event/notify handling in --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: factor out --list-attrs / --doc handling (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: add --doc as alias to --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: improve --help (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: wrap the doc text if it's long (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: introduce formatting for attr names in --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: Fix remaining pylint warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: fix pylint None, type, dict, generators, init (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: fix pylint warnings for returns, unused, redefined (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: suppress unhelpful pylint messages (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint issues in ynl_gen_rst (Hangbin Liu) [RHEL-156508]
  - tools: ynl: ethtool: fix pylint issues (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix logic errors reported by pylint (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint global variable related warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint misc warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint dict, indentation, long lines, uninitialised (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint exception warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint redefinition, encoding errors (Hangbin Liu) [RHEL-156508]
  - tools: ynl: pylint suppressions and docstrings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: don't install tests (Hangbin Liu) [RHEL-156508]
  - netlink: specs: netdev: clarify the page pool API a little (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix build on systems with old kernel headers (Hangbin Liu) [RHEL-156508]
  - ynl: samples: Fix spelling mistake "failedq" -> "failed" (Hangbin Liu) [RHEL-156508]
  - ynl: fix schema check errors (Hangbin Liu) [RHEL-156508]
  - ynl: fix a yamllint warning in ethtool spec (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add a lint makefile target (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add schema checking (Hangbin Liu) [RHEL-156508]
  - netlink: specs: add big-endian byte-order for u32 IPv4 addresses (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add YNL test framework (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen: add function prefix argument (Hangbin Liu) [RHEL-156508]
  - ynl: samples: add tc filter example (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Display enum values in --list-attrs output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Parse nested attributes in --list-attrs output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Add --list-attrs option to show operation attributes (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: ignore *.d deps files (Hangbin Liu) [RHEL-156508]
  - netlink: specs: support ipv4-or-v6 for dual-stack fields (Hangbin Liu) [RHEL-156508]
  - tools: ynl: Add MAC address parsing support (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: remove -lmnl from link flags (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: correct install in Makefile (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add traffic distribution balance (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add qstats support (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add page-pool stats (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: create skeleton for the C command (Hangbin Liu) [RHEL-156508]
  - tools: ynl: call nested attribute free function for indexed arrays (Hangbin Liu) [RHEL-156508]
  - netlink: specs: netdev add missing stats to qstat-get (Hangbin Liu) [RHEL-156508]
  - tools: ynl: rework the string representation of NlError (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix indent issues in the main Python lib (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix string attribute length to include null terminator (Hangbin Liu) [RHEL-156508]
  - tools: ynl: avoid print_field when there is no reply (Hangbin Liu) [RHEL-156508]
  - netlink: specs: explicitly declare block scalar strings (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: fix if-idx attribute type (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fou: change local-v6/peer-v6 check (Hangbin Liu) [RHEL-156508]
  - netlink: specs: enforce strict naming of properties (Hangbin Liu) [RHEL-156508]
  - netlink: specs: tc: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: rt-link: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: ovs_flow: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: nfsd: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - docs: netlink: index.rst: add a netlink index file (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix a couple of yamllint warnings (Hangbin Liu) [RHEL-156508]
  - netlink: specs: wrap long doc lines (>80 chars) (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up indentation errors (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up truthy values (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up spaces before comments (Hangbin Liu) [RHEL-156508]
  - netlink: specs: clean up spaces in brackets (Hangbin Liu) [RHEL-156508]
  - netlink: specs: add doc start markers to yaml (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: fix missing doc (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen: use big-endian netlink attribute types (Hangbin Liu) [RHEL-156508]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-251.el10]
changelog:
  - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188089]
  - riscv: mm: Fix conflict in arch_tlbbatch_add_pending() (Jennifer Berringer) [RHEL-212287]
  - arm64: dts: s32g3: Fix SWT8 watchdog address (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Jared Kangas) [RHEL-212089]
  - iio: core: fix uninitialized data in debugfs (Jared Kangas) [RHEL-212089]
  - iio: buffer: Move from int64_t to s64 for timestamp (Jared Kangas) [RHEL-212089]
  - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Jared Kangas) [RHEL-212089]
  - iio: Replace 'sign' field with union in struct iio_scan_type (Jared Kangas) [RHEL-212089]
  - iio: buffer: ensure repeat alignment is a power of two (Jared Kangas) [RHEL-212089]
  - iio: buffer: cache timestamp offset in scan buffer (Jared Kangas) [RHEL-212089]
  - iio: buffer: check return value of iio_compute_scan_bytes() (Jared Kangas) [RHEL-212089]
  - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Jared Kangas) [RHEL-212089]
  - iio: core: Simplify IIO core managed APIs (Jared Kangas) [RHEL-212089]
  - iio: inkern: call iio_device_put() only on mapped devices (Jared Kangas) [RHEL-212089]
  - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Jared Kangas) [RHEL-212089]
  - dmaengine: of_dma: Add devm_of_dma_controller_register() (Jared Kangas) [RHEL-212089]
  - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: drop unused module alias (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Jared Kangas) [RHEL-212089]
  - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Jared Kangas) [RHEL-212089]
  - i2c: imx: zero-initialize dma_slave_config for eDMA (Jared Kangas) [RHEL-212089]
  - i2c: imx: ensure no clock is generated after last read (Jared Kangas) [RHEL-212089]
  - i2c: imx: fix i2c issue when reading multiple messages (Jared Kangas) [RHEL-212089]
  - i2c: imx: preserve error state in block data length handler (Jared Kangas) [RHEL-212089]
  - vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155388]
  - ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-191988]
  - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193520] {CVE-2026-52973}
  - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-193670]
  - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-193670]
  - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-193670]
  - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-193670]
  - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-193670]
  - hwmon: Add label support for 64-bit energy attributes (Jared Kangas) [RHEL-193670]
  - hwmon: Introduce 64-bit energy attribute support (Jared Kangas) [RHEL-193670]
  - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Jared Kangas) [RHEL-210979]
  - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Jared Kangas) [RHEL-210979]
  - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-210979]
  - pwm: Add the S32G support in the Freescale FTM driver (Jared Kangas) [RHEL-210979]
  - pwm: fsl-ftm: Drop driver local locking (Jared Kangas) [RHEL-210979]
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Jared Kangas) [RHEL-210979]
  - selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-189741]
  - Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-189741]
  - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-190427]
  - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-190428]
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189607] {CVE-2025-71147}
  - gpio: pca953x: propagate regulator_enable() error from resume (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: mask interrupts in irq shutdown (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: pca953x: clarify interrupt source detection (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for TCAL6408 TCAL6416 (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: gpio-pca95xx: Add tcal6408 and tcal6416 (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: add TCAL6408 and TCAL6416 (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: Add a compatibility and feature list for PCA953x (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: clarify log messages about auto increment feature (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-190842]
  - gpio: Kconfig: Update help for GPIO_PCA953X (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: use regmap_update_bits() to improve performance (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for TI TCA6418 (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: pca95xx: add TI TCA6418 (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: pca95xx: add Toradex ecgpiol16 (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: use value returning setters (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-190842]
  - crypto: testmgr - Ignore EEXIST on shash allocation (Thomas Huth) [RHEL-153093]
  - crypto: api - Redo lookup on EEXIST (Thomas Huth) [RHEL-153093]
  - sched_ext: Convert scx_dump_state() spinlock to raw spinlock (Herton R. Krzesinski) [RHEL-184683]
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179292] {CVE-2026-46099}
  - dt-bindings: rtc: pcf85063: remove quartz-load-femtofarads restriction for nxp,pcf85063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: scope pcf85063_config structures (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: convert from round_rate() to determine_rate() (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: fix incorrect maximum clock rate handling (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: add support for RV8063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: create pcf85063_i2c_probe (CKI Backport Bot) [RHEL-190843]
  - dt-bindings: rtc: pcf85063: add binding for RV8063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: replace dev_err+return with return dev_err_probe (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: do a SW reset if POR failed (CKI Backport Bot) [RHEL-190843]
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188778] {CVE-2025-54518}
  - cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185959]
  - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189653] {CVE-2026-23110}
  - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-183433]
  - iommu: Warn on premature unblock during DMA aliased sibling reset (Eder Zulian) [RHEL-188931]
  - iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset (Eder Zulian) [RHEL-188931] {CVE-2026-52952}
  - iommu: Fix ATS invalidation timeouts during __iommu_remove_group_pasid() (Eder Zulian) [RHEL-188931]
  - iommu: Fix nested pci_dev_reset_iommu_prepare/done() (Eder Zulian) [RHEL-188931]
  - iommu: Fix pasid attach in pci_dev_reset_iommu_prepare/done() (Eder Zulian) [RHEL-188931]
  - iommu: Replace per-group resetting_domain with per-gdev blocked flag (Eder Zulian) [RHEL-188931]
  - iommu: Fix kdocs of pci_dev_reset_iommu_done() (Eder Zulian) [RHEL-188931]
  - iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() (Eder Zulian) [RHEL-188931]
  - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188552] {CVE-2026-53059}
  - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188465] {CVE-2026-53016}
  - crypto: qat - clear AES key schedule from stack (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - cancel work on re-enable SR-IOV timeout (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use 2-arg strscpy where destination size is known (Vladislav Dronov) [RHEL-115836]
  - PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - validate RSA CRT component lengths (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - simplify adf_service_mask_to_string helper (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add KPT support for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use pci logging variants for PCI-specific messages (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - protect service table iterations with service_lock (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix restarting state leak on allocation failure (Vladislav Dronov) [RHEL-115836]
  - Documentation: qat_rl: make rate limiting wording clearer (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - handle sysfs-triggered reset callbacks (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - factor out AER reset helpers (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - skip restart for down devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - centralize bus master enable (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - notify fatal error before AER reset preparation (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - keep VFs enabled during reset (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - remove MODULE_VERSION (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - rename adf_ctl_drv.c to adf_module.c (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - remove unused character device and IOCTLs (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix heartbeat error injection (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix IRQ cleanup on 6xxx probe failure (Vladislav Dronov) [RHEL-115836] {CVE-2026-46060}
  - crypto: qat - use swab32 macro (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - replace scnprintf() with sysfs_emit() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix type mismatch in RAS sysfs show functions (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix compression instance leak (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use acomp_tfm_ctx() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - disable 420xx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - disable 4xxx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add anti-rollback support for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add wireless mode support for QAT GEN6 (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix firmware loading failure for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix indentation of macros in qat_hal.c (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - Drop redundant local variables (Vladislav Dronov) [RHEL-115836]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [partial] (Vladislav Dronov) [RHEL-115836]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [partial] (Vladislav Dronov) [RHEL-115836]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [partial] (Vladislav Dronov) [RHEL-115836]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [partial] (Vladislav Dronov) [RHEL-115836]
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Vladislav Dronov) [RHEL-115836]
  - zstd: Import upstream v1.5.7 (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - convert to common field_get() helper (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - #undef field_get() before local definition (Vladislav Dronov) [RHEL-115836]
  - bitfield: Add non-constant field_{prep,get}() helpers (Vladislav Dronov) [RHEL-115836]
  - bitfield: Add less-checking __FIELD_{GET,PREP}() (Vladislav Dronov) [RHEL-115836]
  - bitfield: Ensure the return values of helper functions are checked (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - Remove dst_null support (Vladislav Dronov) [RHEL-115836]
  - qat: don't mess with ->d_name (Vladislav Dronov) [RHEL-115836]
  - lib/string_choices: Rearrange functions in sorted order (Vladislav Dronov) [RHEL-115836]
  - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178253]
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178253]
  - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178253] {CVE-2026-31635}
  - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-31633}
  - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-31632}
  - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178253] {CVE-2026-31631}
  - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178253] {CVE-2026-46039}
  - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178253] {CVE-2026-46085}
  - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-46012}
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178253]
  - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178253] {CVE-2026-43500}
  - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178253] {CVE-2026-46000}
  - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178253] {CVE-2026-31676}
  - Revert "Disable CET when calling tboot shutdown procedure." (Tony Camuso) [RHEL-177961]
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179862] {CVE-2026-46227}
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172678] {CVE-2026-43038}
  - efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175660]
  - workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175660]
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174199] {CVE-2026-43186}
  - redhat: disable XEN_PRIVCMD and XENFS (Vitaly Kuznetsov) [RHEL-172496] {CVE-2026-31788 CVE-2026-31787}
  - selftests: fib_nexthops: test stale has_v4 on nexthop replace (Guillaume Nault) [RHEL-152711]
  - nexthop: fix IPv6 route referencing IPv4 nexthop (Guillaume Nault) [RHEL-152711]
  - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() (Guillaume Nault) [RHEL-152711]
  - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (Guillaume Nault) [RHEL-152711]
  - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump (Guillaume Nault) [RHEL-152711]
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152711]
  - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152711]
  - net: ipv4: fix ARM64 alignment fault in multipath hash seed (Guillaume Nault) [RHEL-152711]
  - selftests: net: add ICMP error source address test over xfrm tunnel (Guillaume Nault) [RHEL-152711]
  - icmp: fix ICMP error source address when xfrm policy matches (Guillaume Nault) [RHEL-152711]
  - icmp: prevent possible overflow in icmp_global_allow() (Guillaume Nault) [RHEL-152711]
  - ping: annotate data-races in ping_lookup() (Guillaume Nault) [RHEL-152711]
  - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (Guillaume Nault) [RHEL-152711]
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152711]
  - inet: ping: Fix icmp out counting (Guillaume Nault) [RHEL-152711]
  - selftests: fib_nexthops: Add test cases for error routes deletion (Guillaume Nault) [RHEL-152711]
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152711]
  - inet: frags: flush pending skbs in fqdir_pre_exit() (Guillaume Nault) [RHEL-152711]
  - inet: frags: add inet_frag_queue_flush() (Guillaume Nault) [RHEL-152711]
  - inet: frags: avoid theoretical race in ip_frag_reinit() (Guillaume Nault) [RHEL-152711]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168076] {CVE-2026-31419}
  - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names (David Thompson) [RHEL-167064]
  - page_pool: store detach_time as ktime_t to avoid false-negatives (Paolo Abeni) [RHEL-152734]
  - net: Fix rcu_tasks stall in threaded busypoll (Paolo Abeni) [RHEL-152734]
  - net: consume xmit errors of GSO frames (Paolo Abeni) [RHEL-152734]
  - net: Drop the lock in skb_may_tx_timestamp() (Paolo Abeni) [RHEL-152734]
  - net: remove WARN_ON_ONCE when accessing forward path array (Paolo Abeni) [RHEL-152734]
  - net: gro: fix outer network offset (Paolo Abeni) [RHEL-152734]
  - net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152734]
  - linkwatch: use __dev_put() in callers to prevent UAF (Paolo Abeni) [RHEL-152734]
  - net: fix segmentation of forwarding fraglist GRO (Paolo Abeni) [RHEL-152734]
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Paolo Abeni) [RHEL-152734]
  - net: update netdev_lock_{type,name} (Paolo Abeni) [RHEL-152734]
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates (Paolo Abeni) [RHEL-152734]
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152734]
  - net: gro: clear skb_shinfo(skb)->hwtstamps in napi_reuse_skb() (Paolo Abeni) [RHEL-152734]
  - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS (Paolo Abeni) [RHEL-152734]
  - net: dst_metadata: fix IP_DF bit not extracted from tunnel headers (Paolo Abeni) [RHEL-152734]
  - netlink: support dumping IPv4 multicast addresses (Hangbin Liu) [RHEL-123730]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-252.el10]
changelog:
  - Revert "selftests/pidfd: add tests for PIDFD_SELF_*" (John J Coleman) [RHEL-214159]
  - Revert "selftests/mm: Use PKEY_UNRESTRICTED macro" (John J Coleman) [RHEL-214159]
  - Revert "selftests/powerpc: Use PKEY_UNRESTRICTED macro" (John J Coleman) [RHEL-214159]
  - Revert "selftest/powerpc/mm/pkey: fix build-break introduced by commit 00894c3fc917" (John J Coleman) [RHEL-214159]
  - Revert "selftests/mm: fix faulting-in code in pagemap_ioctl test" (John J Coleman) [RHEL-214159]
  - Bluetooth: btusb: MT7925: Add VID/PID 13d3/3609 (Jiri Benc) [RHEL-191262]
  - redhat/configs: enable CONFIG_SERIAL_8250_MT6577 (Jiri Benc) [RHEL-191347]
