# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-1
changelog:
  - Update to 3.0.6
  - Resolves: RHEL-1681 - [RFE] Log buffering for all log types
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-38917 - dscreate interactive install shows a traceback
    when mdb is selected
  - Resolves: RHEL-42485 - [RFE] pbkdf2 hardcoded parameters should be turned
    into configuration options
  - Resolves: RHEL-59513 - [RFE] Port logconv.pl to python
  - Resolves: RHEL-61253 - Make online import more robust
  - Resolves: RHEL-69819 - "Duplicated DN detected" errors when creating
    indexes or importing entries. [rhel-10.0]
  - Resolves: RHEL-70122 - Crash in attrlist_find() when the Account Policy
    plugin is enabled.
  - Resolves: RHEL-74149 - backup/restore broken
  - Resolves: RHEL-74154 - If an entry RDN is identical to the suffix, then
    Entryrdn gets broken during a reindex
  - Resolves: RHEL-74159 - Crash during bind when acct policy plugin does not
    have "alwaysrecordlogin" set
  - Resolves: RHEL-74164 - On replica consumer, account policy plugin fails
    to manage the last login history
  - Resolves: RHEL-76020 - IPA LDAP error code T3 when no exceeded time limit
    from a paged search result [rhel-10]
  - Resolves: RHEL-76838 - Unlocked and locked users having same error output
  - Resolves: RHEL-76841 - Healthcheck tool should warn admin about creating
    a substring index on membership attribute


author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-2
changelog:
  - Bump version to 3.0.6-3
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-77948 - ns-slapd crashes with data directory ≥ 2 days old
    [rhel-10]
  - Resolves: RHEL-78342 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Resolves: RHEL-5117 - ns-slapd crash in
    dbmdb_import_prepare_worker_entry()
  - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
    log msg info
  - Resolves: RHEL-35241 - ns-slapd crashes in referral mode
  - Resolves: RHEL-61327 - Incomplete messages about replication in the
    errors log.
  - Resolves: RHEL-61353 - dbscan  on replication changelog does not display
    MOD_TYPE
  - Resolves: RHEL-62874 - dsidm: issue when renaming users
  - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
    inactivity limit fails with error
  - Resolves: RHEL-67003 - dsconf backend replication monitor fails if
    replica id starts with 0
  - Resolves: RHEL-67006 - dsconf  utility  should let you configure the
    "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
    in
  - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
    filter rewriter.
  - Resolves: RHEL-67022 - Password modify extended operation should skip
    password policy checks when executed by root DN
  - Resolves: RHEL-70117 - Unify how group description can be added to a new
    group in WebUI and CLU
  - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
  - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
    Directory Server
  - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
    Directory Server" => "Databases" menu blank in Cockpit
  - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
    a number, not 'NoneType'
  - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
  - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
    rename-switch" from DS-12
  - Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
    by-dn" command
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-80253 - RHDS hangs when having online backup running
    together with automember_rebuild task executing
  - Resolves: RHEL-80497 - Can't rename users member of automember rule
    [rhel-10]
  - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
    provided
  - Resolves: RHEL-83850 - mdb database statistics don't work
  - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
    create-nested"
  - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
    create-filtered"
  - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
    addresses fails with an error "Invalid IP address"
  - Resolves: RHEL-86314 - dsidm failing with error "argument must be a
    string or a number"
  - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
    service and posixgroup
  - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
  - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
  - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
  - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
    option
  - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
    deletion message, but role is still present
  - Resolves: RHEL-86785 - dscontainer: support loading custom schema
  - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
    00007fed321fe100 error 6 in liblmdb.so.0.0.0
  - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
  - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
    replicas are busy [rhel-10]
  - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
    Unable to parse the response
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]
  - Resolves: RHEL-95761 - Improve  error message when bulk import connection
    is closed
  - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
    was created, but the pwdpolicysubentry attribute for this user
    incorrectly points to the People OU password policy instead of the
    specific user policy.
  - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
    directory: '/usr/sbin/dsctl'


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-3
changelog:
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-4
changelog:
  - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
  - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
    cache is disabled.
  - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
  - Resolves: RHEL-92054 - Memory leak in
    roles_cache_create_object_from_entry [rhel-10]
  - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
    causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
  - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
    world readable permission
  - Resolves: RHEL-107035 - CWE-532 Created user password hash available to
    see in audit log
  - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
    changed by administrator


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-5
changelog:
  - Resolves: RHEL-101727 - The numSubordinates value is not matching the
    number of direct children.
  - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
  - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
    attributes using custom matching rules
  - Resolves: RHEL-111224 - Error showing local password policy on web UI
  - Resolves: RHEL-112675 - Statistics about index lookup report a wrong
    duration
  - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
  - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
  - Resolves: RHEL-113969 - AddressSanitizer: memory leak in
    memberof_add_memberof_attr


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
    tune should adapt its tuning
  - Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
    allow large groups to stay in the cache
  - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
    across different tools
  - Resolves: RHEL-83274 - Replication online reinitialization of a large
    database gets stalled.
  - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
    IDL scan limit at INT_MAX
  - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
  - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results
  - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
    requests for accounts that do not meet the criteria specified in the
    `pamFilter` option.
  - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
    messages after migrating to LMDB.
  - Resolves: RHEL-96196 - Duplicate/double local password policy entry
    display from redhat directory server webconsole
  - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
    conflicts at once instead of deleting each conflict one after the other
  - Resolves: RHEL-105578 - IPA health check up script shows time skew is
    over 24 hours
  - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
    LMDB is used.
  - Resolves: RHEL-106559 - When deferred memberof update is enabled after
    the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
    be added.
  - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
    not exist
  - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
    groups
  - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
    operation
  - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
  - Resolves: RHEL-115179 - Several password related attributes are not
    replicating from the Replicas to the Masters
  - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
    corruption
  - Resolves: RHEL-116060 - Fix paged result search locking
  - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
  - Resolves: RHEL-117140 - Changelog trimming - add number of scanned
    entries to the log
  - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
  - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
    whole subnets
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
    replication as a consumer
  - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
    in the access logs
  - Resolves: RHEL-123275 - The new ipahealthcheck test
    ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
  - Resolves: RHEL-123663 - Online initialization of consumers fails with
    error -23
  - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
    space char in DN name correctly
  - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
  - Resolves: RHEL-124694 - Access logs are not getting deleted as
    configured.
  - Resolves: RHEL-126535 - memory corruption in alias entry plugin
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
    replicating after importing data from ldif files
  - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
    sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
    389-ds-base-2.6.1-11
  - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
    base-2.6.1-12
  - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-2
changelog:
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-3
changelog:
  - Bump version to 3.2.0-3
  - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
    ou=foo,ou=people,dc=example,dc=com.
  - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
    without restarting slapd
  - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
  - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
    indexes instead of selected ones
  - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
  - Resolves: RHEL-121981 - Setting password history count to 0 does not
    flush history
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication
  - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
    plugin


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-4
changelog:
  - Bump version to 3.2.0-4
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.
  - Resolves: RHEL-133085 - Replica installation is failing with message
    MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
  - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
    Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
  - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
    atomic_compare_exchange()


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-6
changelog:
  - Bump version to 3.2.0-6
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.


author: Nathan Scott <nathans@redhat.com> - 0.11.8-1
changelog:
  - Update to latest upstream version.
  - Update spec file and resolve a build issue (BZ 2113091).
  - Switch to SPDX licensing.


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Always reset retries when unblocking children or ports (RHEL-80475)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79829)
  - Fix crash in imagemode with SELinux enforced (RHEL-77157)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-81948)
  - Fix order of parsing port/controller properies in nmcli (RHEL-80273)
  - Improve interface activation logic (RHEL-80157)
  - Fix WireGuard IPv6 firewall rules (RHEL-79975)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83058)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-70484)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102774)
  - Allow setting IP method to disabled in port connections (RHEL-90756)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102318)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.55.4-1
changelog:
  - Update to 1.55.4 (dev)
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
  - Add support for a DHCP client-id kernelarg (RHEL-108454)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.55.90-1
changelog:
  - Update to 1.56.0 (rc1)
  - Support setting protocol version of HSR/PRP (RHEL-100764)
  - Support interlink for HSR/PRP (RHEL-100768)
  - Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
  - Improve logging of networking off (RHEL-103925)
  - Don't delete unrelated OVS ports (RHEL-120176)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-119641)
  - Esp param properly exported (RHEL-119653)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
  - Support leftprotoport and rightprotoport options. (RHEL-130888)
  - Fix error on duplicate key 'phase2alg'. (RHEL-128213)
  - Fix import connection with RSA key. (RHEL-125174)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.34-1
changelog:
  - Update to 2.0.34 (rhbz#2105023)
  - Resolve issues found by rpmdiff
    - add a patch to fix getaddrinfo detection to avoid using gethostbyname
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
  - Conditional Perl & Python module build, by default disabled


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.0-1
changelog:
  - aardvark-dns-1.13.0-1.el10
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.0
  - Resolves: RHEL-65320


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.1-1
changelog:
  - aardvark-dns-1.13.1-1.el10
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
  - Related: RHEL-58990


author: Radovan Sroka <rsroka@redhat.com> - 0.18.6-8
changelog:
  RHEL 10.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4320


author: Attila Lakatos <alakatos@redhat.com> - 0.18.6-8.1
changelog:
  RHEL 10.1 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-108928


author: Radovan Sroka <rsroka@redhat.com> - 0.18.4-1
changelog:
  - aide-0.18.4 is available
  Resolves: rhbz#1910486
  - Please port your pcre dependency to pcre2. Pcre has been deprecated
  Resolves: rhbz#2128267


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  - rebase to 0.19.2
  Resolves: RHEL-110572
  - exclude directory but include subitems
  Resolves: RHEL-1382
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1383
  - Switch to libnettle for hashing
  Resolves: RHEL-59170


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-2
changelog:
  - Modernize aide config file
  Resolves: RHEL-39970
  - No path reference ends with '/'
  Resolves: RHEL-39959


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-3
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  - Do not monitor link count in /var/log/journal
  Resolves: RHEL-39970


author: Jaroslav Kysela <perex@perex.cz> - 1.2.7.1-4
changelog:
  - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org>
  - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com>
  - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com>
  - CI test & RHEL cleanups


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.34-1
changelog:
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
  - pyanaconda: dnf: clarify is_ready boolean return (k.koukiou)
  - tui: make SoftwareSpoke ready once installation source succeeds or fails
    (k.koukiou)
    Resolves: RHEL-60724
  - gui: Fix GTK warnings when removing non-existent accelerators (k.koukiou)
    Resolves: RHEL-45999
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-61460
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-61460
  - Disable checking for the rdp verb in Anaconda (a.badger)


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.35-1
changelog:
  - Add release notes for RDP kickstart support (adamkankovsky)
    Resolves: RHEL-96216
  - test: Enable kickstart RDP command in Anaconda (adamkankovsky)
    Resolves: RHEL-96216
  - Enable kickstart RDP command in Anaconda (adamkankovsky)
    Resolves: RHEL-96216
  - Adjust to pykickstart adding support for RDP (k.koukiou)
    Resolves: RHEL-96216
  - Adjust to pykickstart removing support for VNC (k.koukiou)
    Resolves: RHEL-119216
  - Remove temporary isFinal getter and DBUS API (adamkankovsky)
    Resolves: RHEL-119216
  - Add test for product DBUS API (adamkankovsky)
    Resolves: RHEL-119216
  - New getter for product in Runtime module (adamkankovsky)
    Resolves: RHEL-119216
  - Partial pick of 7a1ae76 (ruff/isort) limited to runtime (adamkankovsky)
    Resolves: RHEL-119216
  - Test for kickstart scripts (akankovs)
    Resolves: RHEL-119216
  - Migrate the %pre-install, %post, %onerror and %traceback scripts
    (akankovs)
    Resolves: RHEL-119216
  - Check if text mode was actually requested by kickstart (#2293672) (mkolman)
    Resolves: RHEL-119216
  - Get kickstart data via DBus (akankovs)
    Resolves: RHEL-119216
  - Adding a implementation for runtime and ui commands (akankovs)
    Resolves: RHEL-119216
  - Update tests for kickstart commands (akankovs)
    Resolves: RHEL-119216
  - Migration of the remaining kickstart commands to the Runtime module
    (akankovs)
    Resolves: RHEL-119216
  - Fix mock LUKS devices logic in tests (vtrefny)
  - Fix checking for locked LUKS devices (vtrefny)
  - Bump required version of blivet to 3.13 (vtrefny)
    Resolves: RHEL-115016
  - Catch blivet.errors.ISCSIError in ISCSIDiscoverTask (vtrefny)
    Resolves: RHEL-115016
  - Disable LVM auto-activation during installation (vtrefny)
    Resolves: RHEL-115016


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.36-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-118305
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-118305
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-118305
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-115411
  - Add pyproject.toml for project configuration (bciconel)
  - Support Flatpak installations from Satellite OCI registries (bciconel)
    Resolves: RHEL-95061
    Resolves: RHEL-95062
  - Configure default Flatpak remote for RHEL 10 (bciconel)
  - flatpak: enable installation with CDROM source type (bciconel)
    Resolves: RHEL-116800


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.38-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-58830


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.39-1
changelog:
  - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
    (k.koukiou)
    Related: RHEL-58215
  - bootc: Collect kernel arguments before installation to pass to bootc
    (k.koukiou)
    Related: RHEL-58215
  - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
    Related: RHEL-58215
  - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
    Related: RHEL-58215
  - Add bootc installation method (ppolawsk)
    Resolves: RHEL-58215
  - Include bootc command in expected pykickstart commands (ppolawsk)
    Related: RHEL-58215


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.40-1
changelog:
  - rhsm: add --flatpak-registry-url support (bciconel)
    Resolves: RHEL-132652
  - flatpak: handle self-signed certificate errors in registry sources (bciconel)
    Resolves: RHEL-132652
  - flatpak: add utility to check for self-signed certificate errors (bciconel)
    Resolves: RHEL-132652
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-99673
  - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
    Resolves: RHEL-112702
    Related: RHEL-132666


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.41-1
changelog:
  - ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
    Resolves: RHEL-66155
  - modules: rpm_ostree: allow /boot/efi mount point in bootc installation
    (k.koukiou)
    Resolves: RHEL-141155


author: Bruno <bciconel@redhat.com> - 40.22.3.42-1
changelog:
  - payloads: flatpak: fix SSL error detection on older Python versions
    (bciconel)
    Related: RHEL-141069
    Resolves: RHEL-142694


author: Bruno <bciconel@redhat.com> - 40.22.3.43-1
changelog:
  - installation: run subscription tasks after network configuration (bciconel)
    Resolves: RHEL-135111
  - subscription: ensure /var/lib/insights exists before running insights-client
    (bciconel)
    Resolves: RHEL-135111
  - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
    Resolves: RHEL-117685
  - Only show compatible translations in text mode (mkolman)
    Resolves: RHEL-16168


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.44-1
changelog:
  - storage: stop creating /etc/mtab symlink during installation (k.koukiou)
    Related: RHEL-135116
  - rescue: Add warning for immutable systems (k.koukiou)
    Related: RHEL-135116
  - rescue: detect OSTree deployments in rescue mode and show deployment path
    (k.koukiou)
    Resolves: RHEL-135116
  - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
    (k.koukiou)
    Related: RHEL-135116
  - network: List all network interfaces IP for RDP session (ppolawsk)
    Resolves: RHEL-74268


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.45-1
changelog:
  - Fix user input in driver disk menu is not displayed (adamkankovsky)
    Resolves: RHEL-58828
  - flatpak: tests: fix unreachable code (fsouza.bruno)
    Related: RHEL-143566
  - flatpak: Only override remote URLs when subscription module is available
    (bciconel)
    Related: RHEL-143566
  - flatpak: Make installation failures non-blocking (bciconel)
    Resolves: RHEL-143566
  - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
    Resolves: RHEL-144456


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79256)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79473)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105572)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 13.06-1
changelog:
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)
  - Annocheck: Add .fc44 to list of known rpm file extensions.
  - Annocheck: Fix compile time warnings from GCC-15 re: strchr returning a const char *.
  - Annocheck: Skip production test for gcc libraries.  (RHEL-123175)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.0.0.20240502-5
changelog:
  - Fix some compiler warnings
  - src-main/context.c: Fix warning[-Waddress] &ce->str will always evaluate
    as 'true'
  - mkworddic/mkdic.c: Fix warning[-Wformat-overflow=] '%s' directive
    argument is null


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.7.5-1
changelog:
  - new version 1.7.5
  - Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared
    memory (CVE-2023-49582)


author: Joe Orton <jorton@redhat.com> - 1.6.3-18
changelog:
  - drop ENGINE support from apr_crypto (RHEL-33728)
  - fix (harmless) gcc snprintf warning in testbuckets.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1.6.3-19
changelog:
  - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
  - Related: RHEL-33728 - drop ENGINE support from apr_crypto


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.1-1
changelog:
  - New upstream version 1.14.1
  - Use github tarballs again.
  - New binary augprint.
  - New bash-completions subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
    resolves: RHEL-76283
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.9
changelog:
  - Fix: fails to parse /etc/fstab when there is a double comma after character
    resolves: RHEL-77279
  - Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
    resolves: RHEL-113748
  - Synchronize spec file with Fedora


author: Christian Krause <chkr@fedoraproject.org> - 0.8-18
changelog:
  - Install glade file for avahi-discover-standalone unconditionally
    (fixes #2036073 and #2126721)
  - Install desktop files for bssh and bvnc unconditionally


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Jerome Marchand <jmarchan@redhat.com> - 0.29.1-1
changelog:
  - Rebase to the latest release version (#2253688)
  - Enable libbpf-tools on s390x (#2249458)
  - Misc 0.29.1 fixes


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.1-1
changelog:
  - Rebase to the latest version (RHEL-32379)
  - Really prevent the loading of compromised headers (CVE-2024-2314)
  - Add python3-pyelftools dependency
  - Exclude unsupported tools


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to the latest version (RHEL-78921)
  - Rebuild with LLVM 20 (RHEL-81772)
  - Silence warning of trace tools (RHEL-68952)
  - Fix bpf-runqlen (RHEL-91190)
  - Fix sslsniff and sofdsnoop (RHEL-58348)
  - Fix slabratetop (RHEL-58810)
  - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
  - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
  - Fix multiples ppc64 tools (RHEL-58147)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-12
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-1
changelog:
  - Update to 9.16.33 (rhbz#2342784)
  - Make relative documentation links
  - Permanently remove DLZ parts build


author: Andrea Bolognani <abologna@redhat.com> - 2.41-54
changelog:
  - Fix BuildRequires for non-gold architectures.  (RHEL-85855)
  - Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Bastien Nocera <bnocera@redhat.com> - 5.86-1
changelog:
  - Update to 5.86
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Fix audio output not working in some circumstances
    Resolves: RHEL-147735


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Colin Walters <walters@verbum.org> - 1.13.0-1
changelog:
  - Release 1.13.0
  - Update to bootc 1.13.0
  - Pass CARGO_FEATURES explicitly to make install to prevent auto-detection
    rebuild in install environment (workaround for upstream Makefile issue)
  - Package shell completions (bash, zsh, fish)


author: Viktor Malik <vmalik@redhat.com> - 0.21.1-1
changelog:
  - Rebased to version 0.21.1
  - Resolves: RHEL-36076
  - Rebuilt for LLVM 18
  - Resolves: RHEL-27729
  - Enable gating
  - Resolves: RHEL-45249


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Arjun Shankar <arjun@redhat.com> - 2.0.20230521-2
changelog:
  - Analyse byacc sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222081)


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0.2-11
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
  - drop java binding for platforms not in %{java_arches}


author: Jindrich Novy <jnovy@redhat.com> - 5:0.2.1-2
changelog:
  - use -static-pie on x86_64/aarch64, fall back to -static on ppc64le/s390x
    where rcrt1.o is not available
  - pass CFLAGS on make command line to override autotools Makefile variables
  - Resolves: RHEL-152096


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Kefu Chai <kefu.chai@scylladb.com> - 17.0.6-6
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.8 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Enable pie (RHEL-33489)


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-2
changelog:
  - update to the latest upstream release https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-39410


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-1
changelog:
  - composefs-1.0.5-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.0.6-1
changelog:
  - update to the latest upstream release
    https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
    RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 1.0.7-1
changelog:
  - composefs-1.0.7-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.7
  - Related: RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-1
changelog:
  - update to https://github.com/containers/conmon/releases/tag/v2.2.1
  - enable RELRO
  - Related: RHEL-122178


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-3
changelog:
  - pass %{optflags} and %{build_ldflags} to enable stack protector
    and FORTIFY_SOURCE hardening flags
  - Resolves: RHEL-152224


author: Paul Wouters <paul.wouters@aiven.io - 1.4.7-1
changelog:
  - Resolves: rhbz#2132747 conntrack-tools-1.4.7 is available
  - Add gpg source code verification
  - Removed patches that were merged upstream


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: HATAYAMA Daisuke <d.hatayama@fujitsu.com> - 1.6.3-2
changelog:
  - gcore.mk: fix mismatch of _FILE_OFFSET_BITS when building gcore.so
  - coredump: fix unexpected truncation of generated core files
  - elf: fix warning message caused by type mismatch of offset types
  - coredump: fix segmentation fault caused by type mismatch
  - x86: Fix failure of collecting vsyscall mapping due to change of enum type of vsyscall_mode
  - gcore: fix memory allocation failure during processing NT_AUXV note
  - gcore, defs: remove definitions and initializations for saved_auxv entries of offset and size tables
  - coredump: use MEMBER_{OFFSET, SIZE} instead of GCORE_{OFFSET, SIZE}


author: Tao Liu <ltao@redhat.com> - 1.6.4-6
changelog:
  - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
  - add gating.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Jindrich Novy <jnovy@redhat.com> - 1.26-2
changelog:
  - use %configure macro instead of ./configure to inject RPM hardening flags
    (stack protector, FORTIFY_SOURCE)
  - Resolves: RHEL-152226


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65464)
  - Fix signal handling at exit
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
  - Minor edits in the rpm scripts
  - Make xemacs a bcond


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-7
changelog:
  - CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
  - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-4
changelog:
  - RHEL-54297 cups source rpm doesn't actually build lspp support
  - RHEL-49447 Fix garbage uri when adding discovered print in web ui


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
changelog:
  - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
  - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-12
changelog:
  - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-13
changelog:
  - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-15
changelog:
  - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Jeff Moyer <jmoyer@redhat.com> - 80-4
changelog:
  - Fix listing of region capabilities (Jeff Moyer)
  - Remove orphaned patch file (Jeff Moyer)
  - Resolves: RHEL-80436


author: Martin Osvald <mosvald@redhat.com> - 3.8.3-1
changelog:
  - Fix CVE-2024-34055
  - Fix wrong symlinks to imtest utilities
  - Convert to %autorelease and %autochangelog


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Tomas Korbar <tkorbar@redhat.com> - 1.7.3-2
changelog:
  - Rebuild because of infrastructure problems
  - Resolves: RHEL-92412
  - Resolves: RHEL-88534
  - Resolves: RHEL-81709


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.2-1
changelog:
  - Rebase to PKI 11.5.2
  - CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability


author: Andrew Hughes <gnu.andrew@redhat.com> - 11.5.4-2
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54649


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-1
changelog:
  - Rebase to PKI 11.6.0
  - Resolves: RHEL-70108
  - Resolves: RHEL-75585
  - Resolves: RHEL-75546
  - Resolves: RHEL-74371
  - Resolves: RHEL-63015


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.12
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121558


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-17
changelog:
  - fix building with latest openssl (RHEL-117460)
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-1
changelog:
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-3
changelog:
  - Backport the DW_TAG_unspecified_type support while 1.25 gets ready wrt optimized functions support


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.25-1
changelog:
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-45148
  - Add gating.yaml
  - Add "Provides: pahole"
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
    have expected alignment due to some attribute usage that then causes
    problems with BTF trampolines due to lack of expressiveness in BTF to
    signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
    encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
    like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
    explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
    nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
    and current branch, i.e. 'next'.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 10.1 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-94540
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-94536
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-94538
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-94537
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-105425


author: Petr Lautrbach <lautrbach@redhat.com> - 1.3.3-106
changelog:
  - Add /var/lib/fapolicyd to tmpfiles
  Resolves: RHEL-104873
  - Allow fapolicyd to connect to systemd-machined
  Resolves: RHEL-77071


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-2
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Miguel Martín <mmartinv@redhat.com> - 0.5.3-1
changelog:
  * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
   * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
   * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
   * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
   * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
   * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
  - Resolves: RHEL-77724


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-1
changelog:
  - new upstream release
    Resolves: RHEL-65332
  - ha-cloud-support: add awscli2 dependency
    Resolves: RHEL-60021
  - fence_bladecenter fix SyntaxWarning: invalid escape sequence '\s'
    Resolves: RHEL-57063
  - build: remove python-poetry-core BuildRequires
    Resolves: RHEL-60893


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-5
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76495


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-6
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83520


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-7
changelog:
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79799


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-16
changelog:
  - fence_ibm_powervs: update description of api-type parameter to show
    correct default value
    Resolves: RHEL-114752


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Pavel Reichl <preichl@redhat.com> - 3.34-1
changelog:
  - New upstream version (RHBZ#2178183)
  - Drop support for pmeblk https://github.com/axboe/fio/commit/04c1cdc


author: Jan Grulich <jgrulich@redhat.com> - 1.16.0-1
changelog:
  - Update to 1.16.0
    Resolves: RHEL-72779
  - Add support for preinstalling Flatpaks
    Resolves: RHEL-26066


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Iñaki Úcar <iucar@fedoraproject.org> - 3.3.1-3
changelog:
  - Require netlib from base package
  - Adapt license tag to SPDX
  - Add rpminspect.yaml file to skip tests with false positives


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Antonio Torres <antorres@redhat.com> - 3.2.8-2
changelog:
  - Disable JIT if PCRE can't allocate executable memory
  - Fix warnings from service file
    Resolves: RHEL-116594


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-8
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
    Resolves: RHEL-142334, RHEL-142318


author: Nick Clifton <nickc@redhat.com> - 2.44-4
changelog:
  - Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
  - Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.1.1-2.2
changelog:
  - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
  - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
    (RHEL-84680)


author: Marek Polacek <polacek@redhat.com> 15.1.1-2.3
changelog:
  - ship libstdc++.modules.json (RHEL-97043)
  - configure with --with-long-double-format=ieee (RHEL-97055)


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.2.1-7
changelog:
  - update from releases/gcc-15 branch (RHEL-116507)
    - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
  	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
  	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
  	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
  	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
  	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
  	diagnostics/120063, fortran/107406, libfortran/122936,
  	libstdc++/120446, libstdc++/122812, libstdc++/122907,
  	libstdc++/123147, middle-end/111817, middle-end/123107,
  	middle-end/123392, middle-end/123703, rtl-optimization/121773,
  	rtl-optimization/122215, rtl-optimization/123121,
  	rtl-optimization/123523, target/117575, target/119130,
  	target/120250, target/121192, target/121485, target/123022,
  	target/123092, target/123155, target/123217, target/123460,
  	target/123484, target/123489, target/123521, target/123607,
  	target/123742, testsuite/123353, tree-optimization/122793,
  	tree-optimization/122868, tree-optimization/123040,
  	tree-optimization/123300, tree-optimization/123351,
  	tree-optimization/123372, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123602,
  	tree-optimization/123736, tree-optimization/123741


author: Kalev Lember <klember@redhat.com> - 3.92.0-1
changelog:
  - Update to 3.92.0
  - Remove gtk3 and gtk4 subpackages as the gcr gtk3 and gtk4 libraries are gone
  - Rename gcr-base to gcr-libs
  - Fix gir and vala directory ownership
  - Misc packaging cleanup


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Keith Seitz <keiths@redhat.com> - 14.2-1.el10
changelog:
  - Rebase to gdb-14.2 and update all bug references:
    RHEL-39326 "better support for $pc not saved"
    RHEL-39325 "Infcalls from B/P conditions in multi-threaded inferiors"
    RHEL-39324 "gdb: s390: Add arch14 record/replay support"
    RHEL-24764 "Add support for Power11 options"
    RHEL-34213 "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (Keith Seitz, RHEL-33256)


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
    supported target, so lets drop this target.  Retain for older RHEL
    versions, as well as Fedora.


author: Keith Seitz <keiths@redhat.com> - 16.3-3.el10
changelog:
  - Include gdb-index-generation-fixes.patch (renamed).
    (Tom Tromey and Andrew Burgess, RHEL-150992)


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15
changelog:
  - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
  - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.45.2-1
changelog:
  - update to 2.45.2
  - add glibc-utils BuildRequires
  - build docs with asciidoc instead of a asciidoctor
  - drop git-p4 subpackage
  - Resolves: RHEL-45572, RHEL-45215


author: Arjun Shankar <arjun@redhat.com> - 2.39-111
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-126766)	
  - Upstream commit: ce65d944e38a20cb70af2a48a4b8aa5d8fabe1cc	
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814)	
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)	
  - memalign: reinstate alignment overflow check (CVE-2026-0861)	
  - support: Exit on consistency check failure in resolv_response_add_name	
  - support: Fix FILE * leak in check_for_unshare_hints in test-container	
  - sprof: fix -Wformat warnings on 32-bit hosts	
  - sprof: check pread size and offset for overflow	
  - getaddrinfo.c: Avoid uninitialized pointer access [BZ #32465]	
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704)	
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091)	
  - ppc64le: Restore optimized strncmp for power10	
  - ppc64le: Restore optimized strcmp for power10	
  - AArch64: Optimise SVE scalar callbacks	
  - aarch64: fix includes in SME tests	
  - aarch64: fix cfi directives around __libc_arm_za_disable	
  - aarch64: tests for SME	
  - aarch64: clear ZA state of SME before clone and clone3 syscalls	
  - aarch64: define macro for calling __libc_arm_za_disable	
  - aarch64: update tests for SME	
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp	
  - linux: Also check pkey_get for ENOSYS on tst-pkey (BZ 31996)	
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601)	
  - x86: fix wmemset ifunc stray '!' (bug 33542)	
  - x86: Detect Intel Nova Lake Processor	
  - x86: Detect Intel Wildcat Lake Processor


author: Frédéric Bérat <fberat@redhat.com> - 2.39-83
changelog:
  - Fix memory leak in freopen, mode flag and wide-oriented stream handling (RHEL-115823)	
  - Add comprehensive tests and document limitations (RHEL-115823)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.1-12
changelog:
  - Release bump due to internal issue with the build system (missing debug symbols)
    Related: RHEL-24118


author: Dhanuka Warusadura <dhanuka@gnome.org> - 42.1-6
changelog:
  - ssh-agent: update build instructions to disable ssh component
  - Introduced conditional builds based on ssh component required or not


author: Matthias Clasen <mclasen@redhat.com> - 3.36.0-14
changelog:
  - Use autosetup
  - Rename 14.patch to gnome-menus-01.patch
  - Rearrange after design review
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.36.0-16
changelog:
  - Fix Calculator to be presented
  - Papers should be in Utilities and not in Graphics and Office
  - Resolves: RHEL-65839


author: Milan Crha <mcrha@redhat.com> - 3.50.1-2
changelog:
  - Resolves: RHEL-33893
  - Disable Microsoft 365 provider
  - Remove support for 'files' in Google provider


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.11-5
changelog:
  - Fix abort when disconnecting from libei
  - Fix restarting the daemon state after a client has disconnected
    Resolves: RHEL-89455


author: Yaakov Selkowitz <yselkowi@redhat.com> - 44.0-2
changelog:
  - Enable bundled deps in RHEL builds
  - Update bundled provides
  - Only use Fedora branding in Fedora builds


author: Kalev Lember <klember@redhat.com> - 45.0-5
changelog:
  - Drop downstream patch that downgraded pretty_env_logger dep to 0.4
  - Don't use both meson and cargo for building
  - Migrate to SPDX license


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-3
changelog:
  - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
  - Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
  - Fix name constraint processing performance issue (CVE-2025-14831)
  - Drop unused patches


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-11
changelog:
  - internalize scons (RHEL-14750)
  - add missing IPv6 support
  - add note about limited Red Hat support
  - drop unneeded API-compatibility patch
  - fix busy wait when reading from gpsd socket
  - fix some issues reported by coverity and shellcheck


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-14
changelog:
  - fix annobin coverage (RHEL-33496)
  - add conflicts for gpsd-minimal (RHEL-33651)
  - drop compat subpackage (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-15
changelog:
  - fix icon path in desktop files (RHEL-34158)
  - replace gpsd-minimal conflicts with obsoletes (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-3
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-10
changelog:
  - Resolves RHEL-67042: update selinux policy for valkey datasource
  - Resolves RHEL-61900: allow mssql datasource in selinux policy


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Clean up the grafana.ini file


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Revert changes that break older custom dashboards


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-20
changelog:
  - Resolves RHEL-97520: Rework grafana-selinux spec file sections
  - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-22
changelog:
  - Resolves RHEL-125629: CVE-2025-58183
  - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-24
changelog:
  - Resolves RHEL-144949: CVE-2026-21721
  - Resolves RHEL-145413: CVE-2025-61728
  - Resolves RHEL-146073: CVE-2025-61726
  - Resolves RHEL-149246: CVE-2025-68121


author: Sam Feifer <sfeifer@redhat.com> - 5.2.1-1
changelog:
  - Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG
  - Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Wim Taymans <wtaymans@redhat.com> - 1.24.10-1
changelog:
  - Update to 1.24.10
    Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
    Resolves: RHEL-70960, RHEL-70947, RHEL-70934


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Matthias Clasen <mclasen@redhat.com> - 3.24.43-4
changelog:
  - Stop relying on xpms in the testsuite
    Resolves: RHEL-69453
  - Avoid criticals on headless systems
    Resolves: RHEL-40884
  - Hide emoji chooser unless explicitly requested
    Resolves: RHEL-65214


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.1-1
changelog:
  - New stable version 1.52.1
  - Rebase on top of patches from RHEL 9.5
  - Reboot Windows between each firstboot script to improve reliability
    resolves: RHEL-56319
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-56330
  - Add support for nbd+unix:// URIs
    resolves: RHEL-56332


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56812
  - Replace Jansson with json-c
    resolves: RHEL-65295


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-2
changelog:
  - Rebase to guestfs-tools 1.54.0
    resolves: RHEL-81734
  - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error
    resolves: RHEL-83201
  - virt-drivers fails on opensuse guest if kernel-source is installed
    resolves: RHEL-92604
  - builder: Update link to templates to use https
    resolves: RHEL-94873


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-3
changelog:
  - Rebase to guestfs-tools 1.54.0
    resolves: RHEL-81734
  - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error
    resolves: RHEL-83201
  - virt-drivers fails on opensuse guest if kernel-source is installed
    resolves: RHEL-92604
  - builder: Update link to templates to use https
    resolves: RHEL-94873
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109129


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-5
changelog:
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-6
changelog:
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716
  - Remove virt-customize subscription-manager options
    resolves: RHEL-122307


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-7
changelog:
  - Synchronize spec file with Fedora
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716
  - Remove virt-customize subscription-manager options
    resolves: RHEL-122307
  - Add AV and GPOs to virt-inspector output
    resolves: RHEL-125955


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.3.4-11
changelog:
  - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
  - Add other licenses to License tag and use SPDX identifiers to comply with FPG


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83030


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-111948


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.0.5-5
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120174


author: Petr Dancak <pdancak@redhat.com> - 3.23.12-9
changelog:
  - enable following links with curl in all use cases
    Resolves: RHEL-84817
  - hp-plugin-download wrongly parsed file type
    Resolves: RHEL-97437


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.61-1
changelog:
  - new version 2.4.61
  - Resolves: RHEL-45753 - httpd: Potential SSRF in 
    mod_rewrite (CVE-2024-39573)
  - Resolves: RHEL-45757 - httpd: null pointer dereference in
    mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45776 - httpd: Improper escaping of output in
    mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45791 - httpd: Encoding problem in 
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45811 - httpd: Substitution encoding issue in 
    mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-46051 - httpd: Security issues via backend applications 
    whose response headers are malicious or exploitable (CVE-2024-38476)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
    httpd mod_proxy_wstunnel


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-1
changelog:
  - new version 2.4.63
  - Resolves: RHEL-76358 - httpd rebase to 2.4.63
  - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1
  - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4
changelog:
  - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
    is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)
  - Resolves: RHEL-103489 - stickysession field does not work when
    specifying it in the query parameter after upgrade to 9.5


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-5
changelog:
  - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-6
changelog:
  - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-10
changelog:
  - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-12
changelog:
  - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.46.20220731git
changelog:
  - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
  - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
  - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
  - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
  - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
  - Resolves: RHEL-40107
    ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
  - Resolves: RHEL-40679
    ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.47.20220731git
changelog:
  - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
  - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
  - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
  - Resolves: RHEL-44617
    ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.49.20220731git
changelog:
  - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
  - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
  - Resolves: RHEL-65434
    ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.50.20220731git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
  - Resolves: RHEL-95811
    ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-11
changelog:
  - Update required packages in CI
  - adobe-source-code-pro-fonts is no longer available in RHEL10
  - dnf and git do not work after systemd-oomd-defaults is installed


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-16
changelog:
  - tests: Update packages with comps-f41
  - Add base-graphical
  - Add fonts default
  - Delete libcanberra-gtk3, libproxy-duktape
  - Delete tmt for RHEL CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-18
changelog:
  - Update CI for RHEL10
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-7
changelog:
  - Resolves #2297147 Add directory datadir/GConf/gsettings
  - Resolves #2297735 Move ibus.conf to ibus-xinit sub package
  - Fix memory leaks in error handlings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Mike FABIAN <mfabian@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23
  - Do not translate the Multi_key when using the option “☑️ Use US keyboard layout”
  - Fix option “☑️ Use US keyboard layout”
    (Resolves: https://github.com/ibus/ibus-m17n/issues/66)
  - Translation update from Weblate: new language Hindi, hi 100%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.24-1
changelog:
  - Update to 1.4.24
  - Make IBusEngineSimple read ~/.XCompose
    (Resolves: https://github.com/ibus/ibus-m17n/issues/70)
  - Do not hide empty preedit text before committing text.
    (Resolves: https://github.com/ibus/ibus-m17n/pull/64).
    Together with ibus >= 1.5.29 this solves the preedit flicker problem perfectly.
  - Use “<developer><name>…</name></developer>” in m17n.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-5
changelog:
  - Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of
    directory instead of checking Fedora version.


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-14
changelog:
  - updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2)
  - updated %patch to new syntax


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54331


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.7.0-2
changelog:
  - Rebase to JSS 5.7.0
  - Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
  - Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2.19.0-1
changelog:
  - Rebase to https://github.com/coreos/ignition/releases/tag/v2.19.0
  - Update ignition-edge commit https://github.com/fedora-iot/ignition-edge/pull/2


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-88043 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86481 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-85788 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()
  - Resolves: RHEL-88899 [RFE] Add check on CA cert expiry for ipa-cert-fix


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-18
changelog:
  - Resolves: RHEL-89979 Support OpenSSL provider API
  - Resolves: RHEL-25007 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93484 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-89834 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-88833 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-79072 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-68803 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30825 IDM - When creating an ID range, should require a RID


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
changelog:
  - Resolves: RHEL-105973 Include fixes in python3-ipatests package
  - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101708 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-95733 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-27
changelog:
  - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
  - Resolves: RHEL-119628 Include fixes in python3-ipatests
  - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
  - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
  - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
  - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
  - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
  - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-113778 Command that retrieve and install new CA certificates
  - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-119339 Memory leaks in IPA plugins


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
  - Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
  - Resolves:  RHEL-4895 ipa use systemd-sysusers
  - Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-10
changelog:
  - Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print
  - Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19
    Among others fixes ipmievd startup (fedora#2303185)


author: Phil Sutter <psutter@redhat.com> [1.8.11-4.el10]
changelog:
  - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
  - spec: Use bcond macro (Phil Sutter) [RHEL-67473]


author: Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
changelog:
  - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
  - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
changelog:
  - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
  - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]


author: Phil Sutter <psutter@redhat.com> [1.8.11-1.el10]
changelog:
  - Add requirement on kernel-modules-extra (Phil Sutter) [RHEL-65224]
  - Rebase onto upstream version 1.8.11 (Phil Sutter) [RHEL-66725]


author: Brian C. Lane <bcl@redhat.com> - 1.2.5-1
changelog:
  - New Version 1.2.5 (bcl)
    Resolves: RHEL-45005
  - testpyisomd5sum.py: Use a consistent iso size (bcl)
  - Remove quiet from iso creation, size seems wrong (bcl)
  - workflows: Move to Fedora 39 and checkout v4 (bcl)
  - Add support for riscv64 (davidlt)
  - workflows: Update to use actions/checkout (bcl)
  - Add a GitHub Action to run tests (bcl)
  - Add mips64 (wangray1021)
  - testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101803
  - Resolves: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102295


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118771
  - Resolves: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118771
  - Related: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142857
  - Resolves: RHEL-139565
  - Resolves: RHEL-131428
  - Resolves: RHEL-131441
  - Resolves: RHEL-142861
  - Resolves: RHEL-142815
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142857
  - Related: RHEL-139565
  - Related: RHEL-131428
  - Related: RHEL-131441
  - Related: RHEL-142861
  - Related: RHEL-142815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61276


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-4
changelog:
  - Revert incorrect automated Release change from 1:21.0.5.0.11-2.1
  - Set rpmrelease to 4
  - Remove copy-jdk-configs logic
  - Remove alternatives removal special handling
  - Move postun alternatives logic to preun
  - Remove --family arguments to alternatives --install
  - Precompute alternative priorities at build time
  - Remove extra newlines
  - Inline .gz for alternatives slave man pages
  - Unwrap alternatives --install lines
  - Remove set_if_needed_alternatives
  - Unroll alternatives --install loops
  - Remove exit 0 from alternatives scriptlets
  - Move alternatives installation from posttrans to post
  - Replace jrelnk alternative with sdkdir
  - Remove full version from uniquejavadocdir
  - Remove full version from uniquesuffix
  - Fix classes.jsa and classes_nocoops.jsa file-listed-twice warnings
  - Eliminate devel "failed to link [/usr/lib/jvm/java-21-openjdk] exists and it is not a symlink" warning
  - Eliminate javadoc-zip "failed to link [/usr/share/javadoc/java-21-openjdk.zip] exists and it is not a symlink" warning
  - Eliminate javadoc "failed to link [/usr/share/javadoc/java-21-openjdk] exists and it is not a symlink" warning
  - Take ownership of versioned jvmdir in javadoc, javadoc-zip subpackages
  - Make headless own /usr/share/doc/java-21-openjdk
  - Make javadoc-zip own /usr/share/javadoc/java-21-openjdk
  - Delete old conflicting links in pretrans for headless, javadoc and javadoc-zip
  - Use compatiblename not name in uniquejavadocdir and uniquesuffix
  - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps
  - Use RPM global macro for man page file extension and unwrap --slave lines
  - Comment on alternatives removal in preun and RPM scriptlet idiom
  - Remove unused family macros
  - Document priority_for
  - Consistently end scriptlets with exit 0
  - Resolves: RHEL-71920
  - Resolves: RHEL-71954
  - Resolves: RHEL-69321
  - Resolves: RHEL-69995
  - Resolves: RHEL-71924
  - Resolves: RHEL-68848


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-5
changelog:
  - Document rationale for gtk-update-icon-cache being in posttrans
  - Remove extra spaces in posttrans files section headers
  - Resolves: RHEL-71488


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-6
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74407


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - Bump tzdata requirement to 2024b for JDK-8339637
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73565
  - Resolves: RHEL-74005


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-2
changelog:
  - Attempt to avoid conflicts between subpackages
    - Make javadoc packages depend on headless package for legal documentation
    - Only include legal subdirectory in headless package, not demo, src & javadoc{,-zip}
    - Change javadoc-zip to just own the top-level directory, not include the entire subtree
  - Resolves: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-3
changelog:
  - Cleanup java_javadoc_rpo macro, removing unused argument and duplicated Requires
  - Related: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86986
  - Resolves: RHEL-86636