  - serial: 8250_mtk: Add ACPI support (Jiri Benc) [RHEL-191347]
  - serial: 8250_mtk: Enable baud clock and manage in runtime PM (Jiri Benc) [RHEL-191347]
  - serial: 8250_platform: Remove unneeded ->iotype assignment (Jiri Benc) [RHEL-191347]
  - usb: typec: ucsi: skip connector validation before init (Desnes Nunes) [RHEL-147800]
  - usb: host: xhci-sideband: delegate offload_usage tracking to class drivers (Desnes Nunes) [RHEL-147800]
  - usb: core: use dedicated spinlock for offload state (Desnes Nunes) [RHEL-147800]
  - usb: cdns3: gadget: fix state inconsistency on gadget init failure (Desnes Nunes) [RHEL-147800] {CVE-2026-31754}
  - usb: dwc3: imx8mp: fix memory leak on probe failure path (Desnes Nunes) [RHEL-147800]
  - usb: ulpi: fix memory leak on ulpi_register() error paths (Desnes Nunes) [RHEL-147800] {CVE-2026-46109}
  - usb: ulpi: fix double free in ulpi_register_interface() error path (Desnes Nunes) [RHEL-147800] {CVE-2026-31759}
  - usb: misc: usbio: Fix URB memory leak on submit failure (Desnes Nunes) [RHEL-147800] {CVE-2026-31757}
  - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (Desnes Nunes) [RHEL-147800]
  - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue (Desnes Nunes) [RHEL-147800] {CVE-2026-31755}
  - usb: core: phy: avoid double use of 'usb3-phy' (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add MeiG Smart SRM825WN (Desnes Nunes) [RHEL-147800]
  - dt-bindings: connector: add pd-disable dependency (Desnes Nunes) [RHEL-147800]
  - usb: typec: thunderbolt: Set enter_vdo during initialization (Desnes Nunes) [RHEL-147800]
  - usb: typec: Remove alt->adev.dev.class assignment (Desnes Nunes) [RHEL-147800]
  - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() (Desnes Nunes) [RHEL-147800] {CVE-2026-31756}
  - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Desnes Nunes) [RHEL-147800]
  - cdc-acm: new quirk for EPSON HMD (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: validate connector number in ucsi_notify_common() (Desnes Nunes) [RHEL-147800] {CVE-2026-31729}
  - usb: usbtmc: Flush anchored URBs in usbtmc_release (Desnes Nunes) [RHEL-147800] {CVE-2026-31758}
  - USB: serial: io_edgeport: add support for Blackbox IC135A (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add support for Rolling Wireless RW135R-GL (Desnes Nunes) [RHEL-147800]
  - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed (Desnes Nunes) [RHEL-147800]
  - usb: roles: get usb role switch from parent only for usb-b-connector (Desnes Nunes) [RHEL-147800]
  - Revert "tcpm: allow looking for role_sw device in the main node" (Desnes Nunes) [RHEL-147800]
  - usb: typec: altmode/displayport: set displayport signaling rate in configure message (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: pci: add support for the Intel Nova Lake -H (Desnes Nunes) [RHEL-147800]
  - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Desnes Nunes) [RHEL-147800]
  - usb: xhci: Prevent interrupt storm on host controller error (HCE) (Desnes Nunes) [RHEL-147800] {CVE-2026-43488}
  - usb: xhci: Fix memory leak in xhci_disable_slot() (Desnes Nunes) [RHEL-147800] {CVE-2026-43432}
  - usb: class: cdc-wdm: fix reordering issue in read code path (Desnes Nunes) [RHEL-147800] {CVE-2026-43427}
  - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Desnes Nunes) [RHEL-147800]
  - usb: core: new quirk to handle devices with zero configurations (Desnes Nunes) [RHEL-147800]
  - usb: misc: uss720: properly clean up reference in uss720_probe() (Desnes Nunes) [RHEL-147800]
  - USB: core: Limit the length of unkillable synchronous timeouts (Desnes Nunes) [RHEL-147800] {CVE-2026-43428}
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Desnes Nunes) [RHEL-147800] {CVE-2026-43429}
  - USB: usbcore: Introduce usb_bulk_msg_killable() (Desnes Nunes) [RHEL-147800]
  - usb: core: don't power off roothub PHYs if phy_set_mode() fails (Desnes Nunes) [RHEL-147800]
  - thunderbolt: Fix property read in nhi_wake_supported() (Desnes Nunes) [RHEL-147800]
  - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size (Desnes Nunes) [RHEL-147800]
  - usbnet: limit max_mtu based on device's hard_mtu (Desnes Nunes) [RHEL-147800]
  - net: usb: r8152: add TRENDnet TUC-ET2G (Desnes Nunes) [RHEL-147800]
  - usb: image: mdc800: kill download URB on timeout (Desnes Nunes) [RHEL-147800] {CVE-2026-43425}
  - usb: mdc800: handle signal and read racing (Desnes Nunes) [RHEL-147800]
  - USB: add QUIRK_NO_BOS for video capture several devices (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: Add Thunderbolt alternate mode support (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: parametrize PORTSC1 register offset (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: parametrize HSIC PTS value (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: return error value from utmi_wait_register (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: cosmetic fixes (Desnes Nunes) [RHEL-147800]
  - usb: dwc2: fix resume failure if dr_mode is host (Desnes Nunes) [RHEL-147800]
  - usb: cdns3: fix role switching during resume (Desnes Nunes) [RHEL-147800] {CVE-2026-45911}
  - usb: dwc3: gadget: Move vbus draw to workqueue context (Desnes Nunes) [RHEL-147800] {CVE-2026-43170}
  - phy: tegra: xusb: Remove unused powered_on variable (Desnes Nunes) [RHEL-147800]
  - net: usb: introduce usbnet_mii_ioctl helper function (Desnes Nunes) [RHEL-147800]
  - net: usb: remove unnecessary get_drvinfo code and driver versions (Desnes Nunes) [RHEL-147800]
  - net: usb: replace unnecessary get_link functions with usbnet_get_link (Desnes Nunes) [RHEL-147800]
  - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock (Desnes Nunes) [RHEL-147800] {CVE-2025-40120}
  - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization (Desnes Nunes) [RHEL-147800] {CVE-2025-38736}
  - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (Desnes Nunes) [RHEL-147800] {CVE-2025-38725}
  - usbnet: asix AX88772: leave the carrier control to phylink (Desnes Nunes) [RHEL-147800]
  - docs: fix 're-use' -> 'reuse' in documentation (Desnes Nunes) [RHEL-147800]
  - thermal/qcom/lmh: Replace IRQF_ONESHOT with IRQF_NO_THREAD (Desnes Nunes) [RHEL-147800]
  - char: tpm: cr50: Remove IRQF_ONESHOT (Desnes Nunes) [RHEL-147800]
  - usb: typec: fusb302: Remove IRQF_ONESHOT (Desnes Nunes) [RHEL-147800]
  - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add Telit FN920C04 RNDIS compositions (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: Log dwc3 address in traces (Desnes Nunes) [RHEL-147800]
  - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: add HSIC support (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: use phy type directly (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: Support mode selection to activate altmodes (Desnes Nunes) [RHEL-147800]
  - usb: typec: Introduce mode_selection bit (Desnes Nunes) [RHEL-147800]
  - usb: typec: Implement mode selection (Desnes Nunes) [RHEL-147800]
  - usb: typec: Expose alternate mode priority via sysfs (Desnes Nunes) [RHEL-147800]
  - usb: typec: Add mode_control field to port property (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Convert to device property API (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Convert to dev_err_probe() (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Convert to devm_clk_get_optional() (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Always use dev in usb_phy_generic_probe() (Desnes Nunes) [RHEL-147800]
  - usbip: Reduce CONNRESET message noise in dmesg from stub (Desnes Nunes) [RHEL-147800]
  - tools: usb: usbip: remove dead-link from README (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: allow setting manufacturer string through sysfs (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: allow setting product string through sysfs (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: allow setting device serial number through sysfs (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: prepare to expose strings through sysfs (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: renesas,usb2-phy: Document mux-states property (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: renesas,usb2-phy: Document USB VBUS regulator (Desnes Nunes) [RHEL-147800]
  - phy: fsl-imx8mq-usb: enable RX Termination override (Desnes Nunes) [RHEL-147800]
  - phy: fsl-imx8mq-usb: set platform driver data (Desnes Nunes) [RHEL-147800] {CVE-2026-43259}
  - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature (Desnes Nunes) [RHEL-147800]
  - net: thunderbolt: Allow reading link settings (Desnes Nunes) [RHEL-147800]
  - bonding: 3ad: Add support for SPEED_80000 (Desnes Nunes) [RHEL-147800]
  - net: thunderbolt: Allow changing MAC address of the device (Desnes Nunes) [RHEL-147800]
  - usb: misc: onboard_dev: Add WCH CH334 USB2.0 Hub (1a86:8091) (Desnes Nunes) [RHEL-147800]
  - dt-bindings: usb: Add binding for WCH CH334/CH335 hub controller (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: Add dwc pointer to dwc3_readl/writel (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: Remove of dep->regs (Desnes Nunes) [RHEL-147800]
  - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (Desnes Nunes) [RHEL-147800] {CVE-2026-43250}
  - usb: chipidea: ci_hdrc_imx: use "wakeup" suffix for wakeup interrupt name (Desnes Nunes) [RHEL-147800]
  - USB: HCD: remove logic about which hcd is loaded (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: imx8mp: disable auto suspend for host role (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: imx8mp: rename dwc3 to dwc3_pdev in struct dwc3_imx8mp (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: imx8mp: fix device leak at unbind (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: drd: extend dwc3_pre_set_role() to extcon and otg usecase (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-combo: Add polarity inversion support for SAR2130P (Desnes Nunes) [RHEL-147800]
  - USB: core: Discard pm_runtime_put() return value (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: drop an unused Kconfig symbol (Desnes Nunes) [RHEL-147800]
  - USB: host: drop unneeded dependency on OF_GPIO (Desnes Nunes) [RHEL-147800]
  - usb: isp1362-hcd: remove Philips ISP1362 USB OTG controller driver (Desnes Nunes) [RHEL-147800]
  - USB: typec: tcpm: Fix a typo (Desnes Nunes) [RHEL-147800]
  - thunderbolt: Log path activation failures without WARN backtraces (Desnes Nunes) [RHEL-147800]
  - phy: core: Simplify with scoped for each OF child loop (Desnes Nunes) [RHEL-147800]
  - phy: core: Reinstate pm_runtime_enabled() check in phy_pm_runtime_put() (Desnes Nunes) [RHEL-147800]
  - docs: admin-guide: thunderbolt: Replace ifconfig with ip (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: qmp-combo: Add DP offsets and settings for Glymur platforms (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: qmp-combo: Update QMP PHY with Glymur settings (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: Update the QMP clamp register for V6 (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: qmp-usb: Add support for Glymur USB UNI PHY (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: qcom,qmp-usb: Add Glymur USB UNI PHY compatible (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp-phy: Add Glymur compatible (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add QCS615 USB/DP PHY config and DP mode support (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp: Add DP v2 PHY register definitions (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add USB/DP exclude handling (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add DP PHY ops for USB/DP switchable Type-C PHYs (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add TCSR parsing and PHY mode setting (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Move USB-only init to usb_power_on (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: add DP link and vco_div clocks for DP PHY (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Move reset config into PHY cfg (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add regulator init_load support (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add DP-related fields for USB/DP switchable PHY (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Rename USB-specific ops to prepare for DP support (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: Add QMP USB3+DP PHY for QCS615 (Desnes Nunes) [RHEL-147800]
  - phy: fsl-imx8mq-usb: change ssc_range value for i.MX8MQ (Desnes Nunes) [RHEL-147800]
  - phy: core: Discard pm_runtime_put() return values (Desnes Nunes) [RHEL-147800]
  - usb: gadget: Constify struct configfs_item_operations and configfs_group_operations (Desnes Nunes) [RHEL-147800]
  - configfs: Constify ct_item_ops in struct config_item_type (Desnes Nunes) [RHEL-147800]
  - configfs: Constify ct_group_ops in struct config_item_type (Desnes Nunes) [RHEL-147800]
  - usb: linux/usb.h: Correct the description of the usb_device_driver member (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: psy: Fix ucsi_psy_get_current_now in non-PD cases (Desnes Nunes) [RHEL-147800]
  - dt-bindings: usb: ehci/ohci: Allow "dma-coherent" (Desnes Nunes) [RHEL-147800]
  - usb: typec: Export typec bus and typec altmode device type (Desnes Nunes) [RHEL-147800]
  - usb: typec: Set the bus also for the port and plug altmodes (Desnes Nunes) [RHEL-147800]
  - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (Jaroslav Kysela) [RHEL-180892]
  - ACPI: bus: Fix MFD child automatic modprobe issue (Mark Langsdorf) [RHEL-173575]
  - ACPI: video: Switch over to auxiliary bus type (Mark Langsdorf) [RHEL-173575]
  - ACPI: video: Convert the driver to a platform one (Mark Langsdorf) [RHEL-173575]
  - iommupt: Fixup build warning by using BIT_ULL() for RISCVPT_NC/IO (Jennifer Berringer) [RHEL-174808]
  - iommupt: Encode IOMMU_MMIO/IOMMU_CACHE via RISC-V Svpbmt bits (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Advertise Svpbmt support to generic page table (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add ACPI support (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Remove overflows on the invalidation path (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Fix signedness bug (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Stop polling when CQCSR reports an error (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Allow RISC_VIOMMU to COMPILE_TEST (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add missing GENERIC_MSI_IRQ (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Enable SVNAPOT support for contiguous ptes (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Use the generic iommu page table (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Disable SADE (Jennifer Berringer) [RHEL-174808]
  - iommupt: Add the RISC-V page table format (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Skip IRQ count check when using MSI interrupts (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add IOTINVAL after updating DDT/PDT entries (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Simplify maximum determination in riscv_iommu_init_check() (Jennifer Berringer) [RHEL-174808]
  - iommu: make inclusion of riscv directory conditional (Jennifer Berringer) [RHEL-174808]
  - iommu: Pass in old domain to attach_dev callback functions (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: prevent NULL deref in iova_to_phys (Jennifer Berringer) [RHEL-174808] {CVE-2025-39699}
  - iommu: Remove ops.pgsize_bitmap from drivers that don't use it (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Update to use iommu_alloc_pages_node_lg2() (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Convert to use struct iommu_pages_list (Jennifer Berringer) [RHEL-174808]
  - iommu/pages: Remove iommu_free_page() (Jennifer Berringer) [RHEL-174808]
  - iommu/pages: Remove iommu_alloc_page_node() (Jennifer Berringer) [RHEL-174808]
  - iommu/pages: Remove the order argument to iommu_free_pages() (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Fixup compile warning (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add shutdown function for iommu driver (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Empty iommu queue before enabling it (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add support for platform msi (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Paging domain support (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Command and fault queue support (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Device directory management. (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Enable IOMMU registration and device probe. (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add RISC-V IOMMU PCIe device driver (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add RISC-V IOMMU platform device driver (Jennifer Berringer) [RHEL-174808]
  - redhat/configs: Enable RISC-V IOMMU (Jennifer Berringer) [RHEL-174808]
  - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Xin Long) [RHEL-152730]
  - sctp: disable BH before calling udp_tunnel_xmit_skb() (Xin Long) [RHEL-152730]
  - sctp: fix missing encap_port propagation for GSO fragments (Xin Long) [RHEL-152730]
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (Xin Long) [RHEL-152730]
  - scsi: megaraid_sas: Fix NULL pointer dereference on firmware duplicate completion (Chandrakanth Patil) [RHEL-141214]
  - scsi: megaraid_sas: Protect more code with instance->reset_mutex (Chandrakanth Patil) [RHEL-141214]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-253.el10]
changelog:
  - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214083] {CVE-2026-64530}
  - x86/fpu: Ensure XFD state on signal delivery (Steve Best) [RHEL-213537]
  - platform/x86: intel-hid: Protect ACPI notify handler against recursion (Steve Best) [RHEL-213294]
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Dennis Chen) [RHEL-212108]
  - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189556] {CVE-2025-68211}
  - i2c: i801: fix hardware state machine corruption in error path (Steve Best) [RHEL-212367]
  - gitlab-ci: enable riscv64 builds for c10s and rhel10 (Michael Krausch-Hofmann)
  - pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: eint: Drop base from mtk_eint_chip_write_mask() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: make devm allocations safer and clearer in mtk_eint_do_init() (Jiri Benc) [RHEL-191293]
  - pinctrl: Use dev_fwnode() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: paris: use new GPIO line value setter callbacks (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: paris: don't double-check the GPIO number (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: common-v1: Fix error checking in mtk_eint_init() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Fix new design debounce issue (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: common-v1: Fix EINT breakage on older controllers (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Fix the invalid conditions (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Add EINT support for multiple addresses (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Drop mtk_pinconf_bias_set_pd() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: add support for MTK_PULL_PD_TYPE (Jiri Benc) [RHEL-191293]
  - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() (Steve Best) [RHEL-211103]
  - cpufreq: intel_pstate: Sync policy->cur during CPU offline (Steve Best) [RHEL-210859]
  - platform/x86/amd/hsmp: Clamp ioctl/send_message indices (Spectre v1) (Steve Best) [RHEL-208745]
  - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193944]
  - KVM: s390: Fix S390_USER_OPEREXEC enablement without STFLE 74 (Christoph Schlameuss) [RHEL-158929]
  - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189666] {CVE-2026-23199}
  - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189666] {CVE-2026-23199}
  - i2c: tegra: Fix NOIRQ suspend/resume (Charles Mirabile) [RHEL-174252]
  - i2c: tegra: Update Tegra410 I2C timing parameters (Charles Mirabile) [RHEL-174252]
  - i2c: tegra: Disable fair arbitration for non-MCTP buses (Charles Mirabile) [RHEL-174252]
  - i2c: tegra: use dmaengine_get_dma_device() for DMA buffer allocation (Charles Mirabile) [RHEL-174252]
  - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187413] {CVE-2026-46303}
  - intel_idle: Add Panther Lake C-states table (Steve Best) [RHEL-185572]
  - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-183882]
  - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183882]
  - tools/power/x86/intel-speed-select: Fix output when running on unsupported CLX platforms (Steve Best) [RHEL-184884]
  - tools/power/x86/intel-speed-select: Fix some program return value (Steve Best) [RHEL-184884]
  - tools/power/x86/intel-speed-select: Fix cpu extended family ID decoding (Steve Best) [RHEL-184884]
  - platform/x86/intel/tpmi/plr: Prevent fault during unbind (Steve Best) [RHEL-182358]
  - Revert "Drivers: hv: Add CONFIG_HYPERV_VMBUS option" (Karol Herbst) [RHEL-170737]
  - Revert "drm/i915: Use preempt_disable/enable_rt() where recommended" (Karol Herbst) [RHEL-170737]
  - Revert "drm/gem: fix build for mm_get_unmapped_area() call after backmerge" (Karol Herbst) [RHEL-170737]
  - Partiall revert "mm: update shmem_[kernel]_file_*() functions to use vma_flags_t" (Karol Herbst) [RHEL-170737]
  - drm: add 4th argument to vfs_parse_fs_string calls (Karol Herbst) [RHEL-170737]
  - redhat/configs: Add new configs from DRM 7.0 backport (Karol Herbst) [RHEL-170737]
  - Merge DRM changes from upstream v6.19..v7.0 (Karol Herbst) [RHEL-170737]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-254.el10]
changelog:
  - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212683]
  - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169468]
  - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169468]
  - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169468]
  - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172539] {CVE-2026-31692}
  - KVM: selftests: access_tracking_perf_test: bump number of NUMA nodes to 32 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rate-limit global clock updates on vCPU load (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fix ERAPS RAP clear on INVPCID single-context invalidation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Swap the dst and src operand for MOVNTDQA (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Ensure gmem file sizes are multiple of host page size (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Fix reserved value WRMSR testcase for multi-feature MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Verify SEV+ guests can read and write EFER, CR0, CR4, and CR8 (Maxim Levitsky) [RHEL-151869]
  - Documentation: kvm: fix formatting of the quirks table (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: clarify leave_smm() return value (Maxim Levitsky) [RHEL-151869]
  - selftests: kvm: add a test that VMX validates controls on RSM (Maxim Levitsky) [RHEL-151869]
  - selftests: kvm: extract common functionality out of smm_test.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: check validity of VMCB controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: check validity of VMCS controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fix SRCU list traversal in kvm_fire_mask_notifiers() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Fix a wrong MSR update in add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: synthesize CPUID bits only if CPU capability is set (Maxim Levitsky) [RHEL-151869]
  - KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add x2APIC "features" to control EOI broadcast suppression (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Harden against unexpected adjustments to kvm_cpu_caps (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise AVX10_VNNI_INT CPUID to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise AVX10.2 CPUID to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise AMX CPUIDs in subleaf 0x1E.0x1 to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise MOVRS CPUID to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Maxim Levitsky) [RHEL-151869]
  - KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Test READ=>WRITE dirty logging behavior for shadow MMU (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Print out "bad" offsets+value on VMCS config mismatch (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Remove explicit filtering of GUEST_INTR_STATUS from shadow VMCS fields (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Disallow access to vmcs12 fields that aren't supported by "hardware" (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add a wrapper around ROL16() to get a vmcs12 from a field encoding (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Setup VMX MSRs on loading CPU during nested_vmx_hardware_setup() (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: GUP source pages prior to populating guest memory (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Document alignment requirements for KVM_TDX_INIT_MEM_REGION (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Document/enforce page-alignment for KVM_SEV_SNP_LAUNCH_UPDATE (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Remove preparation tracking (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Remove partial hugepage handling from kvm_gmem_populate() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a selftests for nested VMLOAD/VMSAVE (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Stop toggling virtual VMSAVE/VMLOAD on intercept recalc (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Don't register posted interrupt wakeup handler if alloc_kvm_area() fails (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Drop redundant/wrong comment in nested_vmcb02_prepare_save() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Slightly simplify memstress_setup_nested() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Remove declaration of nested_mark_vmcs12_pages_dirty() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Assert that Hyper-V's HV_SVM_EXITCODE_ENL == SVM_EXIT_SW (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Harden exit_code against being used in Spectre-like attacks (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Limit incorrect check on SVM_EXIT_ERR to running as a VM (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Treat exit_code as an unsigned 64-bit value through all of KVM (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Filter out 64-bit exit codes when invoking exit handlers on bare metal (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Check for an unexpected VM-Exit after RETPOLINE "fast" handling (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Open code handling of unexpected exits in svm_invoke_exit_handler() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add a helper to detect VMRUN failures (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: align the code with kvm_x86_call() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Tag sev_supported_vmsa_features as read-only after init (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Drop the module param to control SEV-ES DebugSwap (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Update APICv ISR (a.k.a. SVI) as part of kvm_apic_update_apicv() (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to set virtual APICv mode on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update APIC page on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to refresh APICv controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update SVI on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update TPR threshold on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update PML controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a test to verify APICv updates (while L2 is active) (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Fix a missing kunmap_local() in sev_gmem_post_populate() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Hide KVM_IRQCHIP_KERNEL behind CONFIG_KVM_IOAPIC=y (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Bury ioapic.h definitions behind CONFIG_KVM_IOAPIC (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fold "struct dest_map" into "struct rtc_status" (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a wrapper to handle common case of IRQ delivery without dest_map (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop MAX_NR_RESERVED_IOAPIC_PINS, use KVM_MAX_IRQ_ROUTES directly (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop guest-triggerable ASSERT()s on I/O APIC access alignment (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop ASSERT() on I/O APIC EOIs being only for LEVEL_to WARN_ON_ONCE (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop guest/user-triggerable asserts on IRR/ISR vectors (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop ASSERT()s on APIC/vCPU being non-NULL (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_set_nested_state_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use TEST_ASSERT_EQ() in test_vmx_nested_state() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Allow KVM_SET_NESTED_STATE to clear GIF when SVME==0 (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't set GIF when clearing EFER.SVME (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Virtualize and advertise support for ERAPS (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't allow L1 intercepts for instructions not advertised (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add support for expedited writes to the fast MMIO bus (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Rename "fault_address" to "gpa" in npf_interception() (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't read guest CR3 when doing async pf while the MMU is direct (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Rename vm_get_page_table_entry() to vm_get_pte() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend memstress to run on nested SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_dirty_log_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Set the user bit on nested NPT PTEs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add support for nested NPTs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Allow kvm_cpu_has_ept() to be called on AMD CPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Move TDP mapping functions outside of vmx.c (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Reuse virt mapping functions for nested EPTs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a stage-2 MMU instance to kvm_vm (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop passing VMX metadata to TDP mapping functions (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use a TDP MMU to share EPT page tables between vCPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Move PTE bitmasks to kvm_mmu (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a "struct kvm_mmu_arch arch" member to kvm_mmu (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Plumb "struct kvm_mmu" into x86's MMU APIs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add "struct kvm_mmu" to track a given MMU instance (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop setting A/D bits when creating EPT PTEs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Kill eptPageTablePointer (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Rename nested TDP mapping functions (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop passing a memslot to nested_map_memslot() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Make __vm_get_page_table_entry() static (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Fix sign extension bug in get_desc64_base() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Mark APIC access page dirty when syncing vmcs12 pages (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Move nested_mark_vmcs12_pages_dirty() to vmx.c, and rename (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Precisely mark vAPIC and PID maps dirty when delivering nested PI (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Mark vmcs12 pages as dirty if and only if they're mapped (Maxim Levitsky) [RHEL-151869]
  - KVM: Use vCPU specific memslots in __kvm_vcpu_map() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add mediated PMU support for CPUs without "save perf global ctrl" (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Initialize vmcs01.VM_EXIT_MSR_STORE_ADDR with list address (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Dedup code for adding MSR to VMCS's auto list (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Compartmentalize adding MSRs to host vs. guest auto-load list (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Set MSR index auto-load entry if and only if entry is "new" (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Bug the VM if either MSR auto-load list is full (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Drop unused @entry_only param from add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Dedup code for removing MSR from VMCS's auto-load list (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Don't update msr_autostore count when saving TSC for vmcs12 (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Drop intermediate "guest" field from msr_autostore (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Elide WRMSRs when loading guest PMCs if values already match (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Expose enable_mediated_pmu parameter to user space (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add macros to simplify nested MSR interception setting (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Handle emulated instruction for mediated vPMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Disallow emulation in the fastpath if mediated PMCs are active (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Load/put mediated PMU context when entering/exiting guest (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Always stuff GuestOnly=1,HostOnly=0 for mediated PMCs on AMD (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Reprogram mediated PMU event selectors on event filter updates (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Introduce eventsel_hw to prepare for pmu event filtering (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Bypass perf checks when emulating mediated PMU counter accesses (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Disable interception of select PMU MSRs for mediated vPMUs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Load/save GLOBAL_CTRL via entry/exit fields for mediated PMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Disable RDPMC interception for compatible mediated vPMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Register PMI handler for mediated vPMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Implement AMD mediated PMU requirements (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Implement Intel mediated PMU requirements and constraints (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Start stubbing in mediated PMU support (Maxim Levitsky) [RHEL-151869]
  - KVM: Add a simplified wrapper for registering perf callbacks (Maxim Levitsky) [RHEL-151869]
  - perf: Use EXPORT_SYMBOL_FOR_KVM() for the mediated APIs (Maxim Levitsky) [RHEL-151869]
  - perf: Clean up mediated vPMU accounting (Maxim Levitsky) [RHEL-151869]
  - perf/x86/amd: Support PERF_PMU_CAP_MEDIATED_VPMU for AMD host (Maxim Levitsky) [RHEL-151869]
  - perf/x86/intel: Support PERF_PMU_CAP_MEDIATED_VPMU (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Plumb mediated PMU capability from x86_pmu to x86_pmu_cap (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Do not set bit width for unavailable counters (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Add APIs to switch to/from mediated PMI vector (for KVM) (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Register a new vector for handling mediated guest PMIs (Maxim Levitsky) [RHEL-151869]
  - perf: Add APIs to load/put guest mediated PMU context (Maxim Levitsky) [RHEL-151869]
  - perf: Add a EVENT_GUEST flag (Maxim Levitsky) [RHEL-151869]
  - perf: Clean up perf ctx time (Maxim Levitsky) [RHEL-151869]
  - perf: Add APIs to create/release mediated guest vPMUs (Maxim Levitsky) [RHEL-151869]
  - perf: Move security_perf_event_free() call to __free_event() (Maxim Levitsky) [RHEL-151869]
  - perf: Add generic exclude_guest support (Maxim Levitsky) [RHEL-151869]
  - perf: Skip pmu_ctx based on event_type (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Always reflect SGX EPCM #PFs back into the guest (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Test TPR / CR8 sync and interrupt masking (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Disallow setting CPUID and/or feature MSRs if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Assert that non-MSI doesn't have bypass vCPU when deleting producer (Maxim Levitsky) [RHEL-151869]
  - KVM: Don't clobber irqfd routing type when deassigning irqfd (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Check vCPU ID against max x2AVIC ID if and only if x2AVIC is enabled (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Update SVI during runtime APICv activation (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits (Maxim Levitsky) [RHEL-151869]
  - KVM: Harden and prepare for modifying existing guest_memfd memslots (Maxim Levitsky) [RHEL-151869]
  - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a CPUID testcase for KVM_SET_CPUID2 with runtime updates (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Make sure vm->vpages_mapped is always up-to-date (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop using __virt_pg_map() directly in tests (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a VMX test for LA57 nested state (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Change VM_MODE_PXXV48_4K to VM_MODE_PXXVYY_4K (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use a loop to walk guest page tables (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use a loop to create guest page tables (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Remove the unused argument to prepare_eptp() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop hardcoding PAGE_SIZE in x86 selftests (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_tsc_adjust_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend nested_invalid_cr3_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Move nested invalid CR3 check to its own test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_nested_tsc_scaling_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_close_while_nested_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Remove unused declaration kvm_mmu_may_ignore_guest_pat() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Enable support for emulating AVX MOV instructions (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add emulator support for decoding VEX prefixes (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Refactor REX prefix handling in instruction emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add AVX support to the emulator's register fetch and writeback (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add x86_emulate_ops.get_xcr() callback (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Share emulator's common register decoding code (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Move op_prefix to struct x86_emulate_ctxt (from x86_decode_insn()) (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Improve formatting of the emulator's flags table (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Move Src2Shift up one bit (use bits 36:32 for Src2 in the emulator) (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add support for emulating MOVNTDQA (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a helper to dedup loading guest/host XCR0 and XSS (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Load guest/host PKRU outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Load guest/host XCR0 and XSS outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Handle #MCs on VM-Enter/TD-Enter outside of the fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Handle #MCs in guest outside of fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unify L1TF flushing under per-CPU variable (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Disable L1TF L1 data cache flush if CONFIG_CPU_MITIGATIONS=n (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Bundle all L1 data cache flush mitigation code together (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: KVM: Move VM_CLEAR_CPU_BUFFERS into SVM as SVM_CLEAR_CPU_BUFFERS (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Handle MMIO Stale Data in VM-Enter assembly via ALTERNATIVES_2 (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Use an x86 feature to track the MMIO Stale Data mitigation (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Decouple ALTERNATIVE usage from VERW macro definition (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Use VM_CLEAR_CPU_BUFFERS in VMX as well (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Use on-stack copy of @flags in __vmx_vcpu_run() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Allocate/free user_return_msrs at kvm.ko (un)loading time (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: remove comment about ntp correction sync for (Maxim Levitsky) [RHEL-151869]
  - Revert "x86: kvm: rate-limit global clock updates" (Maxim Levitsky) [RHEL-151869]
  - Revert "x86: kvm: introduce periodic global clock updates" (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Grab lapic_timer in a local variable to cleanup periodic code (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use "checked" versions of get_user() and put_user() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Add known supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Publish supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
  - crypto: ccp - Add an API to return the supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Consolidate the SEV policy bits in a single header file (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Document a virtualization gap for GIF on AMD CPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Drop unnecessary export of "x86_spec_ctrl_base" (Maxim Levitsky) [RHEL-151869]
  - x86/mtrr: Drop unnecessary export of "mtrr_state" (Maxim Levitsky) [RHEL-151869]
  - x86/mm: Drop unnecessary export of "ptdump_walk_pgd_level_debugfs" (Maxim Levitsky) [RHEL-151869]