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Bump portablerelease to match riscv64 patched version
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-92631


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102686


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Introduce fakefeaturever to pretend we are java-25-openjdk ahead of time
  - Sync the copy of the portable specfile with the latest update
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:22.0.2.0.9-1
changelog:
  - Update to jdk-22.0.2+9 (GA)
  - Update release notes with features of JDK 22
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Sync the copy of the portable specfile with the latest update
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:23.0.2.0.7-1
changelog:
  - Update to jdk-23.0.2+7 (GA)
  - Update release notes with features of JDK 23
  - Sync the copy of the portable specfile with the latest update
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:24.0.2.0.12-1
changelog:
  - Update to jdk-24.0.2+12 (GA)
  - Update release notes with features of JDK 24
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Sync the copy of the portable specfile with the latest update
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Drop fakefeaturever now we have reached OpenJDK 25
  - Update release notes to 25.0.1+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Related: RHEL-120553


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-3
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128413
  - Resolves: RHEL-128409


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-4
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Resolves: RHEL-131896


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-5
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Resolves: RHEL-133733
  - Resolves: RHEL-133735
  - Resolves: RHEL-133763


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-6
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-133733
  - Related: RHEL-133735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139579
  - Resolves: RHEL-131430
  - Resolves: RHEL-131443
  - Resolves: RHEL-142855
  - Resolves: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139579
  - Related: RHEL-131430
  - Related: RHEL-131443
  - Related: RHEL-142855
  - Related: RHEL-142799


author: Čestmír Kalina <ckalina@redhat.com> - 0.29giteedfcb
changelog:
  - Bump release and update to the latest upstream version
    Fix DW_TAG_unspecified_type issue
    Resolves: RHEL-52280


author: Martin Osvald <mosvald@redhat.com> - 2.6.1-4
changelog:
  - Add missing changes to service files so kea starts as non-root
  - Fix startup failures during upgrade due to wrong permissions and
    ownership


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-20
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113472 - "cannot seek on data source" in TLS lftp sessions


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-3
changelog:
  - Fix creating MD RAID arrays without specifying bitmap localtion
    Resolves: RHEL-31379
  - crypto: Fix double free in bd_crypto_luks_remove_key
    Resolves: RHEL-31489
  - tests: Fix running tests without ntfsprogs
    Resolves: RHEL-32875


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Hans de Goede <hdegoede@redhat.com> - 0.3.1-3
changelog:
  - Add patches to fix pipewire keeping UVC cameras open all the time causing
    significant laptop battery drain:
    https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669


author: Kate Hsuan <hpa@redhat.com> - 0.3.2-2
changelog:
  - Disable lc-compliance
  - Removed the gtest dependency from the libcamera-tools package
  - Resolves: RHEL-73503


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.57.6-2
changelog:
  - Rebase to libguestfs 1.57.6
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.0-1
changelog:
  - Rebase to libguestfs 1.58.0
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-1
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-74200, RHEL-80679, RHEL-104216, RHEL-104427, RHEL-113843
      RHEL-118671, RHEL-122751, RHEL-126854, RHEL-126945, RHEL-128105
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-104238)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 11.1.0-1
changelog:
  - Rebased to libvirt-11.1.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7041, RHEL-7042, RHEL-7104, RHEL-7342, RHEL-20294
      RHEL-41264, RHEL-52493, RHEL-58933, RHEL-70656, RHEL-71042
      RHEL-71810, RHEL-72021, RHEL-72052, RHEL-72192, RHEL-72994
      RHEL-79088, RHEL-79460, RHEL-79465, RHEL-79953


author: Jiri Denemark <jdenemar@redhat.com> - 11.2.0-1
changelog:
  - Rebased to libvirt-11.2.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7035, RHEL-24046, RHEL-40077, RHEL-58151, RHEL-68043
      RHEL-71883, RHEL-72994, RHEL-77552, RHEL-80166, RHEL-80533
      RHEL-80688, RHEL-81731, RHEL-81890, RHEL-83148, RHEL-84257
      RHEL-84688
  - cpu_map: Install Ampere-1 ARM CPU models (RHEL-71662)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-6
changelog:
  - add support for dropping root privileges (disabled by default) (RHEL-12183)
  - create linuxptp user and /run/ptp directory


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.7-1
changelog:
  - Rebase to 10.11.7
  - Patch 10 removed, the main.ssl_cipher test has been fixed
    and re-enabled by upstream and now passes on all architectures


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Joe Orton <jorton@redhat.com> - 1.14.2-21
changelog:
  - restore plaintext password storage by default (per upstream)
  - restrict symbols exposed by DSOs built for httpd


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-3
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-5
changelog:
  - Resolves: RHEL-134484 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.1-3
changelog:
  - Resolves: RHEL-33742 - Disable ENGINE support by default
  - disable ENGINE support by default
  - add engine bcond


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-6
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-1417
  - alt-name: Remove alt-names when interface marked as absent. RHEL-126481
  - hsr: Automatically disable IP on hsr port. RHEL-100774
  - hsr: add support for configuring "interlink" property. RHEL-100766
  - Support referring alternative-name as port/parent/next-hop-interface.
    RHEL-126508
  - Support referring interface name using its alternative name. RHEL-126510


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.59-1
changelog:
  - Upgrade to 2.2.59
  - route: add support for lock-mtu option. RHEL-151844
  - iptunnel: introduce support for ipip/sit/ip6ip6/ipip6 tunnels. RHEL-79801
  - nm: Fix error when modify port list of down interface. RHEL-52334


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Joseph Marrero <jmarrero@redhat.com> - 2.23.0-6
changelog:
  - Add RPM macros to configure %_passwd_path and %_group_path
  - Fixes user/group lookup for packages with non-root file ownership
  - See: https://github.com/rpm-software-management/rpm/pull/3672


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30345]
  - Resolves: [RHEL-30345]
    ([ESXi][RHEL10]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-36292]
  - Resolves: RHEL-36292
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-3
changelog:
  - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732]
  - Resolves: RHEL-40732
    (Drop unneeded gdk-pixbuf-xlib dependency)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.1 [RHEL-45549]
  - Resolves: RHEL-45549
    ([ESXi][RHEL10] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63092]
  - Resolves: RHEL-63092
    ([ESXi][RHEL10] open-vm-tools version 12.5.0 has been released - please rebase)


author: Bo Yang <boyang@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99156]
  - Resolves: RHEL-99156
    ([ESXi][RHEL10] open-vm-tools version 13.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-2
changelog:
  - ovt-Handle-new-cloud-init-error-code-and-status.patch [RHEL-99781]
  - ovt-Address-CVE-2025-41244.patch [RHEL-117382]
  - Resolves: RHEL-99781
    (Cloud-init receives TERM signal from PID 1 in the middle of running user data [rhel-10])
  - Resolves: RHEL-117382
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.2])


author: Bo Yang <boyang@redhat.com> - 13.0.5-1
changelog:
  - Rebase to 13.0.5 [RHEL-118504]
  - Resolves: RHEL-118504
    ([ESXi][RHEL10] open-vm-tools version 13.0.5 has been released - please rebase)


author: Bo Yang <boyang@redhat.com> - 13.0.10-1
changelog:
  - Rebase to 13.0.10 [RHEL-144577]
  - Resolves: RHEL-144577
    ([ESXi][RHEL10] open-vm-tools version 13.0.10 has been released - please rebase)


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Matthew Burket <mburket@redhat.com> - 1:1.4.3-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133978)
  - Add the ability to show rule details in output (RHEL-104651)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-21
changelog:
  - Implement obtaining Kerberos tickets on behalf of user on SSH authentication
    Resolves: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
changelog:
  - Remove recommendation of p11-kit
    Resolves: RHEL-139070
  - Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
    in sshd_config should count when defined multiple times
    Resolves: RHEL-150365
  - Fix mistracking of MaxStartups process exits in some situations
    Resolves: RHEL-121768
  - Fix GSSAPI authentication indicator issues found by AI
    Resolves: RHEL-154309
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155813


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.5.3-2
changelog:
  - We run tests with specially crafted OpenSSL configuration, not the system one
    Resolves: RHEL-25983


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Chris Lumens <clumens@redhat.com> - 3.0.1-4
changelog:
  - Fix promoting instances of a cloned resource
  - Handle large timeouts correctly in crm_resource --wait
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-120932
  - Resolves: RHEL-86148
  - Resolves: RHEL-114895


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Nathan Scott <nathans@redhat.com> - 6.1.1-1
changelog:
  - Improve pmlogcheck performance with compressed archives (RHEL-3930)
  - Fix pcp-ss(1) utility handling of duplicate sources (RHEL-7498)
  - Fine-tune PCP python wrapper path resolution (RHEL-7509)
  - Rebase to latest stable version of PCP (RHEL-2317)


author: Nathan Scott <nathans@redhat.com> - 6.1.1-2
changelog:
  - Fix pcp-ss(1) default handling of listen state (RHEL-17335)
  - Added pcp package dependency on diffutils for diffstat(1)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-196.el10]
changelog:
  - btrfs : Enable btrfs module and backport btrfs fixes from upstream v6.12 (Ravi Singh) [RHEL-140878]
  - btrfs: don't rewrite ret from inode_permission (Ravi Singh) [RHEL-140878]
  - btrfs: don't log conflicting inode if it's a dir moved in the current transaction (Ravi Singh) [RHEL-140878]
  - btrfs: scrub: always update btrfs_scrub_progress::last_physical (Ravi Singh) [RHEL-140878]
  - btrfs: fix memory leak of fs_devices in degraded seed device path (Ravi Singh) [RHEL-140878]
  - btrfs: fix a potential path leak in print_data_reloc_error() (Ravi Singh) [RHEL-140878]
  - btrfs: do not skip logging new dentries when logging a new name (Ravi Singh) [RHEL-140878]
  - btrfs: fix leaf leak in an error path in btrfs_del_items() (Ravi Singh) [RHEL-140878]
  - btrfs: release root after error in data_reloc_print_warning_inode() (Ravi Singh) [RHEL-140878]
  - btrfs: do not update last_log_commit when logging inode due to a new name (Ravi Singh) [RHEL-140878]
  - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: fix conventional zone capacity calculation (Ravi Singh) [RHEL-140878]
  - btrfs: ensure no dirty metadata is written back for an fs with errors (Ravi Singh) [RHEL-140878]
  - btrfs: mark dirty extent range for out of bound prealloc extents (Ravi Singh) [RHEL-140878]
  - btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation (Ravi Singh) [RHEL-140878]
  - btrfs: tree-checker: fix bounds check in check_inode_extref() (Ravi Singh) [RHEL-140878]
  - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() (Ravi Singh) [RHEL-140878]
  - btrfs: tree-checker: add inode extref checks (Ravi Singh) [RHEL-140878]
  - btrfs: abort transaction if we fail to update inode in log replay dir fixup (Ravi Singh) [RHEL-140878]
  - btrfs: use level argument in log tree walk callback replay_one_buffer() (Ravi Singh) [RHEL-140878]
  - btrfs: always drop log root tree reference in btrfs_replay_log() (Ravi Singh) [RHEL-140878]
  - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: refine extent allocator hint selection (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: return error from btrfs_zone_finish_endio() (Ravi Singh) [RHEL-140878]
  - btrfs: abort transaction in the process_one_buffer() log tree walk callback (Ravi Singh) [RHEL-140878]
  - btrfs: abort transaction on specific error places when walking log tree (Ravi Singh) [RHEL-140878]
  - btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots() (Ravi Singh) [RHEL-140878]
  - btrfs: do not assert we found block group item when creating free space tree (Ravi Singh) [RHEL-140878]
  - btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST (Ravi Singh) [RHEL-140878]
  - btrfs: fix incorrect readahead expansion length (Ravi Singh) [RHEL-140878]
  - btrfs: fix memory leak on duplicated memory in the qgroup assign ioctl (Ravi Singh) [RHEL-140878]
  - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running (Ravi Singh) [RHEL-140878]
  - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() (Ravi Singh) [RHEL-140878]
  - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() (Ravi Singh) [RHEL-140878]
  - btrfs: return any hit error from extent_writepage_io() (Ravi Singh) [RHEL-140878]
  - btrfs: ref-verify: handle damaged extent root tree (Ravi Singh) [RHEL-140878]
  - btrfs: don't allow adding block device of less than 1 MB (Ravi Singh) [RHEL-140878]
  - btrfs: tree-checker: fix the incorrect inode ref size check (Ravi Singh) [RHEL-140878]
  - btrfs: fix invalid extref key setup when replaying dentry (Ravi Singh) [RHEL-140878]
  - btrfs: fix corruption reading compressed range when block size is smaller than page size (Ravi Singh) [RHEL-140878]
  - btrfs: use readahead_expand() on compressed extents (Ravi Singh) [RHEL-140878]
  - btrfs: fix subvolume deletion lockup caused by inodes xarray race (Ravi Singh) [RHEL-140878]
  - btrfs: fix squota compressed stats leak (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: skip ZONE FINISH of conventional zones (Ravi Singh) [RHEL-140878]
  - btrfs: avoid load/store tearing races when checking if an inode was logged (Ravi Singh) [RHEL-140878]
  - btrfs: fix race between setting last_dir_index_offset and inode logging (Ravi Singh) [RHEL-140878]
  - btrfs: fix race between logging inode and checking if it was logged before (Ravi Singh) [RHEL-140878]
  - btrfs: subpage: keep TOWRITE tag until folio is cleaned (Ravi Singh) [RHEL-140878]
  - btrfs: send: make fs_path_len() inline and constify its argument (Ravi Singh) [RHEL-140878]
  - btrfs: send: use fallocate for hole punching with send stream v2 (Ravi Singh) [RHEL-140878]
  - btrfs: send: avoid path allocation for the current inode when issuing commands (Ravi Singh) [RHEL-140878]
  - btrfs: send: keep the current inode's path cached (Ravi Singh) [RHEL-140878]
  - btrfs: send: add and use helper to rename current inode when processing refs (Ravi Singh) [RHEL-140878]
  - btrfs: send: only use boolean variables at process_recorded_refs() (Ravi Singh) [RHEL-140878]
  - btrfs: send: factor out common logic when sending xattrs (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: requeue to unused block group list if zone finish failed (Ravi Singh) [RHEL-140878]
  - btrfs: codify pattern for adding block_group to bg_list (Ravi Singh) [RHEL-140878]
  - btrfs: explicitly ref count block_group on new_bgs list (Ravi Singh) [RHEL-140878]
  - btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() (Ravi Singh) [RHEL-140878]
  - btrfs: always abort transaction on failure to add block group to free space tree (Ravi Singh) [RHEL-140878]
  - btrfs: move transaction aborts to the error site in add_block_group_free_space() (Ravi Singh) [RHEL-140878]
  - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (Ravi Singh) [RHEL-140878]
  - btrfs: qgroup: drop unused parameter fs_info from __del_qgroup_rb() (Ravi Singh) [RHEL-140878]
  - btrfs: fix printing of mount info messages for NODATACOW/NODATASUM (Ravi Singh) [RHEL-140878]
  - btrfs: restore mount option info messages during mount (Ravi Singh) [RHEL-140878]
  - btrfs: fix incorrect log message for nobarrier mount option (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: fix write time activation failure for metadata block group (Ravi Singh) [RHEL-140878]
  - btrfs: do not allow relocation of partially dropped subvolumes (Ravi Singh) [RHEL-140878]
  - btrfs: fix iteration bug in __qgroup_excl_accounting() (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: do not select metadata BG as finish target (Ravi Singh) [RHEL-140878]
  - btrfs: error on missing block group when unaccounting log tree extent buffers (Ravi Singh) [RHEL-140878]
  - btrfs: fix log tree replay failure due to file with 0 links and extents (Ravi Singh) [RHEL-140878]
  - btrfs: clear dirty status from extent buffer on error at insert_new_root() (Ravi Singh) [RHEL-140878]
  - btrfs: don't skip remaining extrefs if dir not found during log replay (Ravi Singh) [RHEL-140878]
  - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (Ravi Singh) [RHEL-140878]
  - btrfs: populate otime when logging an inode item (Ravi Singh) [RHEL-140878]
  - btrfs: fix ssd_spread overallocation (Ravi Singh) [RHEL-140878]
  - btrfs: don't ignore inode missing when replaying log tree (Ravi Singh) [RHEL-140878]
  - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: do not remove unwritten non-data block group (Ravi Singh) [RHEL-140878]
  - btrfs: abort transaction during log replay if walk_log_tree() failed (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: use filesystem size not disk size for reclaim decision (Ravi Singh) [RHEL-140878]
  - btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (Ravi Singh) [RHEL-140878]
  - btrfs: fix assertion when building free space tree (Ravi Singh) [RHEL-140878]
  - btrfs: fix wrong start offset for delalloc space release during mmap write (Ravi Singh) [RHEL-140878]
  - btrfs: prepare btrfs_page_mkwrite() for large folios (Ravi Singh) [RHEL-140878]
  - btrfs: use btrfs_record_snapshot_destroy() during rmdir (Ravi Singh) [RHEL-140878]
  - btrfs: propagate last_unlink_trans earlier when doing a rmdir (Ravi Singh) [RHEL-140878]
  - btrfs: record new subvolume in parent dir earlier to avoid dir logging races (Ravi Singh) [RHEL-140878]
  - btrfs: fix inode lookup error handling during log replay (Ravi Singh) [RHEL-140878]
  - btrfs: fix invalid inode pointer dereferences during log replay (Ravi Singh) [RHEL-140878]
  - btrfs: return a btrfs_inode from read_one_inode() (Ravi Singh) [RHEL-140878]
  - btrfs: return a btrfs_inode from btrfs_iget_logging() (Ravi Singh) [RHEL-140878]
  - btrfs: fix iteration of extrefs during log replay (Ravi Singh) [RHEL-140878]
  - btrfs: fix missing error handling when searching for inode refs during log replay (Ravi Singh) [RHEL-140878]
  - btrfs: fix use-after-free on inode when scanning root during em shrinking (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: fix extent range end unlock in cow_file_range() (Ravi Singh) [RHEL-140878]
  - btrfs: do regular iput instead of delayed iput during extent map shrinking (Ravi Singh) [RHEL-140878]
  - btrfs: make the extent map shrinker run asynchronously as a work queue job (Ravi Singh) [RHEL-140878]
  - btrfs: skip inodes without loaded extent maps when shrinking extent maps (Ravi Singh) [RHEL-140878]
  - btrfs: update superblock's device bytes_used when dropping chunk (Ravi Singh) [RHEL-140878]
  - btrfs: fix a race between renames and directory logging (Ravi Singh) [RHEL-140878]
  - btrfs: fix qgroup reservation leak on failure to allocate ordered extent (Ravi Singh) [RHEL-140878]
  - btrfs: use unsigned types for constants defined as bit shifts (Ravi Singh) [RHEL-140878]
  - btrfs: factor out nocow ordered extent and extent map generation into a helper (Ravi Singh) [RHEL-140878]
  - btrfs: handle csum tree error with rescue=ibadroots correctly (Ravi Singh) [RHEL-140878]
  - btrfs: exit after state split error at set_extent_bit() (Ravi Singh) [RHEL-140878]
  - btrfs: exit after state insertion failure at btrfs_convert_extent_bit() (Ravi Singh) [RHEL-140878]
  - btrfs: fix invalid data space release when truncating block in NOCOW mode (Ravi Singh) [RHEL-140878]
  - btrfs: scrub: fix a wrong error type when metadata bytenr mismatches (Ravi Singh) [RHEL-140878]
  - btrfs: scrub: update device stats when an error is detected (Ravi Singh) [RHEL-140878]
  - btrfs: avoid NULL pointer dereference if no valid csum tree (Ravi Singh) [RHEL-140878]
  - btrfs: handle empty eb->folios in num_extent_folios() (Ravi Singh) [RHEL-140878]
  - btrfs: compression: adjust cb->compressed_folios allocation type (Ravi Singh) [RHEL-140878]
  - btrfs: send: return -ENAMETOOLONG when attempting a path that is too long (Ravi Singh) [RHEL-140878]
  - btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() (Ravi Singh) [RHEL-140878]
  - btrfs: fix non-empty delayed iputs list on unmount due to async workers (Ravi Singh) [RHEL-140878]
  - btrfs: run btrfs_error_commit_super() early (Ravi Singh) [RHEL-140878]
  - btrfs: avoid linker error in btrfs_find_create_tree_block() (Ravi Singh) [RHEL-140878]
  - btrfs: make btrfs_discard_workfn() block_group ref explicit (Ravi Singh) [RHEL-140878]
  - btrfs: add back warning for mount option commit values exceeding 300 (Ravi Singh) [RHEL-140878]
  - btrfs: fix folio leak in submit_one_async_extent() (Ravi Singh) [RHEL-140878]
  - btrfs: fix discard worker infinite loop after disabling discard (Ravi Singh) [RHEL-140878]
  - Revert "btrfs: canonicalize the device path before adding it" (Ravi Singh) [RHEL-140878]
  - btrfs: fix COW handling in run_delalloc_nocow() (Ravi Singh) [RHEL-140878]
  - btrfs: adjust subpage bit start based on sectorsize (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: return EIO on RAID1 block group write pointer mismatch (Ravi Singh) [RHEL-140878]
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range() (Ravi Singh) [RHEL-140878]
  - btrfs: correctly escape subvol in btrfs_show_options() (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: fix zone finishing with missing devices (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: fix zone activation with missing devices (Ravi Singh) [RHEL-140878]
  - btrfs: tests: fix chunk map leak after failure to add it to the tree (Ravi Singh) [RHEL-140878]
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers (Ravi Singh) [RHEL-140878]
  - btrfs: harden block_group::bg_list against list_del() races (Ravi Singh) [RHEL-140878]
  - btrfs: fix two misuses of folio_shift() (Ravi Singh) [RHEL-140878]
  - btrfs: avoid starting new transaction when cleaning qgroup during subvolume drop (Ravi Singh) [RHEL-140878]
  - btrfs: fix a leaked chunk map issue in read_one_chunk() (Ravi Singh) [RHEL-140878]
  - btrfs: fix data overwriting bug during buffered write when block size < page size (Ravi Singh) [RHEL-140878]
  - btrfs: fix double accounting race when extent_writepage_io() failed (Ravi Singh) [RHEL-140878]
  - btrfs: fix double accounting race when btrfs_run_delalloc_range() failed (Ravi Singh) [RHEL-140878]
  - btrfs: use btrfs_inode in extent_writepage() (Ravi Singh) [RHEL-140878]
  - btrfs: rename btrfs_folio_(set|start|end)_writer_lock() (Ravi Singh) [RHEL-140878]
  - btrfs: unify to use writer locks for subpage locking (Ravi Singh) [RHEL-140878]
  - btrfs: remove unused btrfs_folio_start_writer_lock() (Ravi Singh) [RHEL-140878]
  - btrfs: mark all dirty sectors as locked inside writepage_delalloc() (Ravi Singh) [RHEL-140878]
  - btrfs: move the delalloc range bitmap search into extent_io.c (Ravi Singh) [RHEL-140878]
  - btrfs: do not assume the full page range is not dirty in extent_writepage_io() (Ravi Singh) [RHEL-140878]
  - btrfs: fix stale page cache after race between readahead and direct IO write (Ravi Singh) [RHEL-140878]
  - btrfs: rename __get_extent_map() and pass btrfs_inode (Ravi Singh) [RHEL-140878]
  - btrfs: fix hole expansion when writing at an offset beyond EOF (Ravi Singh) [RHEL-140878]
  - Revert "btrfs: avoid monopolizing a core when activating a swap file" (Ravi Singh) [RHEL-140878]
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling (Ravi Singh) [RHEL-140878]
  - btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents() (Ravi Singh) [RHEL-140878]
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Ravi Singh) [RHEL-140878]
  - btrfs: do not output error message if a qgroup has been already cleaned up (Ravi Singh) [RHEL-140878]
  - btrfs: fix assertion failure when splitting ordered extent after transaction abort (Ravi Singh) [RHEL-140878]
  - btrfs: do proper folio cleanup when run_delalloc_nocow() failed (Ravi Singh) [RHEL-140878]
  - btrfs: output the reason for open_ctree() failure (Ravi Singh) [RHEL-140878]
  - btrfs: subpage: fix the bitmap dump of the locked flags (Ravi Singh) [RHEL-140878]
  - btrfs: improve the warning and error message for btrfs_remove_qgroup() (Ravi Singh) [RHEL-140878]
  - btrfs: add the missing error handling inside get_canonical_dev_path (Ravi Singh) [RHEL-140878]
  - btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path (Ravi Singh) [RHEL-140878]
  - btrfs: avoid NULL pointer dereference if no valid extent tree (Ravi Singh) [RHEL-140878]
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Ravi Singh) [RHEL-140878]
  - btrfs: allow swap activation to be interruptible (Ravi Singh) [RHEL-140878]
  - btrfs: use bio_is_zone_append() in the completion handler (Ravi Singh) [RHEL-140878]
  - btrfs: check folio mapping after unlock in relocate_one_folio() (Ravi Singh) [RHEL-140878]
  - btrfs: check folio mapping after unlock in put_file_data() (Ravi Singh) [RHEL-140878]
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Ravi Singh) [RHEL-140878]
  - btrfs: sysfs: fix direct super block member reads (Ravi Singh) [RHEL-140878]
  - btrfs: fix transaction atomicity bug when enabling simple quotas (Ravi Singh) [RHEL-140878]
  - btrfs: fix swap file activation failure due to extents that used to be shared (Ravi Singh) [RHEL-140878]
  - btrfs: avoid monopolizing a core when activating a swap file (Ravi Singh) [RHEL-140878]
  - btrfs: fix race with memory mapped writes when activating swap file (Ravi Singh) [RHEL-140878]
  - btrfs: tree-checker: reject inline extent items with 0 ref count (Ravi Singh) [RHEL-140878]
  - btrfs: fix improper generation check in snapshot delete (Ravi Singh) [RHEL-140878]
  - btrfs: split bios to the fs sector size boundary (Ravi Singh) [RHEL-140878]
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Ravi Singh) [RHEL-140878]
  - btrfs: fix mount failure due to remount races (Ravi Singh) [RHEL-140878]
  - btrfs: drop unused parameter data from btrfs_fill_super() (Ravi Singh) [RHEL-140878]
  - btrfs: drop unused parameter options from open_ctree() (Ravi Singh) [RHEL-140878]
  - btrfs: do not clear read-only when adding sprout device (Ravi Singh) [RHEL-140878]
  - btrfs: canonicalize the device path before adding it (Ravi Singh) [RHEL-140878]
  - btrfs: avoid unnecessary device path update for the same device (Ravi Singh) [RHEL-140878]
  - btrfs: don't take dev_replace rwsem on task already holding it (Ravi Singh) [RHEL-140878]
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Ravi Singh) [RHEL-140878]
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Ravi Singh) [RHEL-140878]
  - btrfs: don't loop for nowait writes when checking for cross references (Ravi Singh) [RHEL-140878]
  - btrfs: fix use-after-free in btrfs_encoded_read_endio() (Ravi Singh) [RHEL-140878]
  - btrfs: move priv off stack in btrfs_encoded_read_regular_fill_pages() (Ravi Singh) [RHEL-140878]
  - btrfs: change btrfs_encoded_read() so that reading of extent is done by caller (Ravi Singh) [RHEL-140878]
  - btrfs: drop unused parameter file_offset from btrfs_encoded_read_regular_fill_pages() (Ravi Singh) [RHEL-140878]
  - mptcp: schedule rtx timer only after pushing data (Davide Caratti) [RHEL-133461]
  - mptcp: fix premature close in case of fallback (Davide Caratti) [RHEL-133461]
  - mptcp: fix ack generation for fallback msk (Davide Caratti) [RHEL-133461]
  - mptcp: drop bogus optimization in __mptcp_check_push() (Davide Caratti) [RHEL-133461]
  - mptcp: ensure context reset on disconnect() (Davide Caratti) [RHEL-133461] {CVE-2025-71144}
  - mptcp: fallback earlier on simult connection (Davide Caratti) [RHEL-133461] {CVE-2025-71088}
  - mptcp: avoid deadlock on fallback while reinjecting (Davide Caratti) [RHEL-133461] {CVE-2025-71126}
  - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). (Davide Caratti) [RHEL-133461] {CVE-2025-68291}
  - mptcp: fix duplicate reset on fastclose (Davide Caratti) [RHEL-133461]
  - mptcp: decouple mptcp fastclose from tcp close (Davide Caratti) [RHEL-133461]
  - mptcp: clear scheduled subflows on retransmit (Davide Caratti) [RHEL-133461]
  - mptcp: do not fallback when OoO is present (Davide Caratti) [RHEL-133461]
  - mptcp: avoid unneeded subflow-level drops (Davide Caratti) [RHEL-133461]
  - mptcp: fix a race in mptcp_pm_del_add_timer() (Davide Caratti) [RHEL-133461 RHEL-139336] {CVE-2025-40257}
  - mptcp: Fix proto fallback detection with BPF (Davide Caratti) [RHEL-133461] {CVE-2025-68227}
  - mptcp: Disallow MPTCP subflows from sockmap (Davide Caratti) [RHEL-133461]
  - mptcp: restore window probe (Davide Caratti) [RHEL-133461]
  - mptcp: fix MSG_PEEK stream corruption (Davide Caratti) [RHEL-133461]
  - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR (Davide Caratti) [RHEL-133461]
  - mptcp: reset blackhole on success with non-loopback ifaces (Davide Caratti) [RHEL-133461]
  - mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129046 RHEL-133461] {CVE-2025-40133}
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137704] {CVE-2025-38403}
  - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_6XXX (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix warning on adf_pfvf_pf_proto.c (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add bank state save and restore for qat_420xx (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix parameter order used in ICP_QAT_FW_COMN_FLAGS_BUILD (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix duplicate restarting msg during AER error (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add WQ_PERCPU to alloc_workqueue users (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - use simple_strtoull to improve qat_uclo_parse_num (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - Return pointer directly in adf_ctl_alloc_resources (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add command queue telemetry counters for GEN6 (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add ring buffer idle telemetry counter for GEN6 (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - make adf_dev_autoreset() static (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - refactor ring-related debug functions (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix seq_file position update in adf_ring_next() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix DMA direction for compression on GEN2 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - flush misc workqueue during device shutdown (Vladislav Dronov) [RHEL-103562 RHEL-94928] {CVE-2025-39721}
  - crypto: qat - enable rate limiting feature for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add compression slice count for rate limiting (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add get_svc_slice_cnt() in device data structure (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add adf_rl_get_num_svc_aes() in rate limiting (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - relocate service related functions (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - consolidate service enums (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add decompression service for rate limiting (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - validate service in rate limiting sysfs api (Vladislav Dronov) [RHEL-94928]
  - Documentation: qat: update debugfs-driver-qat_telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - enable telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add decompression service to telemetry (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - enable power management debugfs for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - relocate power management debugfs helper APIs (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix virtual channel configuration for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add live migration enablers for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - relocate and rename bank state structure definition (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - relocate bank state helper functions (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - replace CHECK_STAT macro with static inline function (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - use pr_fmt() in adf_gen4_hw_data.c (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - disable ZUC-256 capability for QAT GEN5 (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - restore ASYM service support for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - remove duplicate masking for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - lower priority for skcipher and aead algorithms (Vladislav Dronov) [RHEL-94928]
  - Documentation: qat: update sysfs-driver-qat for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add support for decompression service to GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix state restore for banks with exceptions (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - allow enabling VFs in the absence of IOMMU (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - use unmanaged allocation for dc_data (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add missing header inclusion (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - enable reporting of error counters for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - enable RAS support for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat/qat_6xxx - Fix NULL vs IS_ERR() check in adf_probe() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add qat_6xxx driver (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add firmware headers for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - update firmware api (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - export adf_init_admin_pm() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - expose configuration functions (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - export adf_get_service_mask() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add GEN6 firmware loader (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - refactor FW signing algorithm (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - use pr_fmt() in qat uclo.c (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - refactor compression template logic (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - rename and relocate timer logic (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - include qat_common in top Makefile (Vladislav Dronov) [RHEL-94928]
  - sprintf.h requires stdarg.h (Vladislav Dronov) [RHEL-94928]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-197.el10]
changelog:
  - sched: Fix tracepoint called from set_tsk_need_resched() more (Phil Auld) [RHEL-145178]
  - soc/tegra: pmc: Don't fail if "aotag" is not present (CKI Backport Bot) [RHEL-140002]
  - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation (Sabrina Dubroca) [RHEL-108332]
  - xfrm: Determine inner GSO type from packet inner protocol (Sabrina Dubroca) [RHEL-108332]
  - xfrm: Check inner packet family directly from skb_dst (Sabrina Dubroca) [RHEL-108332]
  - xfrm: fix offloading of cross-family tunnels (Sabrina Dubroca) [RHEL-108332]
  - udp: also consider secpath when evaluating ipsec use for checksumming (Sabrina Dubroca) [RHEL-108332]
  - xfrm: bring back device check in validate_xmit_xfrm (Sabrina Dubroca) [RHEL-108332]
  - xfrm: restore GSO for SW crypto (Sabrina Dubroca) [RHEL-108332]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-198.el10]
changelog:
  - s390/cio: Update purge function to unregister the unused subchannels (Mete Durlu) [RHEL-145335]
  - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145336]
  - redhat/configs: Enable CONFIG_PTP_S390 (Mete Durlu) [RHEL-141647]
  - s390/time: Add PtP driver (Mete Durlu) [RHEL-141647]
  - s390/time: Add clocksource id to TOD clock (Mete Durlu) [RHEL-141647]
  - vhost: enable VHOST_FORK_OWNER_KTHREAD (Cindy Lu) [RHEL-58639]
  - config : enable VHOST_ENABLE_FORK_OWNER_CONTROL (Cindy Lu) [RHEL-58639]
  - vhost: Fix ioctl # for VHOST_[GS]ET_FORK_FROM_OWNER (Cindy Lu) [RHEL-58639]
  - vhost: Fix kthread worker cgroup failure handling (Cindy Lu) [RHEL-58639]
  - vhost: Reintroduce kthread API and add mode selection (Cindy Lu) [RHEL-58639]
  - selftests/bpf: Clobber a lot of registers in tailcall_bpf2bpf_hierarchy tests (Gregory Bell) [RHEL-127629]
  - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG (Gregory Bell) [RHEL-127629]
  - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL (Gregory Bell) [RHEL-127629]
  - s390/bpf: Do not write tail call counter into helper and kfunc frames (Gregory Bell) [RHEL-127629]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-199.el10]
changelog:
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [RHEL-106984]
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [RHEL-106984]
  - s390/drivers: Remove unnecessary include <linux/export.h> (Mete Durlu) [RHEL-99994]
  - scsi: zfcp: Simplify workqueue allocation (Mete Durlu) [RHEL-99994]
  - s390/zfcp: Remove outdated email address (Mete Durlu) [RHEL-99994]
  - redhat/configs: rename CONFIG_QCOM_QFPROM to CONFIG_NVMEM_QCOM_QFPROM (Eric Chanudet) [RHEL-144943]
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144337] {CVE-2026-22998}
  - redhat: add usbio kmod placement rule (Jan Stancek) [RHEL-139637]
  - net: ipv4: convert ip_rcv_options to drop reasons (Antoine Tenart) [RHEL-139232]
  - net: ipv4: simplify drop reason handling in ip_rcv_finish_core (Antoine Tenart) [RHEL-139232]
  - net: ipv4: make udp_v4_early_demux explicitly return drop reason (Antoine Tenart) [RHEL-139232]
  - tcp: prefer sk_skb_reason_drop() (Antoine Tenart) [RHEL-139232]
  - net/sched: Add precise drop reason for pfifo_fast queue overflows (Antoine Tenart) [RHEL-139232]
  - net: track pfmemalloc drops via SKB_DROP_REASON_PFMEMALLOC (Antoine Tenart) [RHEL-139232]
  - net: arp: use kfree_skb_reason() in arp_rcv() (Antoine Tenart) [RHEL-139232]
  - can: add drop reasons in CAN protocols receive path (Antoine Tenart) [RHEL-139232]
  - can: add drop reasons in the receive path of AF_CAN (Antoine Tenart) [RHEL-139232]
  - net: neigh: use kfree_skb_reason() in neigh_resolve_output() and neigh_connected_output() (Antoine Tenart) [RHEL-139232]
  - net: flush_backlog() small changes (Antoine Tenart) [RHEL-139232]
  - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix DP no audio issue (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/pm: force send pcie parmater on navi1x (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/pm: fix wrong pcie parameter on navi1x (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: shrink struct members (Anusha Srivatsa) [RHEL-142315]
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Fix enable/disable order (Anusha Srivatsa) [RHEL-142315]
  - drm/atomic-helper: Export and namespace some functions (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: Fix query for VPE block_type and ip_count (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Apply e4479aecf658 to dml (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable" (Anusha Srivatsa) [RHEL-142315]
  - nouveau: don't attempt fwsec on sb on newer platforms. (Anusha Srivatsa) [RHEL-142315]
  - drm/imagination: Disallow exporting of PM/FW protected objects (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (Anusha Srivatsa) [RHEL-142315]
  - drm/pagemap, drm/xe: Ensure that the devmem allocation is idle before use (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/svm: Fix a debug printout (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Drop preempt-fences when destroying imported dma-bufs. (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Use usleep_range for accurate long-running workload timeslicing (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Adjust long-running workload timeslices to reasonable values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/eustall: Disallow 0 EU stall property values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Disallow 0 OA property values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (Anusha Srivatsa) [RHEL-142315]