  - x86: Restrict KVM-induced symbol exports to KVM modules where obvious/possible (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Make loaded_vmcs_clear() static in vmx.c (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't disable IRQs when unregistering user-return notifier (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Leave user-return notifier registered on reboot/shutdown (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: WARN if user-return MSR notifier is registered on exit (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Explicitly set user-return MSRs that *may* be clobbered by the TDX-Module (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Ensure SPEC_CTRL[63:32] is context switched between guest and host (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Ensure guest's SPEC_CTRL[63:32] is loaded on VM-Enter (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Remove redundant cases in nested_svm_intercept() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Use struct_size to simplify tdx_get_capabilities() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Check size of user's kvm_tdx_capabilities array before allocating (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fix sparse warnings from using 0 for NULL (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Remove __user annotation from kernel pointer (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Take MMU lock around tdh_vp_init() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fix list_add corruption during vcpu_load() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Bug the VM if extending the initial measurement fails (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Guard VM state transitions with "all" the locks (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Don't copy "cmd" back to userspace for KVM_TDX_CAPABILITIES (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Use guard() to acquire kvm->lock in tdx_vm_ioctl() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Convert INIT_MEM_REGION and INIT_VCPU to "unlocked" vCPU ioctl (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Add tdx_get_cmd() helper to get and validate sub-ioctl command (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Add macro to retry SEAMCALLs when forcing vCPUs out of guest (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Assert that mmu_lock is held for write when removing S-EPT entries (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Derive error argument names from the local variable names (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Combine KVM_BUG_ON + pr_tdx_error() into TDX_BUG_ON() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fold tdx_sept_zap_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: ADD pages to the TD image while populating mirror EPT entries (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fold tdx_mem_page_record_premap_cnt() into its sole caller (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Use atomic64_dec_return() instead of a poor equivalent (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Avoid a double-KVM_BUG_ON() in tdx_sept_zap_private_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: WARN if mirror SPTE doesn't have full RWX when creating S-EPT mapping (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Drop the return code from kvm_x86_ops.remove_external_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fold tdx_sept_drop_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Return -EIO, not -EINVAL, on a KVM_BUG_ON() condition (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Drop superfluous page pinning in S-EPT management (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Rename kvm_tdp_map_page() to kvm_tdp_page_prefault() (Maxim Levitsky) [RHEL-151869]
  - Revert "KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU" (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: WARN if KVM attempts to map into an invalid TDP MMU root (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Add dedicated API to map guest_memfd pfn into TDP MMU (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Drop PROVE_MMU=y sanity check on to-be-populated mappings (Maxim Levitsky) [RHEL-151869]
  - KVM: Rename kvm_arch_vcpu_async_ioctl() to kvm_arch_vcpu_unlocked_ioctl() (Maxim Levitsky) [RHEL-151869]
  - KVM: Make support for kvm_arch_vcpu_async_ioctl() mandatory (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Move the misplaced export of kvm_zap_gfn_range() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a helper to dedup reporting of unhandled VM-Exits (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Rename "guest_paddr" variables to "gpa" (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use "gpa" and "gva" for local variable names in pre-fault test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Forcefully override ARCH from x86_64 to x86 (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Don't fall over in mmu_stress_test when only one CPU is present (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Define a CLASS to get+put guest_memfd file from a memslot (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Add gmem_inode.flags field instead of using i_private (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add guest_memfd tests for mmap and NUMA policy support (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add helpers to probe for NUMA support, and multi-node systems (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use proper uAPI headers to pick up mempolicy.h definitions (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add additional equivalents to libnuma APIs in KVM's numaif.h (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Report stacktraces SIGBUS, SIGSEGV, SIGILL, and SIGFPE by default (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Define wrappers for common syscalls to assert success (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Enforce NUMA mempolicy using shared policy (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Add slab-allocated inode cache (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Use guest mem inodes instead of anonymous inodes (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Add macro to iterate over gmem_files for a mapping/inode (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Rename "struct kvm_gmem" to "struct gmem_file" (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Drop a superfluous local var in kvm_gmem_fault_user_mapping() (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: use folio_nr_pages() instead of shift operation (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: remove redundant gmem variable initialization (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: move kvm_gmem_get_index() and use in kvm_gmem_prepare_folio() (Maxim Levitsky) [RHEL-151869]
  - mm/mempolicy: Export memory policy symbols (Maxim Levitsky) [RHEL-151869]
  - mm/filemap: Extend __filemap_get_folio() to support NUMA memory policies (Maxim Levitsky) [RHEL-151869]
  - mm/filemap: Add NUMA mempolicy support to filemap_alloc_folio() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add AVIC support for 4k vCPUs in x2AVIC mode (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Add X86_FEATURE_X2AVIC_EXT (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move AVIC Physical ID table allocation to vcpu_precreate() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Expand AVIC_PHYSICAL_MAX_INDEX_MASK to be a 12-bit field (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Replace hard-coded value 0x1FF with the corresponding macro (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add a helper to look up the max physical ID for AVIC (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add an off-by-default module param to WARN on missed consistency checks (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Remove support for "early" consistency checks via hardware (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Stuff vmcs02.TSC_MULTIPLIER early on for nested early checks (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency check for TSC_MULTIPLIER=0 (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency check for TPR_THRESHOLD[31:4]!=0 without VID (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Use kvm_mmu_page role to construct EPTP, not current vCPU state (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Move "dummy root" helpers to spte.h (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Hardcode dummy EPTP used for early nested consistency checks (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Hoist construct_eptp() "up" in vmx.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Disallow EFER.LMSLE when not supported by hardware (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise EferLmsleUnsupported to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: Fix VM exit code for full dirty ring in API documentation (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Replace kmalloc + copy_from_user with memdup_user in tdx_td_init() (Maxim Levitsky) [RHEL-151869]
  - KVM: Explicitly allocate/setup irqfd cleanup as per-CPU workqueue (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Use vcpu instead of vmx->vcpu when vcpu is available (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Remove stale vmx_set_dr6() declaration (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Skip MMIO SPTE invalidation if enable_mmio_caching=0 (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Make X86_FEATURE leaf 17 Linux-specific (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Fix redundant updates of LBR MSR intercepts (Maxim Levitsky) [RHEL-151869]
  - tools headers UAPI: Sync KVM's vmx.h with the kernel to pick SEAMCALL exit reason (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Fix and simplify LBR virtualization handling with nested (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Fix check for valid GVA on an EPT violation (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: switch to raw spinlock for svm->ir_list_lock (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Make avic_ga_log_notifier() local to avic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Unregister KVM's GALog notifier on kvm-amd.ko exit (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Initialize per-CPU svm_data at the end of hardware setup (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Call out MSR_IA32_S_CET is not handled by XSAVES (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Harden KVM against imbalanced load/put of guest FPU state (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unload "FPU" state on INIT if and only if its currently in-use (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Inject #UD if guest tries to execute SEAMCALL or TDCALL (Maxim Levitsky) [RHEL-151869]
  - tools headers UAPI: Sync KVM's vmx.h header with the kernel sources to handle new exit reasons (Maxim Levitsky) [RHEL-151869]
  - tools headers UAPI: Sync x86's asm/kvm.h with the kernel sources (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Don't try to get perf capabilities for hybrid CPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Test prefault memory during concurrent memslot removal (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop pointless exports of kvm_arch_xxx() hooks (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Move kvm_intr_is_single_vcpu() to lapic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
  - KVM: s390/vfio-ap: Use kvm_is_gpa_in_memslot() instead of open coded equivalent (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Make CR4.CET a guest owned bit (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Verify MSRs are (not) in save/restore list when (un)supported (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add coverage for KVM-defined registers in MSRs test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add KVM_{G,S}ET_ONE_REG coverage to MSRs test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend MSRs test to validate vCPUs without supported features (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add support for MSR_IA32_{S,U}_CET to MSRs test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add an MSR test to exercise guest/host and read/write (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Enable shadow stack virtualization for SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Synchronize MSR_IA32_XSS from the GHCB when it's valid (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Pass through shadow stack MSRs as appropriate (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Update dump_vmcb with shadow stack save area additions (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Save/load CET Shadow Stack state to/from vmcb12/vmcb02 (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Emulate reads and writes to shadow stack MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Advertise new VM-Entry/Exit control bits for CET state (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency checks for CET states (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Prepare for enabling CET support for nested guest (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Virtualize NO_HW_ERROR_CODE_CC for L1 event injection to L2 (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Configure nested capabilities after CPU capabilities (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Enable CET virtualization for VMX and advertise to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Disable support for IBT and SHSTK if allow_smaller_maxphyaddr is true (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Initialize allow_smaller_maxphyaddr earlier in setup (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Disable support for Shadow Stacks if TDP is disabled (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add XSS support for CET_KERNEL and CET_USER (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Always forward XSAVES/XRSTORS exits from L2 to L1 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Allow setting CR4.CET if IBT or SHSTK is supported (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Pretty print PK, SS, and SGX flags in MMU tracepoints (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: WARN on attempt to check permissions for Shadow Stack #PF (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Emulate SSP[63:32]!=0 #GP(0) for FAR JMP to 32-bit mode (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't emulate task switches when IBT or SHSTK is enabled (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't emulate instructions affected by CET features (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Set host constant supervisor states to VMCS fields (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Set up interception for CET MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Save and reload SSP to/from SMRAM (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Emulate read and write to CET MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Enable guest SSP read/write interface with new uAPIs (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Introduce CET VMCS fields and control bits (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Report KVM supported CET MSRs as to-be-saved (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add fault checks for guest CR4.CET setting (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Load guest FPU state when access XSAVE-managed MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Initialize kvm_caps.supported_xss (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Refresh CPUID on write to guest MSR_IA32_XSS (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Check XSS validity against guest CPUIDs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Report XSS as to-be-saved if there are supported features (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce KVM_{G,S}ET_ONE_REG uAPIs support (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move global "avic" variable to avic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't advise the user to do force_avic=y (when x2AVIC is detected) (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Always print "AVIC enabled" separately, even when force enabled (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Update "APICv in x2APIC without x2AVIC" in avic.c, not svm.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Make svm_x86_ops globally visible, clean up on-HyperV usage (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Validate XCR0 provided by guest in GHCB (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Read save fields from GHCB exactly once (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Rename kvm_ghcb_get_sw_exit_code() to kvm_get_cached_sw_exit_code() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Restrict GLOBAL_{CTRL,STATUS}, fixed PMCs, and PEBS to PMU v2+ (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Move initialization of valid PMCs bitmask to common x86 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Use BIT_ULL() instead of open coded equivalents (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add helpers to toggle/change a bit in VMCS execution controls (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use KVM_REQ_RECALC_INTERCEPTS to react to CPUID updates (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rework KVM_REQ_MSR_FILTER_CHANGED into a generic RECALC_INTERCEPTS (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Move PMU_CAP_{FW_WRITES,LBR_FMT} into msr-index.h header (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename vmx_vmentry/vmexit_ctrl() helpers (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Snapshot host (i.e. perf's) reported PMU capabilities (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Check pmu->version, not enable_pmu, when getting PMC MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Setup canonical VMCS config prior to kvm_x86_vendor_init() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Add SEV-SNP CipherTextHiding support (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Introduce new min,max sev_es and sev_snp asid variables (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Replace kzalloc() + copy_from_user() with memdup_user() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add support for DIV and IDIV in the fastops test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Dedup the gnarly constraints of the fastops tests (more macros!) (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add coverage for 'b' (byte) sized fastops emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Enable Secure TSC for SNP guests (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Fold sev_es_vcpu_reset() into sev_vcpu_create() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Set RESET GHCB MSR value during sev_es_init_vmcb() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Move init of SNP guest state into sev_init_vmcb() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move SEV-ES VMSA allocation to a dedicated sev_vcpu_create() helper (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Add SNP Secure TSC (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Enforce minimum GHCB version requirement for SEV-SNP guests (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Drop GHCB_VERSION_DEFAULT and open code it (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Zero XSTATE components on INIT by iterating over supported features (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Manually clear MPX state only on INIT (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add kvm_msr_{read,write}() helpers (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use double-underscore read/write MSR helpers as appropriate (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename kvm_{g,s}et_msr()* to show that they emulate guest accesses (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise support for the immediate form of MSR instructions (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Support the immediate form of WRMSRNS in the VM-Exit fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add support for RDMSR/WRMSRNS w/ immediate on Intel (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename handle_fastpath_set_msr_irqoff() to handle_fastpath_wrmsr() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename local "ecx" variables to "msr" and "pmc" as appropriate (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Add a CPU feature bit for MSR immediate form instructions (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a fastpath handler for INVD (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Push acquisition of SRCU in fastpath into kvm_pmu_trigger_event() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Rename check_pmu_event_filter() to pmc_is_event_allowed() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Drop redundant check on PMC being locally enabled for emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Drop redundant check on PMC being globally enabled for emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Open code pmc_event_is_allowed() in its callers (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Rename pmc_speculative_in_use() to pmc_is_locally_enabled() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Calculate set of to-be-emulated PMCs at time of WRMSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Add wrappers for counting emulated instructions/branches (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Move kvm_init_pmu_capability() to pmu.c (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fold WRMSR fastpath helpers into the main handler (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unconditionally grab data from EDX:EAX in WRMSR fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Acquire SRCU in WRMSR fastpath iff instruction needs to be skipped (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unconditionally handle MSR_IA32_TSC_DEADLINE in fastpath exits (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop semi-arbitrary restrictions on IPI type in fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Only allow "fast" IPIs in fastpath WRMSR(X2APIC_ICR) handler (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add kvm_icr_to_lapic_irq() helper to allow for fastpath IPIs (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add host MSR read/write helpers to consolidate preemption handling (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Recover TDP MMU NX huge pages using MMU read lock (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Rename kvm_tdp_mmu_zap_sp() to better indicate its purpose (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Track possible NX huge pages separately for TDP vs. Shadow MMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Remove fastops (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Convert em_salc() to C (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_3WCL (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_1SRC2 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2CL (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2W (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2R (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_1 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Implement test_cc() in C (Maxim Levitsky) [RHEL-151869]
  - module: Rename EXPORT_SYMBOL_GPL_FOR_MODULES to EXPORT_SYMBOL_FOR_MODULES (Maxim Levitsky) [RHEL-151869]
  - net: aquantia: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
  - net/mlx5e: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
  - udp: gso: Use single MSS length in UDP header for GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 7:6.0.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/releases/tag/v6.0.2
  - Related: RHEL-185733


author: Jindrich Novy <jnovy@redhat.com> - 5:5.1.1-1
changelog:
  - podman-5.1.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.1.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Marek Kasik <mkasik@redhat.com> - 24.02.0-9
changelog:
  - Revert previous commit as it is incomplete yet
  - and other fixes need to go in
  - Reverts: RHEL-145379


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-138726


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-10
changelog:
  - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
    Resolves: RHEL-176547


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 16.14-1
changelog:
  - Update to 16.14
  - Add BuildRequires: perl(FindBin) for Perl 5.40 compatibility
  - Resolves: RHEL-208694


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-168121, RHEL-167887


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-168121, RHEL-167887


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-176147


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as a provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as an OpenSSL provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladislav Dronov <vdronov@redhat.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0 @ 686d209b (RHEL-91079)
  - Add autoconf-archive as a dependency
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code
  - Add sysusers.d config file to allow rpm to create users/groups automatically


author: Vladislav Dronov <vdronov@redhat.com> - 26.02.0-1
changelog:
  - Update to qatlib 26.02.0 @ fe4bb4b6 (RHEL-115466)
  - Add patch to force 32 bit MMIO CSR reads for GCC 16.1


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba (RHEL-73092, RHEL-50462)
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-10
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142]
  - Resolves: RHEL-108142
    (QEMU crashes when stopping source VM during live migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-11
changelog:
  - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-126707]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028]
  - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853]
  - Resolves: RHEL-126707
    ([qemu, rhel-10] increase default TSEG size)
  - Resolves: RHEL-139028
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2])
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-12
changelog:
  - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118]
  - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118]
  - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118]
  - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118]
  - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118]
  - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785]
  - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785]
  - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785]
  - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785]
  - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785]
  - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785]
  - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785]
  - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785]
  - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-net-implement-tunnel-probing.patch [RHEL-143785]
  - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785]
  - Resolves: RHEL-79118
    ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10])
  - Resolves: RHEL-143785
    (backport support for GSO over UDP tunnel offload)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425]
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749]
  - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584]
  - Resolves: RHEL-147425
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-132749
    (Migrate SCSI PR state and preempt reservation upon live migration)
  - Resolves: RHEL-134989
    (Hotplugged interface device can not be shown in the guest)
  - Resolves: RHEL-146584
    ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-14
changelog:
  - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
  - Resolves: RHEL-153058
    (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
  - Resolves: RHEL-144004
    ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-15
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
  - Resolves: RHEL-155601
    (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-16
changelog:
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
  - Resolves: RHEL-158224
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-17
changelog:
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-114231]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-114231]
  - Resolves: RHEL-114231
    (Add stats-intervals support to --blockdev)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-18
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-158212]
  - kvm-hw-tpm-Factor-tpm_ppi_enabled-out.patch [RHEL-112608]
  - kvm-hw-tpm-Add-TPMIfClass-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Remove-CRBState-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Propagate-ppi_enabled-to-tpm_tis_reset-and-re.patch [RHEL-112608]
  - kvm-hw-tpm-Simplify-tpm_ppi_enabled.patch [RHEL-112608]
  - kvm-docs-specs-tpm-document-PPI-support-on-ARM64-virt.patch [RHEL-112608]
  - kvm-hw-acpi-tpm-parameterize-PPI-base-address-in-tpm_bui.patch [RHEL-112608]
  - kvm-hw-tpm-add-PPI-support-to-tpm-tis-device-for-ARM64-v.patch [RHEL-112608]
  - Resolves: RHEL-158212
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.3])
  - Resolves: RHEL-112608
    ([ARM64] Windows 11 VM should install without TPM Bypass)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-19
changelog:
  - kvm-vmstate-Introduce-VMSTATE_VARRAY_INT32_ALLOC.patch [RHEL-174858]
  - kvm-target-arm-Move-compare_u64-to-helper.c.patch [RHEL-174858]
  - kvm-target-arm-Convert-init_cpreg_list-to-g_hash_table_f.patch [RHEL-174858]
  - kvm-target-arm-machine-Use-VMSTATE_VARRAY_INT32_ALLOC-fo.patch [RHEL-174858]
  - kvm-target-arm-kvm-Export-kvm_print_register_name.patch [RHEL-174858]
  - kvm-target-arm-kvm-Tweak-print_register_name-for-arm64-s.patch [RHEL-174858]
  - kvm-target-arm-machine-Trace-cpreg-names-which-do-not-ma.patch [RHEL-174858]
  - kvm-target-arm-machine-Trace-all-register-mismatches.patch [RHEL-174858]
  - kvm-target-arm-machine-Fix-detection-of-unknown-incoming.patch [RHEL-174858]
  - kvm-target-arm-cpu-Introduce-the-infrastructure-for-cpre.patch [RHEL-174858]
  - kvm-target-arm-machine-Handle-ToleranceNotOnBothEnds-mig.patch [RHEL-174858]
  - kvm-target-arm-machine-Handle-ToleranceOnlySrcTestValue-.patch [RHEL-174858]
  - kvm-target-arm-cpu64-Mitigate-migration-failures-due-to-.patch [RHEL-174858]
  - kvm-target-arm-cpu64-Define-cpreg-migration-tolerance-fo.patch [RHEL-174858]
  - kvm-target-arm-helper-Define-cpreg-migration-tolerance-f.patch [RHEL-174858]
  - kvm-Revert-target-arm-Reinstate-bogus-AArch32-DBGDTRTX-r.patch [RHEL-174858]
  - kvm-hw-pci-host-gpex-acpi-Fix-_DSM-function-0-support-re.patch [RHEL-138494]
  - kvm-vfio-scsi-ui-Error-check-qio_channel_socket_connect_.patch [RHEL-138494]
  - kvm-vfio-igd-Enable-quirks-when-IGD-is-not-the-primary-d.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-amd-xgbe-device.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-calxeda-xgmac-device.patch [RHEL-138494]
  - kvm-hw-arm-virt-Include-system-system.h.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-platform.patch [RHEL-138494]
  - kvm-vfio-Move-vfio-region.h-under-hw-vfio.patch [RHEL-138494]
  - kvm-vfio-container-set-error-on-cpr-failure.patch [RHEL-138494]
  - kvm-vfio-Report-an-error-when-the-dma_max_mappings-limit.patch [RHEL-138494]
  - kvm-hw-vfio-user-add-x-pci-class-code.patch [RHEL-138494]
  - kvm-vfio-Introduce-helper-vfio_pci_from_vfio_device.patch [RHEL-138494]
  - kvm-vfio-vfio-container-base.h-update-VFIOContainerBase-.patch [RHEL-138494]
  - kvm-vfio-vfio-container.h-update-VFIOContainer-declarati.patch [RHEL-138494]
  - kvm-hw-vfio-cpr-legacy.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-hw-vfio-container.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-spapr.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-vfio-container.h-rename-VFIOContainer-bcontaine.patch [RHEL-138494]
  - kvm-vfio-user-container.h-update-VFIOUserContainer-decla.patch [RHEL-138494]
  - kvm-vfio-container.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-container.h-rename-VFIOUserContainer-bcont.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-update-VFIOUserPCIDevice-declaration.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-VFIOUserPCIDevice-device-fiel.patch [RHEL-138494]
  - kvm-vfio-pci.h-update-VFIOPCIDevice-declaration.patch [RHEL-138494]
  - kvm-vfio-pci.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-pci-quirks.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-cpr.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-igd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-use-QOM-casts-where-appropriate2.patch [RHEL-138494]
  - kvm-vfio-pci.h-rename-VFIOPCIDevice-pdev-field-to-parent.patch [RHEL-138494]
  - kvm-treewide-handle-result-of-qio_channel_set_blocking.patch [RHEL-138494]
  - kvm-vfio-pci-Do-not-unparent-in-instance_finalize.patch [RHEL-138494]
  - kvm-vfio-Do-not-unparent-in-instance_finalize.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container.h-rename-VFIOContaine.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container-base.h-rename-VFIOCon.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container.h-rename-file-to-vfio.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container-base.h-rename-file-to.patch [RHEL-138494]
  - kvm-hw-vfio-container.c-rename-file-to-container-legacy..patch [RHEL-138494]
  - kvm-hw-vfio-container-base.c-rename-file-to-container.c.patch [RHEL-138494]
  - kvm-vfio-iommufd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-cpr-iommufd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-vfio-iommufd.h-rename-VFIOContainer-bcontainer-.patch [RHEL-138494]
  - kvm-vfio-spapr.c-use-QOM-casts-where-appropriate2.patch [RHEL-138494]
  - kvm-vfio-spapr.c-rename-VFIOContainer-bcontainer-field-t.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_instance_init-to-vfio_pci_ini.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_instance_finalize-to-vfio_pci.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_class_init-to-vfio_pc.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_info-to-vfio_pci_info.patch [RHEL-138494]
  - kvm-s390x-s390-pci-vfio.c-use-QOM-casts-where-appropriat.patch [RHEL-138494]
  - kvm-hw-vfio-types.h-rename-TYPE_VFIO_PCI_BASE-to-TYPE_VF.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_base_dev_class_init-to-vf.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_base_dev_info-to-vfio_pci.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_properties-to-vfio_pc.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_nohotplug_properties-.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_nohotplug_dev_class_init-.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_nohotplug_dev_info-to-vfi.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_class_init-.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_properties-.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_instance_init-to-vf.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_instance_finalize-t.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_info-to-vfi.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-device.h-fix-include-header-gua.patch [RHEL-138494]
  - kvm-vfio-Remove-workaround-for-kernel-DMA-unmap-overflow.patch [RHEL-138494]
  - kvm-system-iommufd-Use-uint64_t-type-for-IOVA-mapping-si.patch [RHEL-138494]
  - kvm-hw-vfio-Reorder-vfio_container_query_dirty_bitmap-tr.patch [RHEL-138494]
  - kvm-hw-vfio-Avoid-ram_addr_t-in-vfio_container_query_dir.patch [RHEL-138494]
  - kvm-hw-vfio-Use-uint64_t-for-IOVA-mapping-size-in-vfio_c.patch [RHEL-138494]
  - kvm-migration-push-Error-errp-into-vmstate_subsection_lo.patch [RHEL-138494]
  - kvm-migration-push-Error-errp-into-vmstate_load_state.patch [RHEL-138494]
  - kvm-migration-Remove-error-variant-of-vmstate_save_state.patch [RHEL-138494]
  - kvm-migration-multi-mode-notifier.patch [RHEL-138494]
  - kvm-migration-add-cpr_walk_fd.patch [RHEL-138494]
  - kvm-oslib-qemu_clear_cloexec.patch [RHEL-138494]
  - kvm-migration-cpr-exec-command-parameter.patch [RHEL-138494]
  - kvm-migration-cpr-exec-save-and-load.patch [RHEL-138494]
  - kvm-migration-cpr-exec-mode.patch [RHEL-138494]
  - kvm-migration-cpr-exec-docs.patch [RHEL-138494]
  - kvm-vfio-cpr-exec-mode.patch [RHEL-138494]
  - kvm-hw-vfio-listener-Include-missing-exec-target_page.h-.patch [RHEL-138494]
  - kvm-hw-Remove-unnecessary-system-ram_addr.h-header.patch [RHEL-138494]
  - kvm-vfio-container-Remap-only-populated-parts-in-a-secti.patch [RHEL-138494]
  - kvm-vfio-cpr-legacy-drop-an-erroneous-assert.patch [RHEL-138494]
  - kvm-vfio-iommufd-Set-cpr.ioas_id-on-source-side-for-CPR-.patch [RHEL-138494]
  - kvm-vfio-iommufd-Restore-vbasedev-s-reference-to-hwpt-af.patch [RHEL-138494]
  - kvm-vfio-container-Support-unmap-all-in-one-ioctl.patch [RHEL-138494]
  - kvm-vfio-iommufd-Support-unmap-all-in-one-ioctl.patch [RHEL-138494]
  - kvm-vfio-listener-Add-an-assertion-for-unmap_all.patch [RHEL-138494]
  - kvm-vfio-Clean-up-includes.patch [RHEL-138494]
  - kvm-migration-set-correct-list-pointer-when-removing-not.patch [RHEL-138494]
  - kvm-vfio-user-simplify-vfio_user_process.patch [RHEL-138494]
  - kvm-vfio-user-clarify-partial-message-handling.patch [RHEL-138494]
  - kvm-vfio-user-refactor-out-header-handling.patch [RHEL-138494]
  - kvm-vfio-user-simplify-vfio_user_recv_one.patch [RHEL-138494]
  - kvm-vfio-user-recycle-msg-on-failure.patch [RHEL-138494]
  - kvm-include-hw-hyperv-Remove-unused-struct-mshv_vp_regis.patch [RHEL-138494]
  - kvm-linux-headers-Update-to-Linux-v6.18-rc3.patch [RHEL-138494]
  - kvm-linux-headers-Update-to-Linux-v6.19-rc1.patch [RHEL-138494]
  - kvm-hw-vfio-Add-helper-to-retrieve-device-feature.patch [RHEL-138494]
  - kvm-hw-vfio-region-Create-dmabuf-for-PCI-BAR-per-region.patch [RHEL-138494]
  - Resolves: RHEL-174858
    ([rhel10] Backport qemu cross-kernel migration mitigation series)
  - Resolves: RHEL-138494
    (NVIDIA:Grace-Hopper:Backport vfio: Add DMABUF support for PCI BAR regions - RHEL 10.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-20
changelog:
  - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-178767]
  - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-178767]
  - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-155807]
  - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-155807]
  - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-155807]
  - kvm-hw-tpm-tpm_tis_sysbus-defer-resource-allocation-to-r.patch [RHEL-178846]
  - kvm-vfio-container-Restrict-dma_map_file-to-shared-RAM-o.patch [RHEL-180750]
  - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-153123]
  - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-153123]
  - Resolves: RHEL-178767
    (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests)
  - Resolves: RHEL-155807
    (live migration failed the VM just register key only [rhel-10.3])
  - Resolves: RHEL-178846
    ([aarch64] qemu-kvm crashes on --device tpm-tis-device,?)
  - Resolves: RHEL-180750
    (Backport in QEMU : vfio/container: Restrict dma_map_file() to shared RAM or RAM devices)
  - Resolves: RHEL-153123
    (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-21
changelog:
  - kvm-hw-vfio-sort-and-validate-sparse-mmap-regions-by-off.patch [RHEL-150900]
  - kvm-vfio-Add-Error-parameter-to-vfio_region_setup.patch [RHEL-150900]
  - kvm-hw-vfio-align-mmap-to-power-of-2-of-region-size-for-.patch [RHEL-150900]
  - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184530]
  - Resolves: RHEL-150900
    (NVIDIA:Grace:Backport hw/vfio: Enable hugepfnmap for non-power-of-2 device memory regions - RHEL 10.3)
  - Resolves: RHEL-184530
    (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-22
changelog:
  - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-121686]
  - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-121686]
  - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-121686]
  - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-121686]
  - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-121686]
  - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-121686]
  - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-121686]
  - kvm-block-graph-lock-fix-missed-wakeup-in-bdrv_graph_co_.patch [RHEL-186384]
  - kvm-block-curl-fix-curl-internal-handles-handling.patch [RHEL-186384]