  - drm: Fix object leak in DRM_IOCTL_GEM_CHANGE_HANDLE (Anusha Srivatsa) [RHEL-142315]
  - drm/mgag200: Fix big-endian support (Anusha Srivatsa) [RHEL-142315]
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (Anusha Srivatsa) [RHEL-142315]
  - drm/i915: Fix format string truncation warning (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Trap handler support for expert scheduling mode (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: bump minimum vgpr size for gfx1151 (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau/gsp: Allocate fwsec-sb at boot (Anusha Srivatsa) [RHEL-142315]
  - drm/bridge: ti-sn65dsi83: ignore PLL_UNLOCK errors (Anusha Srivatsa) [RHEL-142315]
  - drm/amd: Fix unbind/rebind for VCN 4.0.5 (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (Anusha Srivatsa) [RHEL-142315]
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (Anusha Srivatsa) [RHEL-142315]
  - drm/buddy: Separate clear and dirty free block trees (Anusha Srivatsa) [RHEL-142315]
  - drm/buddy: Optimize free block management with RB tree (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/sdma6: Update SDMA 6.0.3 FW version to include UMQ protected-fence fix (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: Forward VMID reservation errors (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/amd: Skip power ungate during suspend for VPE" (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/guc: READ/WRITE_ONCE g2h_fence->done (Anusha Srivatsa) [RHEL-142315]
  - drm/gem-shmem: Fix the MODULE_LICENSE() string (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: don't attach the tlb fence for SI (Anusha Srivatsa) [RHEL-142315]
  - drm/displayid: add quirk to ignore DisplayID checksum errors (Anusha Srivatsa) [RHEL-142315]
  - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (Anusha Srivatsa) [RHEL-142315]
  - drm: nova: depend on CONFIG_64BIT (Anusha Srivatsa) [RHEL-142315]
  - drm/displayid: pass iter to drm_find_displayid_extension() (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix scratch registers offsets for DCN351 (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix scratch registers offsets for DCN35 (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/amd/display: Fix pbn to kbps Conversion" (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Always set OAG_OAGLBCTXCTRL_COUNTER_RESUME (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: fix a job->pasid access race in gpu recovery (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Restore engine registers before restarting schedulers after GT reset (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Increase TDF timeout (Anusha Srivatsa) [RHEL-142315]
  - drm/me/gsc: mei interrupt top half should be in irq disabled context (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: fix drm_gpusvm_init() arguments (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Apply Wa_14020316580 in xe_gt_idle_enable_pg() (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Fix freq kobject leak on sysfs_create_files failure (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: Handle EDEADLK in set_up_atomic_state() (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: Handle EDEADLK in drm_test_check_valid_clones() (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: hdmi: Handle drm_kunit_helper_enable_crtc_connector() returning EDEADLK (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation (Anusha Srivatsa) [RHEL-142315]
  - drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init (Anusha Srivatsa) [RHEL-142315]
  - drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc() (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/fbdev: use the same 64-byte stride alignment as i915 (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Use huge page size to check split svm range alignment (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: fix circular dep oops from vendored i2c encoder (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: refactor deprecated strcpy (Anusha Srivatsa) [RHEL-142315]
  - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: novatek-nt35560: avoid on-stack device structure (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Prevent potential UAF in group creation (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: assign AID to uuid in topology for SPX mode (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Avoid adding of kernel BOs to extobj list (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: restrict the flush page to a 32-bit address (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix potential memleak of vma structure (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix UAF on kernel BO VA nodes (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix race with suspend during unplug (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix UAF race between device unplug and FW event processing (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix group_free_queue() for partially initialized queues (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Handle errors returned by drm_sched_entity_init() (Anusha Srivatsa) [RHEL-142315]
  - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix race condition when unbinding BOs (Anusha Srivatsa) [RHEL-142315]
  - drm: nova: select NOVA_CORE (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Remove skip of dma unmap for imported buffers (Anusha Srivatsa) [RHEL-142315]
  - drm/rcar-du: dsi: Fix missing parameter in RXSETR_...EN macros (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/userq: fix SDMA and compute validation (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: add userq object va track helpers (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix race condition when mapping dmabuf (Anusha Srivatsa) [RHEL-142315]
  - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() (Anusha Srivatsa) [RHEL-142315]
  - drm/vgem-fence: Fix potential deadlock on release (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix DCT active percent format (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Rework bind/unbind of imported buffers (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: visionox-rm69299: Don't clear all mode flags (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail (Anusha Srivatsa) [RHEL-142315]
  - lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-138056]
  - lib/freader: support reading more than 2 folios (Waiman Long) [RHEL-138056]
  - lib: move freader into buildid.h (Waiman Long) [RHEL-138056]
  - sfc: fix potential memory leak in efx_mae_process_mport() (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: replace min/max nesting with clamp() (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - PCI/ERR: Remove remnants of .link_reset() callback (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: unfix not-a-typo in comment (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - net: Fix typos [sfc] (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: falcon: refactor and document ef4_ethtool_get_rxfh_fields (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: siena: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138021] {CVE-2025-38415}
  - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138021] {CVE-2025-38415}
  - erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137980] {CVE-2025-38172}
  - perf/x86/intel/cstate: Add Clearwater Forest support (Michael Petlan) [RHEL-45066]
  - cpuidle: governors: menu: Select polling state in some more cases (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Rearrange main loop in menu_select() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Avoid selecting states with too much latency (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Avoid using invalid recent intervals data (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Fix cpuhotplug routine with PREEMPT_RT=y (Mark Langsdorf) [RHEL-120323]
  - cpuidle: dt: fix opencoded for_each_cpu() in idle_state_valid() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Drop redundant sync_state support (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Opt-out from genpd's common ->sync_state() support (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Fix uninitialized variable in dt_idle_state_present() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Avoid initializing faux device if no DT idle states are present (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Correct the domain-idlestate statistics in debugfs (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Move the per CPU variable domain_state to a struct (Mark Langsdorf) [RHEL-120323]
  - pmdomain: core: Add genpd helper to correct the usage/rejected counters (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Transition to the faux device interface (Mark Langsdorf) [RHEL-120323]
  - cpuidle: menu: Optimize bucket assignment when next_timer_ns equals KTIME_MAX (Mark Langsdorf) [RHEL-120323]
  - cpuidle: teo: Fix typos in two comments (Mark Langsdorf) [RHEL-120323]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-200.el10]
changelog:
  - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference (Ming Lei) [RHEL-143329]
  - iommufd/selftest: Add missing kconfig for DMA_SHARED_BUFFER (Cédric Le Goater) [RHEL-111742]
  - iommufd: Fix building without dmabuf (Cédric Le Goater) [RHEL-111742]
  - iommu/arm-smmu-v3-iommufd: Allow attaching nested domain for GBPA cases (Cédric Le Goater) [RHEL-111742]
  - iommufd/selftest: Add some tests for the dmabuf flow (Cédric Le Goater) [RHEL-111742]
  - iommufd: Accept a DMABUF through IOMMU_IOAS_MAP_FILE (Cédric Le Goater) [RHEL-111742]
  - iommufd: Have iopt_map_file_pages convert the fd to a file (Cédric Le Goater) [RHEL-111742]
  - iommufd: Have pfn_reader process DMABUF iopt_pages (Cédric Le Goater) [RHEL-111742]
  - iommufd: Allow MMIO pages in a batch (Cédric Le Goater) [RHEL-111742]
  - iommufd: Allow a DMABUF to be revoked (Cédric Le Goater) [RHEL-111742]
  - iommufd: Do not map/unmap revoked DMABUFs (Cédric Le Goater) [RHEL-111742]
  - iommufd: Add DMABUF to iopt_pages (Cédric Le Goater) [RHEL-111742]
  - vfio/pci: Add vfio_pci_dma_buf_iommufd_map() (Cédric Le Goater) [RHEL-111742]
  - module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper (Cédric Le Goater) [RHEL-111742]
  - dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings (Cédric Le Goater) [RHEL-132423]
  - vfio/pds: Fix memory leak in pds_vfio_dirty_enable() (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Disable qword access to the VGA region (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Disable qword access to the PCI ROM bar (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Add vfio_pci_device_init_perf_test (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Eliminate INVALID_IOVA (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Split libvfio.h into separate header files (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move vfio_selftests_*() helpers into libvfio.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename vfio_util.h to libvfio.h (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Stop passing device for IOMMU operations (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move IOVA allocator into iova_allocator.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move IOMMU library code into iommu.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename struct vfio_dma_region to dma_region (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Upgrade driver logging to dev_err() (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Prefix logs with device BDF where relevant (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Eliminate overly chatty logging (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Support multiple devices in the same container/iommufd (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Introduce struct iommu (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename struct vfio_iommu_mode to iommu_mode (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Allow passing multiple BDFs on the command line (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Split run.sh into separate scripts (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move run.sh into scripts directory (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: wait for the GPU mem to be ready (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: Inform devmem unmapped after reset (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: split the code to wait for GPU ready (Cédric Le Goater) [RHEL-132423]
  - vfio: use vfio_pci_core_setup_barmap to map bar in mmap (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: Add support for huge pfnmap (Cédric Le Goater) [RHEL-132423]
  - vfio: refactor vfio_pci_mmap_huge_fault function (Cédric Le Goater) [RHEL-132423]
  - dma-buf: fix integer overflow in fill_sg_entry() for buffers >= 8GiB (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Use RCU for error/request triggers to avoid circular locking (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace: Support get_dmabuf_phys (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Add dma-buf export support for MMIO regions (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Enable peer-to-peer DMA transactions by default (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Share the core device pointer while invoking feature functions (Cédric Le Goater) [RHEL-132423]
  - vfio: Export vfio device get and put registration helpers (Cédric Le Goater) [RHEL-132423]
  - dma-buf: provide phys_vec to scatter-gather mapping routine (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Document DMABUF model (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Provide an access to pci_p2pdma_map_type() function (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Refactor to separate core P2P functionality from memory allocation (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Simplify bus address mapping API (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Separate the mmap() support from the core logic (Cédric Le Goater) [RHEL-132423]
  - vfio: Remove the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio: Move the remaining drivers to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/platform: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Convert all PCI drivers to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/ccw: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/gvt: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/mbochs: Convert mbochs to use vfio_info_add_capability() (Cédric Le Goater) [RHEL-132423]
  - vfio: Add get_region_info_caps op (Cédric Le Goater) [RHEL-132423]
  - vfio: Require drivers to implement get_region_info (Cédric Le Goater) [RHEL-132423]
  - vfio/gvt: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/ccw: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/cdx: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/fsl: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/platform: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mbochs: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mdpy: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mtty: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Fill in the missing get_region_info ops (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/virtio: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/hisi: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - hisi_acc_vfio_pci: Add .match_token_uuid callback in hisi_acc_vfio_pci_migrn_ops (Cédric Le Goater) [RHEL-132423]
  - vfio: Fix ksize arg while copying user struct in vfio_df_ioctl_bind_iommufd() (Cédric Le Goater) [RHEL-132423]
  - hisi_acc_vfio_pci: adapt to new migration configuration (Cédric Le Goater) [RHEL-132423]
  - crypto: hisilicon - qm updates BAR configuration (Cédric Le Goater) [RHEL-132423]
  - vfio/mtty: Fix spelling typo in samples/vfio-mdev (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Store libvfio build outputs in $(OUTPUT)/libvfio (Cédric Le Goater) [RHEL-132423]
  - iommu/dma: add missing support for DMA_ATTR_MMIO for dma_iova_unlink() (Cédric Le Goater) [RHEL-116969]
  - kmsan: fix kmsan_handle_dma() to avoid false positives (Cédric Le Goater) [RHEL-116969]
  - kmsan: fix missed kmsan_handle_dma() signature conversion (Cédric Le Goater) [RHEL-116969]
  - mm/hmm: properly take MMIO path (Cédric Le Goater) [RHEL-116969]
  - mm/hmm: migrate to physical address-based DMA mapping API (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: export new dma_*map_phys() interface (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: implement DMA_ATTR_MMIO for dma_(un)map_page_attrs() (Cédric Le Goater) [RHEL-116969]
  - kmsan: convert kmsan_handle_dma to use physical addresses (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: convert dma_direct_*map_page to be phys_addr_t based (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: implement DMA_ATTR_MMIO for iommu_dma_(un)map_phys() (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: rename iommu_dma_*map_page to iommu_dma_*map_phys (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: rename trace_dma_*map_page to trace_dma_*map_phys (Cédric Le Goater) [RHEL-116969]
  - dma-debug: refactor to use physical addresses for page mapping (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: implement DMA_ATTR_MMIO for dma_iova_link(). (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: introduce new DMA attribute to indicate MMIO memory (Cédric Le Goater) [RHEL-116969]
  - objtool: Support Clang AUTOFDO .cold functions (Joe Lawrence) [RHEL-114919]
  - objtool: Fix skip_alt_group() for non-alternative STAC/CLAC (Joe Lawrence) [RHEL-114919]
  - objtool/LoongArch: Get table size correctly if LTO is enabled (Joe Lawrence) [RHEL-114919]
  - objtool/klp: Only enable --checksum when needed (partial) (Joe Lawrence) [RHEL-114916]
  - objtool: Set minimum xxhash version to 0.8 (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add the debian-based package name of xxhash to the hint (Joe Lawrence) [RHEL-114916]
  - Revert "objtool: Warn on functions with ambiguous -ffunction-sections section names" (Joe Lawrence) [RHEL-114916]
  - kbuild: Check for functions with ambiguous -ffunction-sections section names (Joe Lawrence) [RHEL-114916]
  - objtool: Warn on functions with ambiguous -ffunction-sections section names (Joe Lawrence) [RHEL-114916]
  - tty: synclink_gt: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - tty: amiserial: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - media: atomisp: gc2235: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - serial: icom: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - drivers/xen/xenbus: Fix namespace collision and split() section placement with AutoFDO (Joe Lawrence) [RHEL-114916]
  - media: atomisp: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Fix TEXT_MAIN to include .text.start and friends (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Exclude .text.startup and .text.exit from TEXT_MAIN (Joe Lawrence) [RHEL-114916]
  - tools/objtool: Copy the __cleanup unused variable fix for older clang (Joe Lawrence) [RHEL-114916]
  - livepatch: Introduce source code helpers for livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add --show-first-changed option to show function divergence (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add --debug option to show cloning decisions (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Introduce klp-build script for generating livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add stub init code for livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Introduce fix-patch-lines script to avoid __LINE__ diff noise (Joe Lawrence) [RHEL-114916]
  - kbuild,objtool: Defer objtool validation step for CONFIG_KLP_BUILD (Joe Lawrence) [RHEL-114916]
  - livepatch: Add CONFIG_KLP_BUILD (Joe Lawrence) [RHEL-114916]
  - objtool: Add base objtool support for livepatch modules (Joe Lawrence) [RHEL-114916]
  - objtool: Refactor prefix symbol creation code (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add post-link subcommand to finalize livepatch modules (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --debug option to show cloning decisions (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Introduce klp diff subcommand for diffing object files (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --debug-checksum=<funcs> to show per-instruction checksums (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --checksum option to generate per-function checksums (Joe Lawrence) [RHEL-114916]
  - objtool: Unify STACK_FRAME_NON_STANDARD entry sizes (Joe Lawrence) [RHEL-114916]
  - x86/asm: Annotate special section entries (Joe Lawrence) [RHEL-114916]
  - x86/bug: Add ARCH_WARN_ASM macro for BUG/WARN asm code sharing with Rust (Joe Lawrence) [RHEL-114916]
  - objtool: Add ANNOTATE_DATA_SPECIAL (Joe Lawrence) [RHEL-114916]
  - objtool: Move ANNOTATE* macros to annotate.h (Joe Lawrence) [RHEL-114916]
  - objtool: Add annotype() helper (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_file() (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_reloc() and elf_init_reloc() (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_data() (Joe Lawrence) [RHEL-114916]
  - objtool: Generalize elf_create_section() (Joe Lawrence) [RHEL-114916]
  - objtool: Generalize elf_create_symbol() (Joe Lawrence) [RHEL-114916]
  - objtool: Simplify special symbol handling in elf_update_symbol() (Joe Lawrence) [RHEL-114916]
  - objtool: Refactor add_jump_destinations() (Joe Lawrence) [RHEL-114916]
  - objtool: Reindent check_options[] (Joe Lawrence) [RHEL-114916]
  - objtool: Resurrect --backup option (Joe Lawrence) [RHEL-114916]
  - objtool: Rename --Werror to --werror (Joe Lawrence) [RHEL-114916]
  - objtool: Avoid emptying lists for duplicate sections (Joe Lawrence) [RHEL-114916]
  - objtool: Simplify reloc offset calculation in unwind_read_hints() (Joe Lawrence) [RHEL-114916]
  - objtool: Mark prefix functions (Joe Lawrence) [RHEL-114916]
  - objtool: Fix weak symbol hole detection for .cold functions (Joe Lawrence) [RHEL-114916]
  - objtool: Mark .cold subfunctions (Joe Lawrence) [RHEL-114916]
  - objtool: Add section/symbol type helpers (Joe Lawrence) [RHEL-114916]
  - objtool: Convert elf iterator macros to use 'struct elf' (Joe Lawrence) [RHEL-114916]
  - objtool: Fix failure when being compiled on x32 system (Joe Lawrence) [RHEL-114916]
  - objtool: Add action to check for absence of absolute relocations (Joe Lawrence) [RHEL-114916]
  - objtool: Remove .parainstructions reference (Joe Lawrence) [RHEL-114916]
  - objtool: Clean up compiler flag usage (Joe Lawrence) [RHEL-114916]
  - objtool: Const string cleanup (Joe Lawrence) [RHEL-114916]
  - objtool: Check for missing annotation entries in read_annotate() (Joe Lawrence) [RHEL-114916]
  - objtool: Fix "unexpected end of section" warning for alternatives (Joe Lawrence) [RHEL-114916]
  - objtool: Fix __pa_symbol() relocation handling (Joe Lawrence) [RHEL-114916]
  - objtool: Fix x86 addend calculation (Joe Lawrence) [RHEL-114916]
  - objtool: Fix weak symbol detection (Joe Lawrence) [RHEL-114916]
  - objtool: Fix interval tree insertion for zero-length symbols (Joe Lawrence) [RHEL-114916]
  - objtool: Add empty symbols to the symbol tree again (Joe Lawrence) [RHEL-114916]
  - objtool: Remove error handling boilerplate (Joe Lawrence) [RHEL-114916]
  - objtool: Fix standalone --hacks=jump_label (Joe Lawrence) [RHEL-114916]
  - objtool: Propagate elf_truncate_section() error in elf_write() (Joe Lawrence) [RHEL-114916]
  - objtool: Fix broken error handling in read_symbols() (Joe Lawrence) [RHEL-114916]
  - objtool: Make find_symbol_containing() less arbitrary (Joe Lawrence) [RHEL-114916]
  - interval_tree: Sync interval_tree_generic.h with tools (Joe Lawrence) [RHEL-114916]
  - x86/alternative: Refactor INT3 call emulation selftest (Joe Lawrence) [RHEL-114916]
  - modpost: Ignore unresolved section bounds symbols (Joe Lawrence) [RHEL-114916]
  - kbuild: Remove 'kmod_' prefix from __KBUILD_MODNAME (Joe Lawrence) [RHEL-114916]
  - elfnote: Change ELFNOTE() to use __UNIQUE_ID() (Joe Lawrence) [RHEL-114916]
  - compiler.h: Make addressable symbols less of an eyesore (Joe Lawrence) [RHEL-114916]
  - compiler: Tweak __UNIQUE_ID() naming (Joe Lawrence) [RHEL-114916]
  - x86/kprobes: Remove STACK_FRAME_NON_STANDARD annotation (Joe Lawrence) [RHEL-114916]
  - x86/module: Improve relocation error messages (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Unify TEXT_MAIN, DATA_MAIN, and related macros (Joe Lawrence) [RHEL-114916]
  - s390/vmlinux.lds.S: Prevent thunk functions from getting placed with normal text (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Include .data.rel[.local] into .data section (Joe Lawrence) [RHEL-114916]
  - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: ipc: Separate hibernate callbacks in dev_pm_ops (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Use IPC RESET instead of void message in ish_wakeup() (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: ipc: Always schedule FW reset work on RESET_NOTIFY/ACK (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-ipc: Reset clients state on resume from D3 (Tony Camuso) [RHEL-135993]
  - HID: intel-ishtp-hid: Clear suspended flag only after connected on resume (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Add ishtp_get_connection_state() interface (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-ipc: Remove redundant ready check after timeout function (Tony Camuso) [RHEL-135993]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-201.el10]
changelog:
  - vfio: Prevent from pinned DMABUF importers to attach to VFIO DMABUF (Cédric Le Goater) [RHEL-144911]
  - r8152: Advertise software timestamp information. (Jose Ignacio Tornos Martinez) [RHEL-124653]
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143197] {CVE-2025-68800}
  - RDMA/efa: Remove possible negative shift (Kamal Heib) [RHEL-140846]
  - RDMA/efa: Extend admin timeout error print (Kamal Heib) [RHEL-140846]
  - RDMA/efa: Add Network HW statistics counters (Kamal Heib) [RHEL-140846]
  - io_uring/io-wq: fix incorrect io_wq_for_each_worker() termination logic (Jeff Moyer) [RHEL-140845]
  - io_uring/rw: cast rw->flags assignment to rwf_t (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-140845]
  - io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-140845]
  - io_uring: fix filename leak in __io_openat_prep() (Jeff Moyer) [RHEL-140845]
  - io_uring: fix nr_segs calculation in io_import_kbuf (Jeff Moyer) [RHEL-140845]
  - io_uring: fix min_wait wakeups for SQPOLL (Jeff Moyer) [RHEL-140845]
  - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory (Jeff Moyer) [RHEL-140845]
  - io_uring/rsrc: fix lost entries after cloned range (Jeff Moyer) [RHEL-140845]
  - io_uring/poll: correctly handle io_poll_add() return value on update (Jeff Moyer) [RHEL-140845]
  - io_uring/rsrc: don't use blk_rq_nr_phys_segments() as number of bvecs (Jeff Moyer) [RHEL-140845]
  - io_uring/rw: ensure allocated iovec gets cleared for early failure (Jeff Moyer) [RHEL-140845]
  - io_uring: fix regbuf vector size truncation (Jeff Moyer) [RHEL-140845]
  - io_uring: use WRITE_ONCE for user shared memory (Jeff Moyer) [RHEL-140845]
  - io_uring: fix types for region size calulation (Jeff Moyer) [RHEL-140845]
  - io_uring: correct __must_hold annotation in io_install_fixed_file (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: be smarter on when to update the stime usage (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: switch away from getrusage() for CPU accounting (Jeff Moyer) [RHEL-140845]
  - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-140845]
  - io_uring/fdinfo: get rid of dumping credentials (Jeff Moyer) [RHEL-140845]
  - io_uring/fdinfo: only compile if CONFIG_PROC_FS is set (Jeff Moyer) [RHEL-140845]
  - io_uring: fix incorrect unlikely() usage in io_waitid_prep() (Jeff Moyer) [RHEL-140845]
  - io_uring: protect mem region deregistration (Jeff Moyer) [RHEL-140845]
  - Revert "io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common()" (Jeff Moyer) [RHEL-140845]
  - io_uring: fix incorrect io_kiocb reference in io_link_skb (Jeff Moyer) [RHEL-140845]
  - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations (Jeff Moyer) [RHEL-140845]
  - io_uring: include dying ring in task_work "should cancel" state (Jeff Moyer) [RHEL-140845]
  - fs: add a FMODE_ flag to indicate IOCB_HAS_METADATA availability (Jeff Moyer) [RHEL-140845]
  - io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-140845]
  - io_uring: export io_[un]account_mem (Jeff Moyer) [RHEL-140845]
  - io_uring: don't use int for ABI (Jeff Moyer) [RHEL-140845]
  - tools headers UAPI: sync linux/stat.h linux/fs.h with tools (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix size read races in truncate, fallocate and copy offload (Olga Kornievskaia) [RHEL-134733]
  - NFS/localio: Deal with page bases that are > PAGE_SIZE (Olga Kornievskaia) [RHEL-134733]
  - NFS/localio: Stop further I/O upon hitting an error (Olga Kornievskaia) [RHEL-134733]
  - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() (Olga Kornievskaia) [RHEL-134733]
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix a deadlock involving nfs_release_folio() (Olga Kornievskaia) [RHEL-134733]
  - pNFS: Fix a deadlock when returning a delegation during open() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Drop the client reference in client_states_open() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg() (Olga Kornievskaia) [RHEL-134733]