  - kvm-block-curl.c-Use-explicit-long-constants-in-curl_eas.patch [RHEL-186384]
  - kvm-block-curl.c-Fix-CURLOPT_VERBOSE-parameter-type.patch [RHEL-186384]
  - kvm-block-curl-fix-concurrent-completion-handling.patch [RHEL-186384]
  - kvm-block-curl-free-s-password-in-cleanup-paths.patch [RHEL-186384]
  - kvm-nvme-Kick-and-check-completions-in-BDS-context.patch [RHEL-186384]
  - kvm-nvme-Note-in-which-AioContext-some-functions-run.patch [RHEL-186384]
  - kvm-block-remove-detached-header-option-from-opts-after-.patch [RHEL-186384]
  - kvm-block-fix-luks-amend-when-run-in-coroutine.patch [RHEL-186384]
  - kvm-qed-Don-t-try-to-flush-during-incoming-migration.patch [RHEL-186384]
  - kvm-block-vmdk-fix-OOB-read-in-vmdk_read_extent.patch [RHEL-186384]
  - kvm-block-throttle-groups-fix-deadlock-with-iolimits-and.patch [RHEL-186384]
  - kvm-throttle-group-Fix-race-condition-in-throttle_group_.patch [RHEL-186384]
  - kvm-qemu-img-Fix-amend-option-parse-error-handling.patch [RHEL-186384]
  - kvm-qemu-img-rebase-don-t-exceed-IO_BUF_SIZE-in-one-oper.patch [RHEL-186384]
  - kvm-python-backport-drop-Python3.6-workarounds.patch [RHEL-186384]
  - kvm-python-backport-Remove-deprecated-get_event_loop-cal.patch [RHEL-186384]
  - kvm-python-backport-avoid-creating-additional-event-loop.patch [RHEL-186384]
  - kvm-iotests-147-ensure-temporary-sockets-are-closed-befo.patch [RHEL-186384]
  - kvm-iotests-151-ensure-subprocesses-are-cleaned-up.patch [RHEL-186384]
  - kvm-tests-qemu-iotest-fix-iotest-024-with-qed-images.patch [RHEL-186384]
  - kvm-tests-qemu-iotests-Fix-check-for-existing-file-in-_r.patch [RHEL-186384]
  - kvm-async-access-bottom-half-flags-with-qatomic_read.patch [RHEL-186384]
  - kvm-block-linux-aio-bound-ioq_submit-recursion-depth.patch [RHEL-186384]
  - kvm-block-io-fallback-to-bounce-buffer-if-BLKZEROOUT-is-.patch [RHEL-186384]
  - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-186384]
  - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-186384]
  - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-186384]
  - kvm-virtio-Fix-crash-when-sriov-pf-is-set-for-non-PCI-Ex.patch [RHEL-186384]
  - kvm-virtio-scsi-pass-the-same-cdb_size-to-virtio_scsi_po.patch [RHEL-186384]
  - kvm-hw-scsi-avoid-deadlock-upon-TMF-request-cancelling-w.patch [RHEL-186384]
  - kvm-virtio-blk-fix-zone-report-buffer-out-of-memory-CVE-.patch [RHEL-186384]
  - kvm-ide-Fix-potential-assertion-failure-on-VM-stop-for-P.patch [RHEL-186384]
  - kvm-block-Create-DEFAULT_BLOCK_CONF-macro.patch [RHEL-186384]
  - kvm-block-Add-more-defaults-to-DEFAULT_BLOCK_CONF.patch [RHEL-186384]
  - kvm-block-mirror-check-range-when-setting-zero-bitmap-fo.patch [RHEL-186384]
  - kvm-iotests-test-active-mirror-with-unaligned-small-writ.patch [RHEL-186384]
  - kvm-block-mirror-fix-assertion-failure-upon-duplicate-co.patch [RHEL-186384]
  - kvm-commit-Drain-nodes-across-all-of-bdrv_commit.patch [RHEL-186384]
  - kvm-qemu-io-Add-aio_discard-command.patch [RHEL-186384]
  - kvm-qcow2-Fix-corruption-on-discard-during-write-with-CO.patch [RHEL-186384]
  - kvm-iotests-046-Test-that-discard-write_zeroes-wait-for-.patch [RHEL-186384]
  - kvm-qcow2-Fix-data-loss-on-zero-write-with-detect-zeroes.patch [RHEL-186384]
  - kvm-block-Fix-crash-after-setting-latency-historygram-wi.patch [RHEL-186384]
  - Resolves: RHEL-121686
    (qemu-kvm hung during drain after double pause)
  - Resolves: RHEL-186384
    (virt-storage: Backport stable branch fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-23
changelog:
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vio.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vde.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-common-Factor-out-common-helper-function.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-add-memory-regions-as-property-for-an-SM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Extract-common-definitions-to-smmuv3-c.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-common-Make-iommu-ops-part-of-SMMUState.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-smmuv3-accel-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Initialize-shared-system-address.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Move-pci_init_bus_master-after-adding-dev.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Export-pci_device_get_iommu_bus_devfn-and-ret.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Add-optional-supports_address_space-callb.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-bridge-pci_expander_bridge-Move-TYPE_PXB_PCIE.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Restrict-accelerated-SMMUv3-to-v.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Implement-get_viommu_cap-callback.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Introduce-pci_device_get_viommu_flags.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Introduce-pci_device_get_host_iommu_quirks.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Define-STE-CD-fields-via-regist.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Add-NSCFG-bit-definition-for-CD.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Add-STE-CD-set-helpers-for-repe.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-set-unset_iommu_device-callb.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-propagate-smmuv3_cmdq_consume-errors-t.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-nested-vSTE-install-uninstal.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Install-SMMUv3-GBPA-based-hwpt.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Introduce-a-callback-to-retrieve-the-MSI-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-get_msi_direct_gpa-cal.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Set-msi-gpa-property.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-support-to-issue-invalidatio.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Initialize-ID-registers-early-during-r.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Get-host-SMMUv3-hw-info-and-vali.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-host-gpex-Allow-to-generate-preserve-boot-con.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Set-PCI-preserve_config-for-accel-SMMUv3.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-tests-qtest-bios-tables-test-Prepare-for-IORT-reviso.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-acpi-build-Add-IORT-RMR-regions-to-handl.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-tests-qtest-bios-tables-test-Update-IORT-blobs-after.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Block-migration-when-accel-is-enabled.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-accel-property-for-SMMUv3-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-a-property-to-specify-RIL-su.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-support-for-ATS.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-property-to-specify-OAS-bits.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Retrieve-PASID-width-from-iommufd_b.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Add-get_pasid_info-callback.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Add-helper-to-insert-PCIe-extended-capability.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Factor-out-common-PASID-capability-initializa.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-vfio-pci-Synthesize-PASID-capability-for-vfio-pci.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Make-SubstreamID-support-configu.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-memory-Factor-address_space_is_io-out.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-target-i386-arch_memory_mapping-Use-address_space_me.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-s390x-sclp-Use-address_space_memory_is_io-in-sclp.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-physmem-Remove-cpu_physical_memory_is_io.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vev.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-viommu-free-helper.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Allocate-vEVENTQ-for-accelerated.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Introduce-a-helper-function-for-event-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Read-and-propagate-host-vIOMMU-e.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Correct-SMMUEN-field-name-in-CR0.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Fix-CFGI_CD-handling-when-stage-1-is-u.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Check-ATS-compatibility-between-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ats-property-type-to-OnOf.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ril-property-type-to-OnOf.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qdev-Add-a-SsidSizeMode-property-type.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ssidsize-property-type-to.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qdev-Add-an-OasMode-property-type.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-oas-property-type-to-OasM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qemu-options.hx-Document-arm-smmuv3-device-s-accel-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Have-smmuv3_accel_init-take-an-Error-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Update-ATC-invalidation-check.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Improve-accel-SMMUv3-usage-documentati.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-helper-for-resolving-auto-pa.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ats.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ril.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ssidsiz.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-oas.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Set-default-ats-ril-ssidsize-oas-to-au.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qemu-options.hx-Support-auto-for-accel-SMMUv3-proper.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Enforce-pci_setup_iommu_per_bus-is-called.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-vfio-iommufd-Force-creating-nesting-parent-HWPT.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-vfio-iommufd-Control-dirty-tracking-for-nesting-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Update-iommufd_backend_get_device_i.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-iommufd-Rename-all-the-idev-and-idevc-variables-to-h.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Update-iommufd_backend_alloc_viommu.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_hw_.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_viommu_mm.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-iommufd-Remove-unused-viommu-pointer-from-IOM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-CMDQV-ops-interface.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Avoid-including-CONFIG_DEVICES-in-hw-h.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Add-Tegra241-CMDQV-ops-backend.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Wire-CMDQV-ops-into-accel-lifecy.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Use-stored-SMMUv3-device-list-for-IORT-b.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Probe-host-Tegra241-CMDQV-supp.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Implement-CMDQV-init.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Link-SMMUv3-CMDQV-resources-to-platform-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Implement-CMDQV-vIOMMU-alloc-f.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-mmap-host-VINTF-Page0-for-CMDQ.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-CMDQ-V-Config-region.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-VCMDQ-register-reads.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-VCMDQ-register-writes.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Allocate-HW-VCMDQs-once-config.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Route-allocated-VCMDQ-Page0-ac.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-memory-Allow-RAM-device-regions-to-skip-IOMMU-mappin.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Use-mmap-d-host-VINTF-page0-fo.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-common-helper-for-veve.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Read-and-propagate-Tegra241-CM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Initialize-register-state-on-r.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Limit-queue-size-based-on-back.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-per-device-identifier-property.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-helper-to-query-CMDQV-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-acpi-Advertise-Tegra241-CMDQV-nodes-in-D.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Enforce-viommu-association-when-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Document-the-CMDQV-design-and-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-cmdqv-property-for-SMMUv3-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-rh-aarch64-rh-devices.mak-Add-CONFIG_TEGRA241_CMDQV.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - Resolves: RHEL-142465
    ([RHEL-10.1][ARM]: Two smmuv3 devices can be attached to the same bus)
  - Resolves: RHEL-160190
    (NVIDIA:Backport hw/arm/smmuv3-accel: Support AUTO properties - RHEL 10.3)
  - Resolves: RHEL-163596
    (NVIDIA:Backport hw/arm/smmuv3-accel: Resolve AUTO properties - RHEL 10.3)
  - Resolves: RHEL-73794
    (NVIDIA:Grace-Hopper:Backport HW accelerated nesting support for arm SMMUv3 - RHEL 10.1)
  - Resolves: RHEL-73796
    (NVIDIA:Grace-Hopper:Backport vEVENTQ support for smmuv3 - RHEL 10.1)
  - Resolves: RHEL-73798
    (NVIDIA:Grace-Hopper:Backport CMDQV support - RHEL 10.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-24
changelog:
  - kvm-net-tap-linux.c-avoid-abort-when-setting-invalid-fd.patch [RHEL-113894]
  - kvm-crypto-only-verify-CA-certs-in-chain-of-trust.patch [RHEL-111934]
  - kvm-crypto-remove-extraneous-pointer-usage-in-gnutls-cer.patch [RHEL-111934]
  - kvm-crypto-fix-error-reporting-in-cert-chain-checks.patch [RHEL-111934]
  - kvm-crypto-allow-client-server-cert-chains.patch [RHEL-111934]
  - kvm-crypto-stop-requiring-key-encipherment-usage-in-x509.patch [RHEL-111934]
  - kvm-crypto-switch-to-newer-gnutls-API-for-distinguished-.patch [RHEL-111934]
  - kvm-crypto-remove-redundant-parameter-checking-CA-certs.patch [RHEL-111934]
  - kvm-crypto-add-missing-free-of-certs-array.patch [RHEL-111934]
  - kvm-crypto-replace-stat-with-access-for-credential-check.patch [RHEL-111934]
  - kvm-crypto-remove-redundant-access-checks-before-loading.patch [RHEL-111934]
  - kvm-crypto-move-check-for-TLS-creds-dir-property.patch [RHEL-111934]
  - kvm-crypto-use-g_autofree-when-loading-x509-credentials.patch [RHEL-111934]
  - kvm-crypto-remove-needless-indirection-via-parent_obj-fi.patch [RHEL-111934]
  - kvm-crypto-move-release-of-DH-parameters-into-TLS-creds-.patch [RHEL-111934]
  - kvm-crypto-shorten-the-endpoint-server-check-in-TLS-cred.patch [RHEL-111934]
  - kvm-crypto-remove-duplication-loading-x509-CA-cert.patch [RHEL-111934]
  - kvm-crypto-reduce-duplication-in-handling-TLS-priority-s.patch [RHEL-111934]
  - kvm-crypto-introduce-method-for-reloading-TLS-creds.patch [RHEL-111934]
  - kvm-crypto-introduce-a-wrapper-around-gnutls-credentials.patch [RHEL-111934]
  - kvm-crypto-fix-lifecycle-handling-of-gnutls-credentials-.patch [RHEL-111934]
  - kvm-crypto-make-TLS-credentials-structs-private.patch [RHEL-111934]
  - kvm-crypto-deprecate-use-of-external-dh-params.pem-file.patch [RHEL-111934]
  - kvm-crypto-avoid-loading-the-CA-certs-twice.patch [RHEL-111934]
  - kvm-crypto-avoid-loading-the-identity-certs-twice.patch [RHEL-111934]
  - kvm-crypto-expand-logic-to-cope-with-multiple-certificat.patch [RHEL-111934]
  - kvm-crypto-support-upto-5-parallel-certificate-identitie.patch [RHEL-111934]
  - kvm-docs-creation-of-x509-certs-compliant-with-post-quan.patch [RHEL-111934]
  - kvm-iommufd-Introduce-handler-for-device-ATS-support.patch [RHEL-184675]
  - kvm-vfio-pci-Add-ats-property.patch [RHEL-184675]
  - Resolves: RHEL-113894
    ([RHEL.10.2][virual network] Hit qemu coredump when removed an interface that the guest is using from the host)
  - Resolves: RHEL-111934
    (QEMU support for loading multiple sets of x509 certs for PQC hybrid mode)
  - Resolves: RHEL-184675
    (NVIDIA:Backport vfio/pci: add vfio-pci ATS control property - RHEL 10.3)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Tyonnchie Berry <tyberry@redhat.com> - 2.8-5
changelog:
  - Added patch Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch sched_attr-Do-not-define-for-glibc-2.41.patch
  Resolves: RHEL-88470


author: Tyonnchie Berry <tyberry@redhat.com> - 2.9-1
changelog:
  - Rebased to latest upstream version
  - Dropped previously applied patches
  - Cleaned up spec file
  Resolves: RHEL-86705


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase realtime-tests to the latest upstream
  - Added 3 patches and updated spec file
  Resolves: RHEL-144701


author: John Kacur <jkacur@redhat.com> - 2.6-5
changelog:
  - Added the following upstream patches
    rt-tests-Fix-warnings.patch
    rt-tests-cyclictest-Remove-histogram-totals.patch
    rt-tests-cyclictest-Replace-histogram-code-with-libr.patch
    rt-tests-cyclicdeadline-Add-histogram-support.patch
    rt-tests-cyclics-Fix-json-segfault-when-not-using-hi.patch
    rt-tests-cyclicdeadline-Print-the-histogram-regardle.patch
    rt-tests-cyclicdeadline-Remove-dead-verbose-code-in-.patch
    rt-tests-oslat-should-use-MHz-not-Mhz.patch
    rt-tests-oslat-convert-to-nanoseconds-correctly.patch
  - Added gating.yaml
  - Added tests dir
  Resolves: RHEL-30184


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Milan Crha <mcrha@redhat.com> - 0.9.1-12
changelog:
  - Add patch for CVE-2026-16615 (Weak random number generation in PKCE implementation)
    Resolves: RHEL-213751


author: mjcr99 <macano@redhat.com> - 1:0.3.9-1
changelog:
  - Update rhc to 0.3.9
  - Resolves: RHEL-174319
  - Resolves: RHEL-174314
  - Resolves: RHEL-153860
  - Resolves: RHEL-138740


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-24
changelog:
  - Add support for %autosetup -C (RHEL-141269)
  - Add support for database parking (RHEL-126405)
  - Make syslog plugin actually useful and also required (RHEL-155272)
  - Require rpm-plugin-audit instead of just recommending (RHEL-139071)
  - Fix buffer overruns with long language strings (RHEL-169755)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-2
changelog:
  - Rebase to 8.2604.0
    Resolves: RHEL-140910
  - Drop ossl-free-cert.patch (upstream)
  - Drop gtls-unused-certificates.patch (upstream)
  - Add SAN:IP validation support
    Resolves: RHEL-150376
  - Add TlsRevocationCheck support
    Resolves: RHEL-151324
  - Fix omelasticsearch IPv6 handling
    Resolves: RHEL-164768
  - Fix imfile not releasing deleted file FDs in inotify mode
    Resolves: RHEL-149118


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-3
changelog:
  - Backport omelasticsearch PQC TLS parameters (tls.tlsversion, tls.ciphersuites,
  <<<<<<< HEAD
    tls.keyexchangegroups)
  =======
    tls.keyexchangegroups) and apply them during startup version detection
  >>>>>>> dad7741 (omelasticsearch: apply TLS options during startup detection)
    Resolves: RHEL-193505


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-4
changelog:
  - Backport: warn when imjournal fails to retrieve MESSAGE field from journal entry
    Resolves: RHEL-193508


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-12
changelog:
  - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
    Resolves: RHEL-171246


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-13
changelog:
  - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245)
    Resolves: RHEL-181681
  - Fix information disclosure via MITM attack bypassing TLS in net-imap.
    (CVE-2026-42246)
    Resolves: RHEL-181769
  - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258)
    Resolves: RHEL-181799


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-34
changelog:
  - Upgrade to Ruby 4.0.3.
    Resolves: RHEL-170933
  - Fix ERB: Arbitrary code execution via deserialization bypass
   (CVE-2026-41316)
    Resolves: RHEL-170911
  - Fix JSON: Denial of Service or Information Disclosure via format string injection
   (CVE-2026-33210)
   Resolves: RHEL-169964


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-35
changelog:
  - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245)
    Includes core fix plus additional performance optimizations 
    Resolves: RHEL-181680
  - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246)
    Resolves: RHEL-181753
  - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258)
    Resolves: RHEL-181785


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100438)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744)
  - zipl: makedumpfile is required for ngdump support (RHEL-114661)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109214)
  - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100438)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829)
  - Secure Execution: Add tool to verify host-key documents (RHEL-136795)
  - Resolves: RHEL-100438 RHEL-71829 RHEL-136795


author: Dan Horák <dhorak@redhat.com> - 2:2.41.0-1
changelog:
  - rebased to 2.41.0 (RHEL-136097)
  - hsci: Automatically set appropriate MTU for HSCI (RHEL-153550)
  - Resolves: RHEL-136097 RHEL-153550


author: Dan Horák <dhorak@redhat.com> - 2:2.42.1-1
changelog:
  - rebased to 2.42.1 (RHEL-174898)
  - hyptop: Backward compatibility options causes other issues (RHEL-166157)
  - zipl/boot: Fix stage3 secure boot trailer placement (RHEL-170707)
  - SEL-EBC: instrumentation of an SEL initramfs to support early boot customization (RHEL-136433)
  - SEL-EBC: tool to build basic SEL-qcow2 image supporting early boot customization (RHEL-136435)
  - KVM: Enhance pvimg info command to display additional SE image information (RHEL-73136)
  - Resolves: RHEL-174898 RHEL-166157 RHEL-170707 RHEL-136433 RHEL-136435 RHEL-73136


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-36
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-113741
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-114454
  - Add support for Image Mode
    Resolves: RHEL-114454


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.36-1
changelog:
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code
  - browser: Always show "Report Bug" button


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-1
changelog:
  - Migrate from libxml2 to xml.etree.ElementTree
  - Handle ImportError when setroubleshoot.browser is not available
  - Add support for multiple commands in fix_cmd (RHEL-155209)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.22.2-2
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.22.2
  - re-add test file installation to fix tier0 tests
  - Resolves: RHEL-153734


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - new upstream release
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-2
changelog:
  - use %configure RPM macro instead of bare ./configure to inject
    RPM hardening flags (stack protector, FORTIFY_SOURCE)
  - use %make_build and %make_install RPM macros
  - Resolves: RHEL-152227


author: Jindrich Novy <jnovy@redhat.com> - 1.3.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.4
  - Resolves: RHEL-212009


author: Kalev Lember <klember@redhat.com> - 45.0-2
changelog:
  - Package review fixes (rhbz#2241553)
  - Add SourceLicense tag to distinguish between the license of the app
    itself and its crate deps
  - Slightly change virtual provides for bundled aperture crate to better
    match other rust packages


author: Martin Osvald <mosvald@redhat.com> - 1.7.4.4-9
changelog:
  - Add openssl-groups option for post-quantum key exchange
  - Add test for openssl-groups option
    Resolves: RHEL-129232


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-9
changelog:
  - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-10
changelog:
  - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-12
changelog:
  - Resolves: RHEL-160670 - squid: Squid: Denial of Service via heap
    Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  - Resolves: RHEL-160671 - squid: Squid: Denial of Service via crafted
    ICP traffic (CVE-2026-32748)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-15
changelog:
  - Resolves: RHEL-168094 - Squid crashes with assertion failure during shutdown
    when cache_dir is enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0
  - Drop upstreamed patches


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Sumit Bose <sbose@redhat.com> - 2.13.1-1
changelog:
  - Resolves: RHEL-183331 Rebase SSSD for RHEL 10.3
  - Resolves: RHEL-178180 'sssctl analyze --help' shows incorrect command in usage field
  - Resolves: RHEL-173663 [Regression] Cannot log in to FreeIPA account with password immediately after boot
  - Resolves: RHEL-173660 SSSD 2.13 doesn't work in offline mode, generates plenty of Permission denied errors
  - Resolves: RHEL-172303 SSSD: LDAP backend ('sssd_be') initialization fails if DNS in unresponsive
  - Resolves: RHEL-151491 SSSD kerberos plugins export symbols which clash
  - Resolves: RHEL-133013 /etc/hosts containing an entry with a name and alias but no IPv4 address results in sssd_be crash
  - Resolves: RHEL-5054 Smart card reader with pinpad fails C_Login. (CKF_PROTECTED_AUTHENTICATION_PATH not handled correctly)


author: Madhuri Upadhye <mupadhye@redhat.com> - 2.13.1-2
changelog:
  - Resolves: RHEL-190529 CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process
  - Resolves: RHEL-185008 Regression in IPA + Idp authentication with keycloak
  - Resolves: RHEL-111571 'sssctl config-check' does not work correctly for "Accessing AD with a MSA"
  - Resolves: RHEL-192054 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192069 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Make queue_track the default backend
  - Remove LTO build flags
  - Remove the -m64 build flag
  Resolves: RHEL-105604 RHEL-114506


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Alejandro López <allopez@redhat.com> - 1.9.17-3.p2
changelog:
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-4.p2
changelog:
  - Bump release number
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-8.p2
changelog:
  - Resolves: RHEL-95850 - A sudo'd command when invoked from ksh through a
    pipe mangles output, leaves tty insane


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-4
changelog:
  - Add extra SELinux policies.
    Related: RHEL-53967
  - Fix FTBFS, add gmp-devel
    Resolves: RHEL-65460


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-5
changelog:
  - Add extra SELinux policies.
    https://github.com/stefanberger/swtpm/issues/970
    Resolves: RHEL-70835
    Resolves: RHEL-73809