  - lockd: fix vfs_test_lock() calls (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Clear TIME_DELEG in the suppattr_exclcreat bitmap (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix memory leak in nfsd_create_serv error paths (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: restore destructor on submit failure (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Mark variable __maybe_unused to avoid W=1 build break (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: bound check rq_pages index in inline path (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: return 0 on success from svc_rdma_copy_inline_range (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: use rc_pageoff for memcpy byte offset (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: duplicate handshake cancellations leak socket (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: fix regression due to out-of-order __put_cred (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove 61 byte hole from needless ____cacheline_aligned (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove alignment size checking in nfs_is_local_dio_possible (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix inheritance of the block sizes when automounting (Olga Kornievskaia) [RHEL-134733]
  - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68764}
  - Revert "nfs: ignore SB_RDONLY when mounting nfs" (Olga Kornievskaia) [RHEL-134733]
  - Revert "nfs: clear SB_RDONLY before getting superblock" (Olga Kornievskaia) [RHEL-134733]
  - Revert "nfs: ignore SB_RDONLY when remounting nfs" (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68349}
  - NFSv4.1: protect destroying and nullifying bc_serv structure (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: new helper function for stopping backchannel server (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: cleanup common code in backchannel request (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: pass transport for callback shutdown (Olga Kornievskaia) [RHEL-134733]
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in readdir and lookup (Olga Kornievskaia) [RHEL-134733]
  - NFS: Avoid changing nlink when file removes and attribute updates race (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Make FILE_SYNC WRITEs comply with spec (Olga Kornievskaia) [RHEL-134733]
  - NFSD: use correct reservation type in nfsd4_scsi_fence_client (Olga Kornievskaia) [RHEL-134733]
  - NFSD: don't start nfsd if sv_permsocks is empty (Olga Kornievskaia) [RHEL-134733]
  - lockd: don't allow locking on reexported NFSv2/3 (Olga Kornievskaia) [RHEL-134733]
  - NFSD/blocklayout: Extract extent mapping from proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - NFSD/blocklayout: Fix minlength check in proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: Release transport resources synchronously (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: Fix memory leak in tls_handshake_accept() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix LTP test failures when timestamps are delegated (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68242}
  - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() (Olga Kornievskaia) [RHEL-134733]
  - NFS: sysfs: fix leak when nfs_client kobject add fails (Olga Kornievskaia) [RHEL-134733]
  - NFSv2/v3: Fix error handling in nfs_atomic_open_v23() (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: do not issue misaligned DIO out-of-order (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: Ensure DIO WRITE's IO on stable storage upon completion (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: backfill missing partial read support for misaligned DIO (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add refcounting for each iocb IO associated with NFS pgio header (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove unecessary ENOTBLK handling in DIO WRITE support (Olga Kornievskaia) [RHEL-134733]
  - NFS: Check the TLS certificate fields in nfs_match_client() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68243}
  - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS (Olga Kornievskaia) [RHEL-134733]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() (Olga Kornievskaia) [RHEL-134733]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v3_ds_connect() (Olga Kornievskaia) [RHEL-134733]
  - Revert "SUNRPC: Make RPCSEC_GSS_KRB5 select CRYPTO instead of depending on it" (Olga Kornievskaia) [RHEL-134733]
  - nfsd: ensure SEQUENCE replay sends a valid reply. (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Never cache a COMPOUND when the SEQUENCE operation fails (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Skip close replay processing if XDR encoding fails (Olga Kornievskaia) [RHEL-134733]
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40273}
  - nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix refcount leak in nfsd_set_fh_dentry() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40212}
  - nfsd: Avoid strlen conflict in nfsd4_encode_components_esc() (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix crash in nfsd4_read_release() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40324}
  - NFS4: Fix state renewals missing after boot (Olga Kornievskaia) [RHEL-134733]
  - NFS: check if suid/sgid was cleared after a write as needed (Olga Kornievskaia) [RHEL-134733]
  - NFS4: Apply delay_retrans to async operations (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: fix to allocate mirror->dss before use (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40087}
  - nfsd: discard nfserr_dropit (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Make RPCSEC_GSS_KRB5 select CRYPTO instead of depending on it (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Add io_cache_{read,write} controls to debugfs (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Do the grace period check in ->proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - nfsd: delete unnecessary NULL check in __fh_verify() (Olga Kornievskaia) [RHEL-134733]
  - NFS: add basic STATX_DIOALIGN and STATX_DIO_READ_ALIGN support (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add tracepoints for misaligned DIO READ and WRITE support (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add proper O_DIRECT support for READ and WRITE (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: refactor iocb initialization (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: refactor iocb and iov_iter_bvec initialization (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: avoid issuing misaligned IO using O_DIRECT (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: make trace_nfs_local_open_fh more useful (Olga Kornievskaia) [RHEL-134733]
  - NFSD: filecache: add STATX_DIOALIGN and STATX_DIO_READ_ALIGN support (Olga Kornievskaia) [RHEL-134733]
  - fs: add STATX_DIO_READ_ALIGN (Olga Kornievskaia) [RHEL-134733]
  - fs: reformat the statx definition (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: unexport rpc_malloc() and rpc_free() (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Add support for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Update layout stats & error paths for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Write path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Commit path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Read path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Update low level helper functions to be DS stripe aware. (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Add data structure support for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Use ds_commit_idx when marking a write commit (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Remove cred local variable dependency (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Disallow layoutget during grace period (Olga Kornievskaia) [RHEL-134733]
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68185}
  - fs: add RWF_DONTCACHE iocb and FOP_DONTCACHE file_operations flag (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Update gssx_accept_sec_context() to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Update svcxdr_init_decode() to call xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the flexfilelayout driver to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the filelayout to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the blocklayout to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update listxattr to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update getacl to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update readdir to use a scratch folio (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Introduce xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Remove redundant __GFP_NOWARN (Olga Kornievskaia) [RHEL-134733]
  - nfs: remove NFS_WBACK_BUSY() (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: fix mount hang after CREATE_SESSION failure (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: fix backchannel max_resp_sz verification check (Olga Kornievskaia) [RHEL-134733]
  - NFSv4: fix "prefered"->"preferred" (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: add a Kconfig option to redirect dfprintk() output to trace buffer (Olga Kornievskaia) [RHEL-134733]
  - redhat/configs: Add CONFIG_SUNRPC_DEBUG_TRACE (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: remove dfprintk_cont() and dfprintk_rcu_cont() (Olga Kornievskaia) [RHEL-134733]
  - nfs: cleanup tracepoint declarations (Olga Kornievskaia) [RHEL-134733]
  - nfs: add tracepoints to nfs_writepages() (Olga Kornievskaia) [RHEL-134733]
  - nfs: more in-depth tracing of writepage events (Olga Kornievskaia) [RHEL-134733]
  - nfs: new tracepoints around write handling (Olga Kornievskaia) [RHEL-134733]
  - nfs: add tracepoints to nfs_file_read() and nfs_file_write() (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix "occurence"->"occurrence" (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Don't force CRYPTO_LIB_SHA256 to be built-in (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Reduce DRC bucket size (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Delay adding new entries to LRU (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Move the svc_rpcb_cleanup() call sites (Olga Kornievskaia) [RHEL-134733]
  - NFS: Remove rpcbind cleanup for NFSv4.0 callback (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Drop redundant conversion to bool (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: eliminate return pointer in svc_tcp_sendmsg() (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix pr_notice in svc_tcp_sendto() to show correct length (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Eliminate an allocation in nfs4_make_rec_clidname() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Replace open-coded conversion of bytes to hex (Olga Kornievskaia) [RHEL-134733]
  - lockd: Remove space before newline (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix timestamp updates in CB_GETATTR (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix SETATTR updates for delegated timestamps (Olga Kornievskaia) [RHEL-134733]
  - nfsd: track original timestamps in nfs4_delegation (Olga Kornievskaia) [RHEL-134733]
  - nfsd: use ATTR_CTIME_SET for delegated ctime updates (Olga Kornievskaia) [RHEL-134733]
  - vfs: add ATTR_CTIME_SET flag (Olga Kornievskaia) [RHEL-134733]
  - nfsd: ignore ATTR_DELEG when checking ia_valid before notify_change() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix assignment of ia_ctime.tv_nsec on delegated mtime update (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix last write offset handling in layoutcommit (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Implement large extent array support in pNFS (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Minor cleanup in layoutcommit decoding (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Minor cleanup in layoutcommit processing (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Rework encoding and decoding of nfsd4_deviceid (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: Change ret code of xdr_stream_decode_opaque_fixed (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: delay pc_release callback until after the reply is sent (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Move the fh_getattr() helper (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Relocate the fh_want_write() and fh_drop_write() helpers (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix null pointer dereference on zero-length checksum (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40129}
  - nfsctl: symlink has no business bumping link count of parent directory (Olga Kornievskaia) [RHEL-134733]
  - slightly simplify nfs_atomic_open() (Olga Kornievskaia) [RHEL-134733]
  - simplify nfs_atomic_open_v23() (Olga Kornievskaia) [RHEL-134733]
  - check_export(): constify path argument (Olga Kornievskaia) [RHEL-134733]
  - rqst_exp_get_by_name(): constify path argument (Olga Kornievskaia) [RHEL-134733]
  - nfs: constify path argument of __vfs_getattr() (Olga Kornievskaia) [RHEL-134733]
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-133462]
  - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (Guillaume Nault) [RHEL-133462]
  - inet: Avoid ehash lookup race in inet_ehash_insert() (Guillaume Nault) [RHEL-133462]
  - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (Guillaume Nault) [RHEL-133462]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-202.el10]
changelog:
  - net: bridge: annotate data-races around fdb->{updated,used} (Mohammad Heib) [RHEL-123945]
  - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress (Mohammad Heib) [RHEL-123945]
  - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct (Mohammad Heib) [RHEL-123945]
  - net: bridge: fix MST static key usage (Mohammad Heib) [RHEL-123945]
  - net: bridge: fix use-after-free due to MST port state bypass (Mohammad Heib) [RHEL-123945]
  - selftests: bridge_mdb: Add a test for MDB flush on snooping disable (Mohammad Heib) [RHEL-123945]
  - net: bridge: Flush multicast groups when snooping is disabled (Mohammad Heib) [RHEL-123945]
  - net: bridge: use common function to compute the features (Mohammad Heib) [RHEL-123945]
  - net: add a common function to compute features for upper devices (Mohammad Heib) [RHEL-123945]
  - net: bridge: correct debug message function name in br_fill_ifinfo (Mohammad Heib) [RHEL-123945]
  - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() (Mohammad Heib) [RHEL-123945]
  - selftests: bridge_fdb_local_vlan_0: Test FDB vs. NET_ADDR_SET behavior (Mohammad Heib) [RHEL-123945]
  - net: bridge: Install FDB for bridge MAC on VLAN 0 (Mohammad Heib) [RHEL-123945]
  - selftests: forwarding: Add test for BR_BOOLOPT_FDB_LOCAL_VLAN_0 (Mohammad Heib) [RHEL-123945]
  - selftests: net: lib.sh: Don't defer failed commands (Mohammad Heib) [RHEL-123945]
  - selftests: defer: Introduce DEFER_PAUSE_ON_FAIL (Mohammad Heib) [RHEL-123945]
  - selftests: defer: Allow spaces in arguments of deferred commands (Mohammad Heib) [RHEL-123945]
  - net: bridge: Introduce UAPI for BR_BOOLOPT_FDB_LOCAL_VLAN_0 (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: Skip local FDBs on VLAN creation (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: On bridge changeaddr, skip per-VLAN FDBs (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: On port changeaddr, skip per-VLAN FDBs (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: Look up FDB on VLAN 0 on miss (Mohammad Heib) [RHEL-123945]
  - net: bridge: Introduce BROPT_FDB_LOCAL_VLAN_0 (Mohammad Heib) [RHEL-123945]
  - net: bridge: Bounce invalid boolopts (Mohammad Heib) [RHEL-123945]
  - net: bridge: remove unused argument of br_multicast_query_expired() (Mohammad Heib) [RHEL-123945]
  - net: bridge: fix soft lockup in br_multicast_query_expired() (Mohammad Heib) [RHEL-123945]
  - selftests: net: Test bridge backup port when port is administratively down (Mohammad Heib) [RHEL-123945]
  - bridge: Redirect to backup port when port is administratively down (Mohammad Heib) [RHEL-123945]
  - selftests: net: bridge_vlan_aware: test untagged/8021p-tagged with and without PVID (Mohammad Heib) [RHEL-123945]
  - redhat: export FLAVOR (George Jacob) [RHEL-109549]
  - redhat: export only selected variables (George Jacob) [RHEL-109549]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-203.el10]
changelog:
  - nouveau/gsp: fix suspend/resume regression on r570 firmware (José Expósito) [RHEL-141658]
  - nouveau: add a third state to the fini handler. (José Expósito) [RHEL-141658]
  - nouveau/gsp: use rpc sequence numbers properly. (José Expósito) [RHEL-141658]
  - redhat/dracut-virt.conf: omit drm drivers in UKI initrd (Li Tian) [RHEL-146125]
  - scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147285]
  - dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-129484]
  - dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-140641]
  - dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-140641]
  - dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-140641]
  - mei: me: add wildcat lake P DID (Steve Best) [RHEL-95680]
  - redhat/configs: ftrace: enable FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-105766]
  - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-127414]
  - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-127414]
  - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Initialize cpufreq-based invariance before subsys (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (Mark Langsdorf) [RHEL-120319]
  - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event (Mark Langsdorf) [RHEL-120319]
  - drivers: cpufreq: add Tegra114 support (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Exit governor when failed to start old governor (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Init policy->rwsem before it may be possibly used (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Initialize cpufreq-based frequency-invariance later (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Remove duplicate check in __cpufreq_offline() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs (Mark Langsdorf) [RHEL-120319]
  - cpufreq: tegra124: Allow building as a module (Mark Langsdorf) [RHEL-120319]
  - cpufreq: dt: Add register helper (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Export disable_cpufreq() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: brcmstb-avs: Fully open-code compatible for grepping (Mark Langsdorf) [RHEL-120319]
  - cpufreq: apple: drop default ARCH_APPLE in Kconfig (Mark Langsdorf) [RHEL-120319]
  - cpufreq: userspace: set CPUFREQ_GOV_STRICT_TARGET flag (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Do not return a value from populate_efficiency_class() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Remove cpu_data_list (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Add support for autonomous selection (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Update sscanf() to kstrtouint() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Replace magic number (Mark Langsdorf) [RHEL-120319]
  - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Add Rust-based cpufreq-dt driver (Mark Langsdorf) [RHEL-120319]
  - cpufreq: drop redundant cpus_read_lock() from store_local_boost() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Drop policy locking from cpufreq_policy_is_good_for_eas() (Mark Langsdorf) [RHEL-120319]
  - powernow: use pr_info_once (Mark Langsdorf) [RHEL-120319]
  - cpufreq/sched: Move cpufreq-specific EAS checks to cpufreq (Mark Langsdorf) [RHEL-120319]
  - cpufreq/sched: schedutil: Add helper for governor checks (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Force sync policy boost with global boost on sysfs update (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Preserve policy's boost state after resume (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Introduce policy_set_boost() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Don't unnecessarily call set_boost() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Drop unused cpufreq_get_policy() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Introduce cpufreq_policy_refresh() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Use __free() for policy reference counting cleanup (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Drop cpufreq_cpu_acquire() and cpufreq_cpu_release() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Use locking guard and __free() in cpufreq_update_policy() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Add and use cpufreq policy locking guards (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Split cpufreq_online() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Consolidate some code in cpufreq_online() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: intel_pstate: Rearrange max frequency updates handling code (Mark Langsdorf) [RHEL-120319]
  - cpufreq: airoha: modify CONFIG_OF dependency (Mark Langsdorf) [RHEL-120319]
  - cpufreq: airoha: Depends on OF (Mark Langsdorf) [RHEL-120319]
  - cpufreq: airoha: Add EN7581 CPUFreq SMCCC driver (Mark Langsdorf) [RHEL-120319]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-204.el10]
changelog:
  - netlink: avoid infinite retry looping in netlink_unicast() (Paolo Abeni) [RHEL-133487] {CVE-2025-38727}
  - netlink: make sure we allow at least one dump skb (Paolo Abeni) [RHEL-133487]
  - netlink: Fix rmem check in netlink_broadcast_deliver(). (Paolo Abeni) [RHEL-133487]
  - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Paolo Abeni) [RHEL-133487]
  - genetlink: fix genl_bind() invoking bind() after -EPERM (Paolo Abeni) [RHEL-133487] {CVE-2025-39926}
  - nvme: add support for dynamic quirk configuration via module parameter (Maurizio Lombardi) [RHEL-126507]
  - nvme: expose active quirks in sysfs (Maurizio Lombardi) [RHEL-141683]
  - block: fix memory leak in __blkdev_issue_zero_pages (Ming Lei) [RHEL-137852]
  - virtio: clean up features qword/dword terms (Laurent Vivier) [RHEL-111004]
  - virtio-net: avoid unnecessary checksum calculation on guest RX (Laurent Vivier) [RHEL-111004]
  - virtio_net: fix alignment for virtio_net_hdr_v1_hash (Laurent Vivier) [RHEL-111004]
  - virtio-net: zero unused hash fields (Laurent Vivier) [RHEL-111004]
  - vhost/net: enable gso over UDP tunnel support. (Laurent Vivier) [RHEL-111004]
  - tun: enable gso over UDP tunnel support. (Laurent Vivier) [RHEL-111004]
  - virtio_net: enable gso over UDP tunnel support. (Laurent Vivier) [RHEL-111004]
  - net: implement virtio helpers to handle UDP GSO tunneling. (Laurent Vivier) [RHEL-111004]
  - virtio_net: add supports for extended offloads (Laurent Vivier) [RHEL-111004]
  - vhost-net: allow configuring extended features (Laurent Vivier) [RHEL-111004]
  - virtio_pci_modern: allow configuring extended features (Laurent Vivier) [RHEL-111004]
  - virtio: introduce extended features (Laurent Vivier) [RHEL-111004]
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-142435]
  - tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-142435]
  - gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-142435]
  - netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-142435]
  - redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-142435]
  - xfs: set max_agbno to allow sparse alloc of last full inode chunk (CKI Backport Bot) [RHEL-141684]
  - redhat/configs: Enable CONFIG_PM_DEVFREQ for aarch64 (Nick Cao) [RHEL-140756]
  - mlxbf_gige: emit messages during open and probe failures (David Thompson) [RHEL-104014]
  - mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available (David Thompson) [RHEL-104014]
  - redhat/configs: enable ACPI_DEBUG on non-debug kernels (Mark Langsdorf) [RHEL-88729 RHEL-89376]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-205.el10]
changelog:
  - redhat/dracut-virt.conf: remove erroneous spaces in omit_dracutmodules (Li Tian)
  - configs: enable Freescale MXS DMA engine (Jiri Benc) [RHEL-148497]
  - smb: client: prevent races in ->query_interfaces() (Paulo Alcantara) [RHEL-148417]
  - smb: client: add proper locking around ses->iface_last_update (Paulo Alcantara) [RHEL-148417]
  - smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-148417]
  - cifs: Fix locking usage for tcon fields (Paulo Alcantara) [RHEL-148417]
  - cifs: Corrections to lock ordering notes (Paulo Alcantara) [RHEL-148417]
  - cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-148417]
  - cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-148417]
  - smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-148417]
  - smb/client: fix memory leak in SendReceive() (Paulo Alcantara) [RHEL-148417]
  - smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-148417]
  - netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-148417]
  - netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-148417]
  - netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-148417]
  - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-147942]
  - perf/x86/intel/cstate: Add Pantherlake support (Michael Petlan) [RHEL-74192]
  - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-144003]
  - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-144003]
  - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-144003]
  - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-144003]
  - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-144003]
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-144003]
  - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-144003]
  - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-144003]
  - Disable CET when calling tboot shutdown procedure. (Tony Camuso) [RHEL-109479]
  - docs: perf: Fujitsu: Fix htmldocs build warnings and errors (Mark Salter) [RHEL-132203]
  - arm64: proton-pack: Fix hard lockup when !MITIGATE_SPECTRE_BRANCH_HISTORY (Mark Salter) [RHEL-132203]
  - arm64: Reject modules with internal alternative callbacks (Mark Salter) [RHEL-132203]
  - arm64: Fail module loading if dynamic SCS patching fails (Mark Salter) [RHEL-132203]
  - arm64: proton-pack: Fix hard lockup due to print in scheduler context (Mark Salter) [RHEL-132203]
  - arm64: proton-pack: Drop print when !CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY (Mark Salter) [RHEL-132203]
  - arm64: acpi: Drop message logging SPCR default console (Mark Salter) [RHEL-132203]
  - Revert "ACPI: Suppress misleading SPCR console message when SPCR table is absent" (Mark Salter) [RHEL-132203]
  - arm64: Use load LSE atomics for the non-return per-CPU atomic operations (Mark Salter) [RHEL-132203]
  - arm64: mte: Do not warn if the page is already tagged in copy_highpage() (Mark Salter) [RHEL-132203]
  - arm64, mm: avoid always making PTE dirty in pte_mkwrite() (Mark Salter) [RHEL-132203]
  - arm64: enable Guarded Control Stacks (Mark Salter) [RHEL-132203]
  - arm64: Kconfig: Spell out "ARMv9.4" in menuconfig text (Mark Salter) [RHEL-132203]
  - arm64/fpsimd: simplify sme_setup() (Mark Salter) [RHEL-132203]
  - Enable Fujitsu Uncore PMU (Mark Salter) [RHEL-132203]
  - perf: Fujitsu: Add the Uncore PMU driver (Mark Salter) [RHEL-132203]
  - arm64: cpufeature: add Neoverse-V3AE to BBML2 allow list (Mark Salter) [RHEL-132203]
  - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-132203]
  - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-132203]
  - arm64: probes: Fix incorrect bl/blr address and register usage (Mark Salter) [RHEL-132203]
  - uprobes: uprobe_warn should use passed task (Mark Salter) [RHEL-132203]
  - arm64: Kconfig: Remove GCS restrictions on UPROBES (Mark Salter) [RHEL-132203]
  - arm64: uprobes: Add GCS support to uretprobes (Mark Salter) [RHEL-132203]
  - arm64: probes: Add GCS support to bl/blr/ret (Mark Salter) [RHEL-132203]
  - arm64: uaccess: Add additional userspace GCS accessors (Mark Salter) [RHEL-132203]
  - arm64: uaccess: Move existing GCS accessors definitions to gcs.h (Mark Salter) [RHEL-132203]
  - arm64: probes: Break ret out from bl/blr (Mark Salter) [RHEL-132203]
  - arm64: Remove tautological LLVM Kconfig conditions (Mark Salter) [RHEL-132203]
  - arm64/sme: Drop inaccurate documentation of streaming mode switches (Mark Salter) [RHEL-132203]
  - wifi: enable rtw8922ae (Jose Ignacio Tornos Martinez) [RHEL-111098]
  - wifi: rtw89: 8922a: set random mac if efuse contains zeroes (Jose Ignacio Tornos Martinez) [RHEL-111098]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-206.el10]
changelog:
  - selftests: hsr: Add more link fault tests for HSR (Felix Maurer) [RHEL-148239]
  - hsr: Implement more robust duplicate discard for HSR (Felix Maurer) [RHEL-148239]
  - selftests: hsr: Add tests for more link faults with PRP (Felix Maurer) [RHEL-104304]
  - hsr: Implement more robust duplicate discard for PRP (Felix Maurer) [RHEL-104304]
  - selftests: hsr: Add tests for faulty links (Felix Maurer) [RHEL-104304]
  - selftests: hsr: Check duplicates on HSR with VLAN (Felix Maurer) [RHEL-104304]
  - selftests: hsr: Add ping test for PRP (Felix Maurer) [RHEL-104304]
  - selftests: net: unify the Makefile formats [net/hsr only] (Felix Maurer) [RHEL-104304]
  - exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146409] {CVE-2025-38206}
  - gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (David Arcari) [RHEL-145598]
  - gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145598] {CVE-2025-40249}
  - mm/hugetlb: ignore hugepage kernel args if hugepages are unsupported (Luiz Capitulino) [RHEL-142429]
  - wifi: ath12k: workaround to use VMs (Jose Ignacio Tornos Martinez) [RHEL-141347]
  - wifi: ath11k: workaround to use VMs (Jose Ignacio Tornos Martinez) [RHEL-141347]
  - ice: fix crash in ethtool offline loopback test (Michal Schmidt) [RHEL-118528 RHEL-131333]
  - idpf: Fix data race in idpf_net_dim (Michal Schmidt) [RHEL-131333]
  - idpf: read lower clock bits inside the time sandwich (Michal Schmidt) [RHEL-131333]
  - ice: fix devlink reload call trace (Michal Schmidt) [RHEL-131333]
  - ice: add missing ice_deinit_hw() in devlink reinit path (Michal Schmidt) [RHEL-131333]
  - ice: Fix persistent failure in ice_get_rxfh (Michal Schmidt) [RHEL-131333]
  - igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue (Michal Schmidt) [RHEL-131333]
  - igc: fix race condition in TX timestamp read for register 0 (Michal Schmidt) [RHEL-131333]
  - igc: Restore default Qbv schedule when changing channels (Michal Schmidt) [RHEL-131333]
  - ice: Fix incorrect timeout ice_release_res() (Michal Schmidt) [RHEL-131333]
  - ice: Avoid detrimental cleanup for bond during interface stop (Michal Schmidt) [RHEL-131333]
  - ice: initialize ring_stats->syncp (Michal Schmidt) [RHEL-131333]
  - idpf: fix aux device unplugging when rdma is not supported by vport (Michal Schmidt) [RHEL-131333]
  - idpf: cap maximum Rx buffer size (Michal Schmidt) [RHEL-131333]
  - idpf: Fix error handling in idpf_vport_open() (Michal Schmidt) [RHEL-131333]
  - idpf: Fix RSS LUT NULL ptr issue after soft reset (Michal Schmidt) [RHEL-131333]
  - idpf: Fix RSS LUT configuration on down interfaces (Michal Schmidt) [RHEL-131333]
  - idpf: Fix RSS LUT NULL pointer crash on early ethtool operations (Michal Schmidt) [RHEL-131333]