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-22
changelog:
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
  - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
  - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
  - hwdb: update rules (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - Add Razer Cobra mouse to hwdb (RHEL-72702)
  - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
  - hwdb: sort SDR devices by vendor name (RHEL-72702)
  - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
  - hwdb: run "update-hwdb" (RHEL-72702)
  - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
  - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
  - hwdb: add Airspy devices (RHEL-72702)
  - hwdb: add more devices (RHEL-72702)
  - hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
  - hwdb: add missing Ettus Research B200 rule (RHEL-72702)
  - hwdb: add LimeSDR XTRX devices (RHEL-72702)
  - hwdb: add HydraSDR RFOne (RHEL-72702)
  - hwdb: add SDRplay devices (RHEL-72702)
  - hwdb: update (RHEL-72702)
  - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
  - Add Nulea M501 trackball to hwdb (RHEL-72702)
  - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
  - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
  - remove bonus line (RHEL-72702)
  - hwdb: drop trailing whitespace (RHEL-72702)
  - remove Nulea M501 usb entry from hwdb (RHEL-72702)
  - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702)
  - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702)
  - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702)
  - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702)
  - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702)
  - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702)
  - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702)
  - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702)
  - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702)
  - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702)
  - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702)
  - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702)
  - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702)
  - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702)
  - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702)
  - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702)
  - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702)
  - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702)
  - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702)
  - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702)
  - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702)
  - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702)
  - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702)
  - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702)
  - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard   device as set 1 (appears as raw set 2) or as set 2 (appears as   translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for   posterity. (RHEL-72702)
  - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702)
  - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702)
  - hwdb: keyboard: uppercase apple id (RHEL-72702)
  - integritysetup: Add support for hmac-sha512 (RHEL-27852)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852)
  - core: increment start limit counter only when we can start the unit (RHEL-115032)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032)
  - test: extend start limit interval (RHEL-115032)
  - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029)
  - man: fix typo (RHEL-143029)
  - test: fix test with -Dnetworkd=false (RHEL-143029)
  - ci: run apt-get update before running mkosi (RHEL-115001)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-23
changelog:
  - test-journal-dump: dump the headers of journal files (RHEL-106795)
  - journal: store counts, not byte sizes, in table size constants (RHEL-106795)
  - journal: treble field hash table size (RHEL-106795)
  - nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
  - user-classification: add new "foreign" UID range (RHEL-143036)
  - userdb: synthesize stub user records for the foreign UID (RHEL-143036)
  - dissect: add new --shift command (RHEL-143036)
  - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
  - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
  - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
  - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
  - sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
  - user-record: add helper for dispatching a disposition mask (RHEL-143036)
  - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036)
  - user-record: add some helpers for working with UserDBMatch (RHEL-143036)
  - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
  - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
  - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
  - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
  - update TODO (RHEL-143036)
  - JSON User/Group records: Add properties for UUIDs (RHEL-143036)
  - userdb: add support for printing the UUID from user and group records (RHEL-143036)
  - userdb: add support for looking up users or groups by uuid. (RHEL-143036)
  - userdbctl: add --uuid filtering option (RHEL-143036)
  - userdbctl: add missing --uuid= to --help text (RHEL-143036)
  - userdb: fix typo (RHEL-143036)
  - man/userdbctl: fixup version info (RHEL-143036)
  - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
  - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
  - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
  - logind: support deserializing session leader through pidfdid (RHEL-53112)
  - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
  - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
  - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219)
  - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-24
changelog:
  - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-155454)
  - ci: add bpftool workaround to codeql job too (RHEL-155454)
  - ci: fix workaround about bpftool for codeql (RHEL-155454)
  - ci: add bpftool workaround to coverity too (RHEL-155454)
  - Revert "man: mention RHEL documentation in systemctl's man page" (RHEL-155805)
  - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-155396)
  - cgroup: port some code over to path_startswith_full() (RHEL-155396)
  - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-155396)
  - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-155396)
  - core/cgroup: avoid one unnecessary strjoina() (RHEL-155396)
  - core: validate input cgroup path more prudently (RHEL-155396)
  - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-158303)
  - nspawn: normalize pivot_root paths (RHEL-158303)
  - udev: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-158354)
  - udev: ensure tag parsing stays within bounds (RHEL-158354)
  - udev: fix review mixup (RHEL-158354)
  - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev-builtin-net-id: print cescaped bad attributes (RHEL-158354)
  - core: only activate transaction that contain useful jobs (RHEL-143728)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-168098)
  - string-util: introduce strprepend() helper (RHEL-143028)
  - missing: add quotactl_fd() wrapper (RHEL-143028)
  - homed: always use quotactl_fd() if its available (RHEL-143028)
  - pid1: add GracefulOptions= setting to .mount units (RHEL-143028)
  - pid1: enable usrquota support on /dev/shm (RHEL-143028)
  - units: enable usrquota support on /tmp/ (RHEL-143028)
  - nspawn: enable usrquota support on /tmp/ and /dev/shm/ (RHEL-143028)
  - nspawn: downgrade log message about usrquota to debug (RHEL-143028)
  - mount-setup: drop outdated comment (RHEL-143028)
  - mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too (RHEL-143028)
  - devnum-util: add macros to safely convert dev_t to pointers and back (RHEL-143028)
  - user-record: add fields for setting limits on /tmp/ and /dev/shm/ (RHEL-143028)
  - user-runtime-dir: some smaller modernizations/refactorings (RHEL-143028)
  - user-runtime-dir: enforce /tmp/ and /dev/shm/ quota (RHEL-143028)
  - homectl: add support for configuring tmpfs limits (RHEL-143028)
  - test: add test case for tmpfs quota logic + PAMName= ask-password logic (RHEL-143028)
  - update TODO (RHEL-143028)
  - core/dbus-service: fix alignment (RHEL-143028)
  - core/mount: filter out "fail" option as well (RHEL-143028)
  - core/mount: check parameters_fragment first in mount_enter_(re)mounting() (RHEL-143028)
  - core/mount: report accurate can_start and can_reload (RHEL-143028)
  - core/mount: trivial coding style cleanups (RHEL-143028)
  - core/dbus-mount: add missing ReloadResult and CleanResult properties (RHEL-143028)
  - bus-unit-util: add missing assertions (RHEL-143028)
  - core/mount: rework GracefulOptions= to be just x-systemd.graceful-option= (RHEL-143028)
  - mountpoint-util: assume fsopen() works in mount_option_supported() (RHEL-143028)
  - core/mount: log only once about fs not supporting new mount API (RHEL-143028)
  - user-runtime-dir: correct quota size calculation (RHEL-143028)
  - test-display-quota: add a little helper binary to show quota on tmpfs (RHEL-143028)
  - TEST-46-HOMED: check for support on /dev/shm and /tmp separately (RHEL-143028)
  - TEST-46-HOMED: conditionally skip usrquota tests (RHEL-143028)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-25
changelog:
  - core: cleanup unit's dropin directories from global cache (RHEL-171097)
  - libsystemd: drop "const" decorators on public inline functions (RHEL-155454)
  - sd-id128: Drop _sd_const_ from sd_id128_in_setv() (RHEL-155454)
  - test: wrap mount/umount when running with sanitizers (RHEL-155454)
  - test: wrap even more binaries when running with sanitizers (RHEL-155454)
  - test: temporarily ignore sanitizer warning about blocked ptrace() (RHEL-155454)
  - test: slightly reduce the performance/memory overhead for wrapped binaries (RHEL-155454)
  - fstab-generator: support swap on network block devices (RHEL-128058)
  - man: add tags for the next few versions (RHEL-128058)
  - test: drop some extraneous whitespaces (RHEL-155021)
  - shared: fix segfault when processing matchHostname field (RHEL-155021)
  - shared: don't exclude valid min/max values for cgroup weight fields (RHEL-155021)
  - shared: don't leak memory from array fields (RHEL-155021)
  - man: fix short option for userdbctl's --from-file= (RHEL-155021)
  - fuzz: add a fuzzer for user records (RHEL-155021)
  - user-record: extract user_record_image_is_blockdev() common helper (RHEL-155021)
  - udev/net_id: introduce naming scheme for RHEL-9.9 (RHEL-72814)
  - udev/net_id: introduce naming scheme for RHEL-10.3 (RHEL-72814)
  - Tag accel devices for uaccess-render (RHEL-153030)
  - udev: tag kfd devices for xaccess-render (#40888) (RHEL-153030)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-28
changelog:
  - man: reword the description of "secure pager" handling (RHEL-102939)
  - pager: also check for $SUDO_UID (RHEL-102939)
  - Revert "mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too" (RHEL-143028)
  - Revert "nspawn: enable usrquota support on /tmp/ and /dev/shm/" (RHEL-143028)
  - Revert "units: enable usrquota support on /tmp/" (RHEL-143028)
  - Revert "pid1: enable usrquota support on /dev/shm" (RHEL-143028)
  - Revert "udev-builtin-net-id: print cescaped bad attributes" (RHEL-180922)
  - homectl: apply all --member-of= groups from a comma-separated list (RHEL-180924)
  - udevadm: gracefully handle when a maked file is specified to udevadm verify/cat (RHEL-180917)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-29
changelog:
  - udev: drop redundant checks (RHEL-180923)
  - TEST-71-HOSTNAME: specify job mode for the stop job (#38413) (RHEL-180923)
  - test: wait for coredump to appear before parsing (RHEL-155454)
  - TEST-87-AUX-UTILS-VM: make coredumps stored in archived journal file (RHEL-155454)
  - TEST-87-AUX-UTILS-VM: rotate journal at one more place (RHEL-155454)
  - udev-rules: add missing device name prefix in log message (RHEL-180929)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Kate Hsuan <hpa@redhat.com> - 2.5.10-1
changelog:
  - Update to the upstream version 2.5.10
  - Update to 2.5.10 the commits 3144beaf22c4a (Update Panther Lake sysfs
    paths) be2049afdee80 (Add Panther Lake to the supported list)
    03b4a139388f6 (Check for target code ITMT3) were included in the 2.5.10
    release.
  - Include commits c921e802f6e49 (Compile issue on i586 for time_t print)
    352125763b8f9 (itmt3 support) to enable itmt3 support.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Tomas Popela <tpopela@redhat.com> - 3.7.4-1
changelog:
  - Update to 3.7.4 and sync the macro naming with Fedora
    Resolves: RHEL-71387
  - Drop references to non-existent tracker-extract-3.service
    Resolves: RHEL-70242


author: Benson Muite <benson_muite@emailplus.org> - 1.13.1-3
changelog:
  - Fix type declaration error
  - Fix to enable use of GCC 13
  - Use SPDX license identifier
  - Fix build requires #RBZ2166925


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - selinux: comply with with the "Unify bin and sbin" change
    Resolves: RHEL-113206
  - Restore permissions of the log directory
    Resolves: RHEL-92260


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later
  - Clarify License of valgrind-scripts.


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-4
changelog:
  - Add VALGRIND_3_26_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
    - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
    - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
    - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
    - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
    - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch
    - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
    - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.1.6-1
changelog:
  - Rebase to version 8.1
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689
  - add sub-package for rdma module
  - use patch for configuration changes
  - add /etc/valkey/modules drop-in directory for module configuration files
  - add %valkey_version and %valkey_modules_cfg macros
  - fix module linker flags using patch from
    https://github.com/valkey-io/valkey/pull/3344


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-10
changelog:
  - Resolves: RHEL-159617 vim: Vim: Arbitrary code execution via command injection
    in glob() function


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-11
changelog:
  - RHEL-170124 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
    via path traversal bypass


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-78505
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-78657


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-9
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313
  - Remove virt-v2v -io vddk-noextents=true option
    resolves: RHEL-102619
  - Add -o kubevirt -oo disk and -oo create options
    resolves: RHEL-101599
  - Fix escaping of nbdkit-vddk-plugin export parameter
    resolves: RHEL-102734
  - Fix installation of drivers on firstboot with pending reboots
    resolves: RHEL-103356
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104018
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109130
  - Set boot order for Linux guests based on grub location
    resolves: RHEL-108991


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-5
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938
  - Expose XFS version in virt-v2v-inspector
    resolves: RHEL-144075
  - Fix Debian 12 UEFI conversions
    resolves: RHEL-144467
  - Fix import when datastore name has characters like '+'
    resolves: RHEL-133729
  - Replace /etc/crypttab /dev/sdX with UUID
    resolves: RHEL-93583
  - Replace '/' in output name with '_'
    resolves: RHEL-136479


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.8-1
changelog:
  - Rebase to virt-v2v 2.11.8
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.9-1
changelog:
  - Rebase to virt-v2v 2.11.9
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121, RHEL-178432
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312
  - Skip fsck after conversion for RHEL 7
    resolves: RHEL-191749
  - Add new --collect option to collect pre-conversion information
    resolves: RHEL-188772
  - Add disk boot-order to inspector and in-place XML output
    resolves: RHEL-184508
  - Allow conversion with immutable resolv.conf
    related: RHEL-178556
  - Add note about PowerShell ExecutionPolicy AllSigned (MTV-4424)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.9-2
changelog:
  - Rebase to virt-v2v 2.11.9
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121, RHEL-178432
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312
  - Skip fsck after conversion for RHEL 7
    resolves: RHEL-191749
  - Add new --collect option to collect pre-conversion information
    resolves: RHEL-188772
  - Add disk boot-order to inspector and in-place XML output
    resolves: RHEL-184508
  - Allow conversion with immutable resolv.conf
    related: RHEL-178556
  - Add note about PowerShell ExecutionPolicy AllSigned (MTV-4424)
  - Retry qemu-guest-agent MSI installer on failure
    resolves: RHEL-186301


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.12.0-1
changelog:
  - Rebase to virt-v2v 2.12.0
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121, RHEL-178432
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312
  - Skip fsck after conversion for RHEL 7
    resolves: RHEL-191749
  - Add new --collect option to collect pre-conversion information
    resolves: RHEL-188772
  - Add disk boot-order to inspector and in-place XML output
    resolves: RHEL-184508
  - Allow conversion with immutable resolv.conf
    related: RHEL-178556
  - Add note about PowerShell ExecutionPolicy AllSigned (MTV-4424)
  - Retry qemu-guest-agent MSI installer on failure
    resolves: RHEL-186301
  - Fix online-disks firstboot in Powershell Constrained Language Mode
    resolves: RHEL-210639


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-97010]
  - Resolves: RHEL-97010
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-1
changelog:
  - Rebase to 1.13.3 [RHEL-133034]
  - Resolves: RHEL-133034
    (Rebase virtiofsd to latest version for RHEL 10.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-2
changelog:
  - Fixing README file [RHEL-169757]
  - Resolves: RHEL-169757
    (Fix the README file: --announce-submounts is enabled by default)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Neal Gompa <ngompa@centosproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races
    Resolves: RHEL-79119
  - Fix minor spec formatting inconsistencies


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-3
changelog:
  - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
    Resolves: https://redhat.atlassian.net/browse/RHEL-169759


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-4
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163190
    Resolves: https://redhat.atlassian.net/browse/RHEL-163286
    Resolves: https://redhat.atlassian.net/browse/RHEL-163244


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-5
changelog:
  - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
                 CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
                 CVE-2026-50262, CVE-2026-50263
    Resolves: https://redhat.atlassian.net/browse/RHEL-182444


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-7
changelog:
  - CVE fix for: CVE-2026-55999, CVE-2026-56000
    Resolves: https://redhat.atlassian.net/browse/RHEL-191523
    Resolves: https://redhat.atlassian.net/browse/RHEL-191533


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