  - idpf: fix issue with ethtool -n command display (Michal Schmidt) [RHEL-131333]
  - idpf: fix memory leak of flow steer list on rmmod (Michal Schmidt) [RHEL-131333]
  - idpf: fix error handling in the init_task on load (Michal Schmidt) [RHEL-131333]
  - idpf: fix memory leak in idpf_vc_core_deinit() (Michal Schmidt) [RHEL-131333]
  - idpf: fix memory leak in idpf_vport_rel() (Michal Schmidt) [RHEL-131333]
  - idpf: detach and close netdevs while handling a reset (Michal Schmidt) [RHEL-131333]
  - idpf: keep the netdev when a reset fails (Michal Schmidt) [RHEL-131333]
  - ice: add ice driver PTP pin documentation (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - e1000: fix OOB in e1000_tbi_should_accept() (Michal Schmidt) [RHEL-131333] {CVE-2025-71093}
  - idpf: reduce mbx_task schedule delay to 300us (Michal Schmidt) [RHEL-131333]
  - iavf: fix off-by-one issues in iavf_config_rss_reg() (Michal Schmidt) [RHEL-131333 RHEL-99253] {CVE-2025-71087}
  - i40e: validate ring_len parameter against hardware-specific values (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - i40e: fix scheduling in set_rx_mode (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - iavf: clarify VLAN add/delete log messages and lower log level (Michal Schmidt) [RHEL-131333 RHEL-99253]
  - ice: fix comment typo and correct module format string (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - idpf: correct queue index in Rx allocation error messages (Michal Schmidt) [RHEL-131333]
  - idpf: use desc_ring when checking completion queue DMA allocation (Michal Schmidt) [RHEL-131333]
  - ixgbe: avoid redundant call to ixgbe_non_sfp_link_config() (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - e1000e: Remove unneeded checks (Michal Schmidt) [RHEL-131333 RHEL-134991]
  - idpf: convert vport state to bitmap (Michal Schmidt) [RHEL-131333]
  - ixgbevf: ixgbevf_q_vector clean up (Michal Schmidt) [RHEL-131333 RHEL-99221]
  - iavf: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-131142 RHEL-131333 RHEL-99253] {CVE-2025-68752}
  - fm10k: extract GRXRINGS from .get_rxnfc (Michal Schmidt) [RHEL-131333]
  - ixgbevf: extract GRXRINGS from .get_rxnfc (Michal Schmidt) [RHEL-131333 RHEL-99221]
  - igc: extract GRXRINGS from .get_rxnfc (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igb: extract GRXRINGS from .get_rxnfc (Michal Schmidt) [RHEL-131333 RHEL-99220]
  - idpf: extract GRXRINGS from .get_rxnfc (Michal Schmidt) [RHEL-131333]
  - ice: extract GRXRINGS from .get_rxnfc (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - iavf: extract GRXRINGS from .get_rxnfc (Michal Schmidt) [RHEL-131333 RHEL-99253]
  - i40e: extract GRXRINGS from .get_rxnfc (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - ice: fix broken Rx on VFs (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - i40e: delete a stray tab (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - net: ixgbe: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - iavf: add RSS support for GTP protocol via ethtool (Michal Schmidt) [RHEL-131333 RHEL-99253]
  - ice: Extend PTYPE bitmap coverage for GTP encapsulated flows (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: improve TCAM priority handling for RSS profiles (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: implement GTP RSS context tracking and configuration (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add virtchnl definitions and static data for GTP RSS (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add flow parsing for GTP and new protocol field support (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - i40e: support generic devlink param "max_mac_per_vf" (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - idpf: add support for IDPF PCI programming interface (Michal Schmidt) [RHEL-131333]
  - igbvf: fix misplaced newline in VLAN add warning message (Michal Schmidt) [RHEL-131333 RHEL-99238]
  - ixgbe: fix typos in ixgbe driver comments (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - idpf: remove duplicate defines in IDPF_CAP_RSS (Michal Schmidt) [RHEL-131333]
  - i40e: avoid redundant VF link state updates (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - ice: Allow 100M speed for E825C SGMII device (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: implement configurable header split for regular Rx (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: switch to Page Pool (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: drop page splitting and recycling (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: remove legacy Rx and construct SKB (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: remove duplicate call to ice_deinit_hw() on error paths (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: move ice_deinit_dev() to the end of deinit paths (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: extract ice_init_dev() from ice_init() (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: move ice_init_pf() out of ice_init_dev() (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: move udp_tunnel_nic and misc IRQ setup into ice_init_pf() (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: ice_init_pf: destroy mutexes and xarrays on memory alloc failure (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: move ice_init_interrupt_scheme() prior ice_init_pf() (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: move service task start out of ice_init_pf() (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: enforce RTNL assumption of queue NAPI manipulation (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - e1000e: Introduce private flag to disable K1 (Michal Schmidt) [RHEL-131333 RHEL-134991]
  - ice: refactor to use helpers (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: implement transmit hardware timestamp statistics (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add tracking of good transmit timestamps (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: implement ethtool standard stats (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: fix PTP cleanup on driver removal in error path (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197] {CVE-2025-68215}
  - libie: depend on DEBUG_FS when building LIBIE_FWLOG (Michal Schmidt) [RHEL-122279 RHEL-131333 RHEL-99223]
  - ixgbe: use EOPNOTSUPP instead of ENOTSUPP in ixgbe_ptp_feature_enable() (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - igc: use EOPNOTSUPP instead of ENOTSUPP in igc_ethtool_get_sset_count() (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igb: use EOPNOTSUPP instead of ENOTSUPP in igb_get_sset_count() (Michal Schmidt) [RHEL-131333 RHEL-99220]
  - igc: power up the PHY before the link test (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - ixgbe: fix memory leak and use-after-free in ixgbe_recovery_probe() (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ice: fix usage of logical PF id (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: fix destination CGU for dual complex E825 (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: fix lane number calculation (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ixgbe: fix too early devlink_free() in ixgbe_remove() (Michal Schmidt) [RHEL-131333 RHEL-99223] {CVE-2025-40091}
  - ixgbe: handle IXGBE_VF_FEATURES_NEGOTIATE mbox cmd (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbevf: fix mailbox API compatibility by negotiating supported features (Michal Schmidt) [RHEL-131333 RHEL-99221] {CVE-2025-40104}
  - ixgbe: handle IXGBE_VF_GET_PF_LINK_STATE mailbox operation (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbevf: fix getting link speed data for E610 devices (Michal Schmidt) [RHEL-131333 RHEL-99221]
  - ixgbe: fix typos and docstring inconsistencies (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - libie: fix string names for AQ error codes (Michal Schmidt) [RHEL-122279 RHEL-131333]
  - net: intel: fm10k: Fix parameter idx set but not used (Michal Schmidt) [RHEL-131333]
  - ixgbevf: fix proper type for error code in ixgbevf_resume() (Michal Schmidt) [RHEL-131333 RHEL-99221]
  - iavf: fix proper type for error code in iavf_resume() (Michal Schmidt) [RHEL-131333 RHEL-99253]
  - ice: Remove deprecated ice_lag_move_new_vf_nodes() call (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add E830 Earliest TxTime First Offload support (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: move ice_qp_[ena|dis] for reuse (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - i40e: improve VF MAC filters accounting (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - libie: fix linking with libie_{adminq,fwlog} when CONFIG_LIBIE=n (Michal Schmidt) [RHEL-131333]
  - igc: don't fail igc_probe() on LED setup error (Michal Schmidt) [RHEL-131333 RHEL-99198] {CVE-2025-39956}
  - ixgbe: destroy aci.lock later within ixgbe_remove path (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: initialize aci.lock before it's used (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - i40e: remove redundant memory barrier when cleaning Tx descs (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - ixgbe: fwlog support for e610 (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ice, libie: move fwlog code to libie (Michal Schmidt) [RHEL-118528 RHEL-122279 RHEL-131333 RHEL-99197]
  - ice: reregister fwlog after driver reinit (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: prepare for moving file to libie (Michal Schmidt) [RHEL-118528 RHEL-122279 RHEL-131333 RHEL-99197]
  - ice: move debugfs code to fwlog (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - libie, ice: move fwlog admin queue to libie (Michal Schmidt) [RHEL-118528 RHEL-122279 RHEL-131333 RHEL-99197]
  - ice: drop driver specific structure from fwlog code (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: check for PF number outside the fwlog code (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: move out debugfs init from fwlog (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: allow calling custom send function in fwlog (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add pdev into fwlog structure and use it for logging (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: introduce ice_fwlog structure (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: drop ice_pf_fwlog_update_module() (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: move get_fwlog_data() to fwlog file (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: make fwlog functions static (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - i40e: fix Jumbo Frame support after iPXE boot (Michal Schmidt) [RHEL-101966 RHEL-123770 RHEL-131333 RHEL-99236]
  - igb: fix link test skipping when interface is admin down (Michal Schmidt) [RHEL-131333 RHEL-99220]
  - igb: Fix NULL pointer dereference in ethtool loopback test (Michal Schmidt) [RHEL-131333 RHEL-99220] {CVE-2025-39875}
  - ixgbe: fix typo in function comment for ixgbe_get_num_per_func() (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: drop unnecessary casts to u16 / int (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - igc: drop unnecessary constant casts to u16 (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igb: drop unnecessary constant casts to u16 (Michal Schmidt) [RHEL-131333 RHEL-99220]
  - e1000e: drop unnecessary constant casts to u16 (Michal Schmidt) [RHEL-131333 RHEL-134991]
  - e1000: drop unnecessary constant casts to u16 (Michal Schmidt) [RHEL-131333]
  - igbvf: remove redundant counter rx_long_byte_count from ethtool statistics (Michal Schmidt) [RHEL-131333 RHEL-99238]
  - igbvf: add lbtx_packets and lbtx_bytes to ethtool statistics (Michal Schmidt) [RHEL-131333 RHEL-99238]
  - ixgbe: reduce number of reads when getting OROM data (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: add the 2.5G and 5G speeds in auto-negotiation for E610 (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: fix incorrect map used in eee linkmode (Michal Schmidt) [RHEL-131333 RHEL-99223] {CVE-2025-39922}
  - i40e: Fix potential invalid access when MAC list is empty (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236] {CVE-2025-39853}
  - i40e: remove read access to debugfs files (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236] {CVE-2025-39901}
  - ice: finish virtchnl.c split into rss.c (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: extract virt/rss.c: cleanup - p2 (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: extract virt/rss.c: cleanup - p1 (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: split RSS stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: split RSS stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: finish virtchnl.c split into queues.c (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: extract virt/queues.c: cleanup - p3 (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: extract virt/queues.c: cleanup - p2 (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: extract virt/queues.c: cleanup - p1 (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: split queue stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: split queue stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: fix incorrect counter for buffer allocation failures (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add virt/ and move ice_virtchnl* files there (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - igc: fix disabling L1.2 PCI-E link substate on I226 on init (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - ixgbe: fix ndo_xdp_xmit() workloads (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - eth: intel: use vmalloc_array() to simplify code (Michal Schmidt) [RHEL-131333 RHEL-99198 RHEL-99220 RHEL-99221 RHEL-99223]
  - ice: Implement support for SRIOV VFs across Active/Active bonds (Michal Schmidt) [RHEL-118528 RHEL-122279 RHEL-131333 RHEL-99197]
  - ice: cleanup capabilities evaluation (Michal Schmidt) [RHEL-122279 RHEL-131333]
  - ice: Cleanup variable initialization in LAG code (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: move LAG function in code to prepare for Active-Active (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: Add driver specific prefix to LAG defines (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: replace u8 elements with bool where appropriate (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: Remove casts on void pointers in LAG code (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: Don't use %pK through printk or tracepoints (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - i40e: use libie_aq_str (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - iavf: use libie_aq_str (Michal Schmidt) [RHEL-131333 RHEL-99253]
  - ice: use libie_aq_str (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - libie: add adminq helper for converting err to str (Michal Schmidt) [RHEL-122279 RHEL-131333]
  - iavf: use libie adminq descriptors (Michal Schmidt) [RHEL-131333 RHEL-99253]
  - i40e: use libie adminq descriptors (Michal Schmidt) [RHEL-101966 RHEL-118528 RHEL-122279 RHEL-131333 RHEL-99197 RHEL-99236]
  - ixgbe: use libie adminq descriptors (Michal Schmidt) [RHEL-122279 RHEL-131333 RHEL-99223]
  - ice, libie: move generic adminq descriptors to lib (Michal Schmidt) [RHEL-118528 RHEL-122279 RHEL-131333 RHEL-99197]
  - net: Fix typos [intel] (Michal Schmidt) [RHEL-101966 RHEL-118528 RHEL-131333 RHEL-99197 RHEL-99198 RHEL-99221 RHEL-99236]
  - e1000e: ignore uninitialized checksum word on tgp (Michal Schmidt) [RHEL-131333 RHEL-134991]
  - e1000e: disregard NVM checksum on tgp when valid checksum bit is not set (Michal Schmidt) [RHEL-131333 RHEL-134991]
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197] {CVE-2025-38664}
  - ixgbevf: remove unused fields from struct ixgbevf_adapter (Michal Schmidt) [RHEL-131333 RHEL-99221]
  - igbvf: remove unused fields from struct igbvf_adapter (Michal Schmidt) [RHEL-131333 RHEL-99238]
  - igc: Add wildcard rule support to ethtool NFC using Default Queue (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: Relocate RSS field definitions to igc_defines.h (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - ice: breakout common LAG code into helpers (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: convert ice_add_prof() to bitmap (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add E835 device IDs (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add 40G speed to Admin Command GET PORT OPTION (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: check correct pointer in fwlog debugfs (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add NULL check in eswitch lag check (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197] {CVE-2025-38526}
  - ethernet: intel: fix building with large NR_CPUS (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99223 RHEL-99236]
  - ice: introduce ice_get_vf_by_dev() wrapper (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: avoid rebuilding if MSI-X vector count is unchanged (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: use pci_iov_vf_id() to get VF ID (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: expose VF functions used by live migration (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: move ice_vsi_update_l2tsel to ice_lib.c (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: save RSS hash configuration for migration (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add functions to get and set Tx queue context (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add support for reading and unpacking Rx queue context (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - igbvf: add tx_timeout_count to ethtool statistics (Michal Schmidt) [RHEL-131333 RHEL-99238]
  - igbvf: remove unused interrupt counter fields from struct igbvf_adapter (Michal Schmidt) [RHEL-131333 RHEL-99238]
  - ixgbe: spelling corrections (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: turn off MDD while modifying SRRCTL (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: add Tx hang detection unhandled MDD (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: check for MDD events (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: add MDD support (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - i40e: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - ixgbe: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - igb: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Michal Schmidt) [RHEL-131333 RHEL-99220]
  - igc: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - ice: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - igc: disable L1.2 PCI-E link substate to avoid performance issue (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - ice: add ref-sync dpll pins (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - igc: Make the const read-only array supported_sizes static (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13 (Michal Schmidt) [RHEL-131333 RHEL-134991]
  - net: ice: Perform accurate aRFS flow match (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: add phase offset monitor for all PPS dpll inputs (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - igc: add preemptible queue support in mqprio (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: add preemptible queue support in taprio (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: add private flag to reverse TX queue priority in TSN mode (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: assign highest TX queue number as highest priority in mqprio (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: refactor TXDCTL macros to use FIELD_PREP and GEN_MASK (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: add DCTL prefix to related macros (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: move TXDCTL and RXDCTL related macros (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - e1000: Move cancel_work_sync to avoid deadlock (Michal Schmidt) [RHEL-131333] {CVE-2025-38114}
  - i40e: retry VFLR handling if there is ongoing VF reset (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - i40e: return false from i40e_reset_vf if reset is in progress (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - ixgbe: Fix typos and clarify comments in X550 driver code (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - iavf: convert to NAPI IRQ affinity API (Michal Schmidt) [RHEL-131333 RHEL-99253]
  - ice: add a separate Rx handler for flow director commands (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: change SMA pins to SDP in PTP API (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: redesign dpll sma/u.fl pins control (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ixgbe: add link_down_events statistic (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - i40e: add link_down_events statistic (Michal Schmidt) [RHEL-101966 RHEL-131333 RHEL-99236]
  - ice: add link_down_events statistic (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - net: intel: move RSS packet classifier types to libie (Michal Schmidt) [RHEL-101966 RHEL-118528 RHEL-122279 RHEL-131333 RHEL-99197 RHEL-99236 RHEL-99253]
  - net: intel: rename 'hena' to 'hashcfg' for clarity (Michal Schmidt) [RHEL-101966 RHEL-118528 RHEL-131333 RHEL-99197 RHEL-99236 RHEL-99253]
  - ixgbe: devlink: add devlink region support for E610 (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: add E610 .set_phys_id() callback implementation (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: apply different rules for setting FC on E610 (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: add support for ACPI WOL for E610 (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - eth: ixgbe: migrate to new RXFH callbacks [partial:e610] (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - ixgbe: create E610 specific ethtool_ops structure (Michal Schmidt) [RHEL-131333 RHEL-99223]
  - igc: Change Tx mode for MQPRIO offloading (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: Limit netdev_tc calls to MQPRIO (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: add support to get frame preemption statistics via ethtool (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - ice: support egress drop rules on PF (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - igc: add support to get MAC Merge data via ethtool (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: block setting preemptible traffic class in taprio (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: add support to set tx-min-frag-size (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: add support for frame preemption verification (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - ice: make const read-only array dflt_rules static (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: improve error message for insufficient filter space (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: enable LLDP TX for VFs through tc (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: remove headers argument from ice_tc_count_lkups (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: receive LLDP on trusted VFs (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: do not add LLDP-specific filter if not necessary (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: fix check for existing switch rule (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - igc: Fix TX drops in XDP ZC (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - idpf: use napi's irq affinity (Michal Schmidt) [RHEL-131333]
  - ice: use napi's irq affinity and rmap IRQ notifiers (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - ice: clear NAPI's IRQ numbers in ice_vsi_clear_napi_queues() (Michal Schmidt) [RHEL-118528 RHEL-131333 RHEL-99197]
  - igc: Add launch time support to XDP ZC (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - igc: Refactor empty frame insertion for launch time support (Michal Schmidt) [RHEL-131333 RHEL-99198]
  - intel/fm10k: Remove unused fm10k_iov_msg_mac_vlan_pf (Michal Schmidt) [RHEL-131333]
  - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (Michal Schmidt) [RHEL-131333 RHEL-99221]
  - e1000: Hold RTNL when e1000_down can be called (Michal Schmidt) [RHEL-131333]
  - e1000: Link NAPI instances to queues and IRQs (Michal Schmidt) [RHEL-131333]
  - igb: Cleanup unused declarations (Michal Schmidt) [RHEL-131333 RHEL-99220]
  - Reapply "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-134991]
  - net: WQ_PERCPU added to alloc_workqueue users (Ivan Vecera) [RHEL-134727]
  - net: replace use of system_wq with system_percpu_wq (CKI Backport Bot) [RHEL-134727]
  - net: replace use of system_unbound_wq with system_dfl_wq (CKI Backport Bot) [RHEL-134727]
  - Octeontx2-pf: Update xdp features (Kamal Heib) [RHEL-127305]
  - Octeontx2-af: Add proper checks for fwdata (Kamal Heib) [RHEL-127305]
  - redhat/configs: enable CONFIG_RVU_ESWITCH on RHEL (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Fix devm_kcalloc() error checking (Kamal Heib) [RHEL-127305]
  - Octeontx2-af: Fix missing error code in cgx_probe() (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: fix bitmap leak (Kamal Heib) [RHEL-127305]
  - octeontx2-vf: fix bitmap leak (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (Kamal Heib) [RHEL-127305]
  - ethernet: rvu-af: Remove slash from the driver name (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Remove unused declarations (Kamal Heib) [RHEL-127305]
  - Octeontx2-af: Fix NIX X2P calibration failures (Kamal Heib) [RHEL-127305]
  - Octeontx2-vf: Fix max packet length errors (Kamal Heib) [RHEL-127305]
  - Octeontx2-af: Broadcast XON on all channels (Kamal Heib) [RHEL-127305]
  - Octeontx2-af: Skip overlap check for SPI field (Kamal Heib) [RHEL-127305]
  - octeontx2-af: use unsigned int as iterator for unsigned values (Kamal Heib) [RHEL-127305]
  - Octeontx2-af: Debugfs support for firmware data (Kamal Heib) [RHEL-127305]
  - Octeontx2-af: RPM: Update DMA mask (Kamal Heib) [RHEL-127305]
  - Octeontx2-af: Disable stale DMAC filters (Kamal Heib) [RHEL-127305]
  - Octeontx2-af: Add programmed macaddr to RVU pfvf (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Fix error code in rvu_mbox_init() (Kamal Heib) [RHEL-127305]
  - Octeontx2-pf: ethtool: support multi advertise mode (Kamal Heib) [RHEL-127305]
  - Octeontx2-af: Introduce mode group index (Kamal Heib) [RHEL-127305]
  - Octeontx-pf: Update SGMII mode mapping (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Fix rvu_mbox_init return path (Kamal Heib) [RHEL-127305]
  - Octeontx2-pf: Fix Backpresure configuration (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: CN20K mbox implementation between PF-VF (Kamal Heib) [RHEL-127305]
  - octeontx2-af: CN20K mbox implementation for AF's VF (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: CN20K mbox REQ/ACK implementation for NIC PF (Kamal Heib) [RHEL-127305]
  - octeontx2-af: CN20k mbox to support AF REQ/ACK functionality (Kamal Heib) [RHEL-127305]
  - octeontx2-af: CN20k basic mbox operations and structures (Kamal Heib) [RHEL-127305]
  - octeontx2: Set appropriate PF, VF masks and shifts based on silicon (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Avoid typecasts by simplifying otx2_atomic64_add macro (Kamal Heib) [RHEL-127305]
  - octeontx2: Annotate mmio regions as __iomem (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: QOS: Perform cache sync on send queue teardown (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: macsec: Get MACSEC capability flag from AF (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Add MACSEC capability flag (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Send Link events one by one (Kamal Heib) [RHEL-127305]
  - octeontx2-af: NPC: Clear Unicast rule on nixlf detach (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Set LMT_ENA bit for APR table entries (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Avoid adding dcbnl_ops for LBK and SDP vf (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Add tracepoint for NIX_PARSE_S (Kamal Heib) [RHEL-127305]
  - octeontx2: Add new tracepoint otx2_msg_status (Kamal Heib) [RHEL-127305]
  - octeontx2: Add pcifunc also to mailbox tracepoints (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Display names for CPT and UP messages (Kamal Heib) [RHEL-127305]
  - octeontx2-af: convert dev_dbg to tracepoint in mbox (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Do not reallocate all ntuple filters (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Fix CGX Receive counters (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Fix ethtool support for SDP representors (Kamal Heib) [RHEL-127305]
  - net: octeontx2: Use pure PCI devres API (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: AF_XDP: code clean up (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Remove unused rvu_npc_enable_bcast_entry (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer() (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: qos: fix VF root node parent queue index (Kamal Heib) [RHEL-127305]
  - net: octeontx2: Handle XDP_ABORTED and XDP invalid as XDP_DROP (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Free NIX_AF_INT_VEC_GEN irq (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Fix mbox INTR handler when num VFs > 64 (Kamal Heib) [RHEL-127305]
  - octeontx2-af: mcs: Remove redundant 'flush_workqueue()' calls (Kamal Heib) [RHEL-127305]
  - net: octeontx2: Add metadata support for xdp mode (Kamal Heib) [RHEL-127305]
  - Octeontx2-af: RPM: Register driver with PCI subsys IDs (Kamal Heib) [RHEL-127305]
  - octeontx2: hide unused label (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: AF_XDP zero copy transmit support (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Prepare for AF_XDP (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Reconfigure RSS table after enabling AF_XDP zerocopy on rx queue (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: AF_XDP zero copy receive support (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Add AF_XDP non-zero copy support (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: use xdp_return_frame() to free xdp buffers (Kamal Heib) [RHEL-127305]
  - octeontx2: don't mess with ->d_parent or ->d_parent->d_name (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: mcs: Remove dead code and semi-colon from rsrc_name() (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: fix error handling of devlink port in rvu_rep_create() (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: fix netdev memory leak in rvu_rep_create() (Kamal Heib) [RHEL-127305]
  - octeontx2-af: fix build regression without CONFIG_DCB (Kamal Heib) [RHEL-127305]
  - cn10k-ipsec: Fix compilation error when CONFIG_XFRM_OFFLOAD disabled (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Fix installation of PF multicast rule (Kamal Heib) [RHEL-127305]
  - cn10k-ipsec: Enable outbound ipsec crypto offload (Kamal Heib) [RHEL-127305]
  - cn10k-ipsec: Allow ipsec crypto offload for skb with SA (Kamal Heib) [RHEL-127305]
  - cn10k-ipsec: Process outbound ipsec crypto offload (Kamal Heib) [RHEL-127305]
  - cn10k-ipsec: Add SA add/del support for outb ipsec crypto offload (Kamal Heib) [RHEL-127305]
  - cn10k-ipsec: Init hardware for outbound ipsec crypto offload (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Disable backpressure between CPT and NIX (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Move skb fragment map/unmap to common code (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: map skb data as device writeable (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Fix SDP MAC link credits configuration (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Quiesce traffic before NIX block reset (Kamal Heib) [RHEL-127305]
  - octeontx2-af: RPM: fix stale FCFEC counters (Kamal Heib) [RHEL-127305]
  - octeontx2-af: RPM: fix stale RSFEC counters (Kamal Heib) [RHEL-127305]
  - octeontx2-af: RPM: Fix low network performance (Kamal Heib) [RHEL-127305]
  - octeontx2-af: RPM: Fix mismatch in lmac type (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Fix spelling mistake "reprentator" -> "representor" (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Adds TC offload support (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Implement offload stats ndo for representors (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Add devlink port support (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Add representors for sdp MAC (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Configure VF mtu via representor (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Add support to sync link state between representor and VFs (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Get VF stats via representor (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Add packet path between representor and VF (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Add basic net_device_ops (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Create representor netdev (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: RVU representor driver (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Knobs for NPC default rule counters (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Refactor few NPC mcam APIs (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Move shared APIs to header file (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Reuse PF max mtu value (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Add new APIs for queue memory alloc/free. (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: Define common API for HW resources configuration (Kamal Heib) [RHEL-127305]
  - net: marvell: use ethtool string helpers (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Kamal Heib) [RHEL-127305]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Kamal Heib) [RHEL-127305]
  - octeontx2-af: Change block parameter to const pointer in get_lf_str_list (Kamal Heib) [RHEL-127305]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-207.el10]
changelog:
  - x86/vmware: Fix hypercall clobbers (Jose Ignacio Tornos Martinez) [RHEL-149126]
  - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-147676]
  - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-147676]
  - Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-147676]
  - net: wwan: mhi: Keep modem name match with Foxconn T99W640 (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: t7xx: add support for HP DRMR-H01 (Jose Ignacio Tornos Martinez) [RHEL-137273 RHEL-146587]
  - net: wwan: iosm: use int type to store negative error codes (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: mhi_wwan_mbim: use correct mux_id for multiplexing (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: t7xx: Fix napi rx poll issue (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: t7xx: don't include '<linux/pm_wakeup.h>' directly (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: iosm: Fix hibernation by re-binding the driver around it (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: t7xx: Fix FSM command timeout issue (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: t7xx: Replace deprecated PCI functions (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: t7xx: Change PM_AUTOSUSPEND_MS to 5000 (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: t7xx: Unify documentation column width (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - net: wwan: t7xx: Add debug ports (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - wwan: core: Add WWAN ADB and MIPC port type (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - wwan: core: Pass string literal as format argument of dev_set_name() (Jose Ignacio Tornos Martinez) [RHEL-146587]
  - perf/x86/amd/uncore: Prevent UMC counters from saturating (Michael Petlan) [RHEL-106949]
  - perf/x86/amd/uncore: Add parameter to configure hrtimer (Michael Petlan) [RHEL-106949]
  - perf/x86/amd/uncore: Use hrtimer for handling overflows (Michael Petlan) [RHEL-106949]
  - perf/x86/intel/uncore: Use HRTIMER_MODE_HARD for detecting overflows (Michael Petlan) [RHEL-106949]
  - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Benjamin Poirier) [RHEL-98257]
  - net/mlx5: Fix vhca_id access call trace use before alloc (Benjamin Poirier) [RHEL-98257]
  - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Benjamin Poirier) [RHEL-98257]
  - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: TC, delete flows only for existing peers (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Benjamin Poirier) [RHEL-98257]
  - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Restore destroying state bit after profile cleanup (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix crash on profile change rollback failure (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Don't print error message due to invalid module (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Don't gate FEC histograms on ppcnt_statistical_group (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Serialize firmware reset with devlink (Michal Schmidt) [RHEL-98257]
  - net/mlx5: fw_tracer, Handle escaped percent properly (Michal Schmidt) [RHEL-98257]
  - net/mlx5: fw_tracer, Validate format string parameters (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Drain firmware reset in shutdown callback (Michal Schmidt) [RHEL-98257]
  - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix double unregister of HCA_PORTS component (Michal Schmidt) [RHEL-98257]
  - net/mlx5: make enable_mpesw idempotent (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Support XDP target xmit with dummy program (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Update XDP features in switch channels (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Use standard unit definitions for bandwidth conversion (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Use U8_MAX instead of hard coded magic number (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix validation logic in rate limiting (Michal Schmidt) [RHEL-98257]
  - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Move the SF table notifiers outside the devlink lock (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Move the SF HW table notifier outside the devlink lock (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Move the vhca event notifier outside of the devlink lock (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Initialize events outside devlink lock (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Abort new commands if all command slots are stalled (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Remove redundant bw_share minimal value assignment (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Refactor EEPROM query error handling to return status separately (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Michal Schmidt) [RHEL-98257]
  - mlx5: extract GRXRINGS from .get_rxnfc (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Expose definition for 1600Gbps link mode (Michal Schmidt) [RHEL-98257]
  - mlx5: Fix default values in create CQ (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix potentially misleading debug message (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix maxrate wraparound in threshold between units (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Michal Schmidt) [RHEL-98257]
  - net/mlx5: E-Switch, support eswitch inactive mode (Michal Schmidt) [RHEL-98257]
  - net/mlx5: MPFS, add support for dynamic enable/disable (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Add other eswitch support to userspace tables (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Refactor _get_prio() function (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Add other_eswitch support for devx destruction (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Michal Schmidt) [RHEL-98257]
  - net/mlx5: fs, set non default device per namespace (Michal Schmidt) [RHEL-98257]
  - net/mlx5: fs, Add other_eswitch support for steering tables (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add OTHER_ESWITCH HW capabilities (Michal Schmidt) [RHEL-98257]
  - RDMA/core: RDMA/mlx5: replace use of system_unbound_wq with system_dfl_wq (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Benjamin Poirier) [RHEL-98257]
  - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Benjamin Poirier) [RHEL-98257]
  - net/mlx5e: Fix return value in case of module EEPROM read error (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Defer channels closure to reduce interface down time (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Michal Schmidt) [RHEL-98257]
  - net/mlx5: IPoIB, set self loopback prevention in TIR init (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Enhance function structures for self loopback prevention application (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Convert to new hwtstamp_get/set interface (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Rename timestamp fields to hwtstamp_config (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Rename hwstamp functions to hwtstamp (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Remove redundant tstamp pointer from channel structures (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: kTLS, Cancel RX async resync request in error flows (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Don't zero user_count when destroying FDB tables (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add balance ID support for LAG multiplane groups (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Refactor HCA cap 2 setting (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Refactor PTP clock devcom pairing (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add software system image GUID infrastructure (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Use common mlx5_same_hw_devs function (Michal Schmidt) [RHEL-98257]
  - {rdma,net}/mlx5: Query vports mac address from device (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix IPsec cleanup over MPV device (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Refactor devcom to return NULL on failure (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Skip PPHCR register query if not supported by the device (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add PPHCR to PCAM supported registers mask (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Michal Schmidt) [RHEL-98257]
  - net/mlx5: fix pre-2.40 binutils assembler error (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Use extack in set rxfh callback (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Introduce mlx5e_rss_init_params (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Remove unused mdev param from RSS indir init (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Improve QoS error messages with actual depth values (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Generalize complex matchers (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Michal Schmidt) [RHEL-98257]
  - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" (Michal Schmidt) [RHEL-98257]
  - fwctl/mlx5: Add Adjacent function query commands and their scope (Benjamin Poirier) [RHEL-98257]
  - fwctl/mlx5: Allow MODIFY_CONG_STATUS command (Benjamin Poirier) [RHEL-98257]
  - fwctl/mlx5: Fix memory alloc/free in mlx5ctl_fw_rpc() (Benjamin Poirier) [RHEL-98257]
  - net/mlx5: fw reset, add reset timeout work (Michal Schmidt) [RHEL-98257]
  - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Stop polling for command response if interface goes down (Michal Schmidt) [RHEL-98257]
  - net/mlx5: IFC add balance ID and LAG per MP group bits (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add IFC bit for TIR/SQ order capability (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Expose uar access and odp page fault counters (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Report RS-FEC histogram statistics via ethtool (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Add logic to read RS-FEC histogram bin ranges from PPHCR (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Don't query FEC statistics when FEC is disabled (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Use %pe format specifier for error pointers (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, ignore flow level for multi-dest table (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Remove dead code from total_vfs setter (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Add flow rules for the decrypted ESP packets (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Recirculate decrypted packets into TTC table (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Michal Schmidt) [RHEL-98257]
  - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add uar access and odp page fault counters (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Use multiple CQ doorbells (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Use multiple TX doorbells (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Prepare for using different CQ doorbells (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Prepare for using multiple TX doorbells (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Store the global doorbell in mlx5_priv (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Refactor MACsec WQE metadata shifts (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Lag, add net namespace support (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add net namespace support to devcom (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Lag, move devcom registration to LAG layer (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Refactor devcom to use match attributes (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Add a miss level for ipsec crypto offload (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Harden uplink netdev access against device unbind (Michal Schmidt) [RHEL-98257]
  - net/mlx5: fix typo in pci_irq.c comment (Michal Schmidt) [RHEL-98257]
  - RDMA: Use %pe format specifier for error pointers (Benjamin Poirier) [RHEL-98257]
  - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Add stale counter for PCIe congestion events (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Make PCIe congestion event thresholds configurable (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Implement devlink total_vfs parameter (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Implement devlink enable_sriov parameter (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Implement cqe_compress_type via devlink params (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add RS FEC histogram infrastructure (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Support getcyclesx and getcrosscycles (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Extract MTCTR register read logic into helper function (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add PSP capabilities structures and bits (Michal Schmidt) [RHEL-98257]
  - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Michal Schmidt) [RHEL-98257]
  - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Michal Schmidt) [RHEL-98257]
  - net/mlx5: E-Switch, Register representors for adjacent vports (Michal Schmidt) [RHEL-98257]
  - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Michal Schmidt) [RHEL-98257]
  - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Michal Schmidt) [RHEL-98257]
  - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Michal Schmidt) [RHEL-98257]
  - net/mlx5: FS, Convert vport acls root namespaces to xarray (Michal Schmidt) [RHEL-98257]
  - eth: mlx5: remove Kconfig co-dependency with VXLAN (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Set local Xoff after FW update (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Update and set Xon/Xoff upon port speed set (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Update and set Xon/Xoff upon MTU set (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Prevent flow steering mode changes in switchdev mode (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Nack sync reset when SFs are present (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix lockdep assertion on sync reset unload event (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Reload auxiliary drivers on fw_activate (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Set default burst period for TX and RX reporters (Michal Schmidt) [RHEL-98257]
  - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Fix vport loopback forcing for MPV device (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Preserve shared buffer capacity during headroom updates (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Query FW for buffer ownership (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix QoS reference leak in vport enable error path (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Destroy vport QoS element when no configuration remains (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Preserve tc-bw during parent changes (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Base ECVF devlink port attrs from 0 (Michal Schmidt) [RHEL-98257]
  - net/mlx5: CT: Use the correct counter offset (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Fix table creation UID (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, don't rehash on every kind of insertion failure (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, prevent rehash from filling up the queues (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, fix complex rules rehash error flow (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, fix simple rules rehash error flow (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, fix bad parameter in CQ creation (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Support disabling host PFs (Benjamin Poirier) [RHEL-98257]
  - net/mlx5: Query to see if host PF is disabled (Michal Schmidt) [RHEL-98257]
  - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Michal Schmidt) [RHEL-98257]
  - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Michal Schmidt) [RHEL-98257]
  - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Michal Schmidt) [RHEL-98257]
  - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Don't use %pK through tracepoints (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Correctly set gso_segs when LRO is used (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Support routed networks during IPsec MACs initialization (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Remove skb secpath if xfrm state is not found (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Michal Schmidt) [RHEL-98257]
  - net: Fix typos (Benjamin Poirier) [RHEL-98257]
  - net/mlx5: Fix build -Wframe-larger-than warnings (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Refactor optional counters steering code (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Expose IFC bits for TPH (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Remove duplicate mkey from SHAMPO header (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: SHAMPO, Cleanup reservation size formula (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Fix incorrect MKEY masking (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Expose cable_length field in PFCC register (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add IFC bits and enums for buf_ownership (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add IFC bits to support RSS for IPSec offload (Michal Schmidt) [RHEL-98257]
  - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix memory leak in cmd_exec() (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: fix kdoc warning on eswitch.h (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: remove redundant check on err on return expression (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Add device PCIe congestion ethtool stats (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Create/destroy PCIe Congestion Event object (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Correctly set gso_size when LRO is used (Michal Schmidt) [RHEL-98257]
  - net/mlx5: IFC updates for disabled host PF (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Optimize DMABUF mkey page size (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Align mkc page size capability check to PRM (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Fix UMR modifying of mkey page size (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Expose HCA capability bits for mkey max page size (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Add new prio for promiscuous mode (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix race between DIM disable and net_dim() (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: RX, Remove unnecessary RQT redirects (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Warn when write combining is not supported (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: CT: extract a memcmp from a spinlock section (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Remove unused VLAN insertion logic in TX path (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add HWS as secondary steering mode (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Shrink empty matchers (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Rearrange to prevent forward declaration (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Track matcher sizes individually (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Decouple matcher RX and TX sizes (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Create STEs directly from matcher (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Refactor rule skip logic (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Export rule skip logic (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, remove incorrect comment (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, remove unused create_dest_array parameter (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add traffic class scheduling support for vport QoS (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add support for setting tc-bw on nodes (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Check device memory pointer before usage (Michal Schmidt) [RHEL-98257]
  - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix error handling in RQ memory model registration (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add IFC bits for PCIe Congestion Event object (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Small refactor for general object capabilities (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Michal Schmidt) [RHEL-98257]
  - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Fix vport loopback for MPV device (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Fix CC counters query for MPV (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Fix HW counters query for non-representor devices (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Support ethtool tcp-data-split settings (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Implement queue mgmt ops and single channel swap (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: SHAMPO: Separate pool for headers (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: SHAMPO: Improve hw gro capability checking (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: SHAMPO: Remove redundant params (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Fix leak of Geneve TLV option object (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, make sure the uplink is the last destination (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, fix missing ip_version handling in definer (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Init mutex on the correct path (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix return value when searching for existing flow group (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix ECVF vports unload on shutdown flow (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Ensure fw pages are always allocated on same NUMA (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Expose serial numbers in devlink info (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Allow setting MAC address of representors (Michal Schmidt) [RHEL-98257]
  - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Avoid flexible array warning (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Convert mlx5 netdevs to instance locking (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: Don't drop RTNL during firmware flash (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, handle modify header actions dependency (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, register reformat actions with fw (Michal Schmidt) [RHEL-98257]
  - net/mlx5: SWS, fix reformat id error handling (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Add support for 200Gbps per lane speeds (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Use to_delayed_work() (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, dump bad completion details (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, rework rehash loop (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, fix redundant extension of action templates (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, fix counting of rules in the matcher (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, force rehash when rule insertion failed (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, support complex matchers (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, introduce isolated matchers (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, expose polling function in header file (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, add definer function to get field name str (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Michal Schmidt) [RHEL-98257]
  - net/mlx5: support software TX timestamp (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Disallow matcher IP version mixing (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Harden IP version definer checks (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Fix IP version decision (Michal Schmidt) [RHEL-98257]
  - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Michal Schmidt) [RHEL-98257]
  - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Export action STE tables to debugfs (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Free unused action STE tables (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Cleanup matcher action STE table (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Use the new action STE pool (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Implement action STE pool (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Fix pool size optimization (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Add fullness tracking to pool (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Cleanup after pool refactoring (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Refactor pool implementation (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Make pool single resource (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Remove unused element array (Michal Schmidt) [RHEL-98257]
  - net/mlx5: HWS, Fix matcher action template attach (Michal Schmidt) [RHEL-98257]
  - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-98257]
  - ice: PTP: fix missing timestamps on E825 hardware (Michal Schmidt) [RHEL-145127]
  - perf: arm_v7_pmu: Don't disable counter in (armv7|krait_|scorpion_)pmu_enable_event() (Anubhav Shelat) [RHEL-111336]
  - perf: arm_v7_pmu: Drop obvious comments for enabling/disabling counters and interrupts (Anubhav Shelat) [RHEL-111336]
  - perf: apple_m1: Don't disable counter in m1_pmu_enable_event() (Anubhav Shelat) [RHEL-111336]
  - KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-109452]
  - audit: record fanotify event regardless of presence of rules (Richard Guy Briggs) [RHEL-106925]
  - audit: record AUDIT_ANOM_* events regardless of presence of rules (Richard Guy Briggs) [RHEL-106925]
  - bnxt_en: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Shruti Parab) [RHEL-108693]
  - bnxt_en: correct offset handling for IPv6 destination address (Shruti Parab) [RHEL-108693]
  - bnxt_en: Implement ethtool .set_tunable() for ETHTOOL_PFC_PREVENTION_TOUT (Shruti Parab) [RHEL-108693]
  - bnxt_en: Implement ethtool .get_tunable() for ETHTOOL_PFC_PREVENTION_TOUT (Shruti Parab) [RHEL-108693]
  - bnxt_en: Use VLAN_ETH_HLEN when possible (Shruti Parab) [RHEL-108693]
  - bnxt_en: Support for RoCE resources dynamically shared within VFs. (Shruti Parab) [RHEL-108693]
  - bnxt_en: Add err_qpc backing store handling (Shruti Parab) [RHEL-108693]
  - bnxt_en: hsi: Update FW interface to 1.10.3.133 (Shruti Parab) [RHEL-108693]
  - bnxt_en: Add fw log trace support for 5731X/5741X chips (Shruti Parab) [RHEL-108693]
  - bnxt_en: Improve bnxt_backing_store_cfg_v2() (Shruti Parab) [RHEL-108693]
  - bnxt_en: Optimize bnxt_sriov_disable() (Shruti Parab) [RHEL-108693]
  - bnxt_en: Remove unnecessary VF check in bnxt_hwrm_nvm_req() (Shruti Parab) [RHEL-108693]
  - bnxt_en: Drop redundant if block in bnxt_dl_flash_update() (Shruti Parab) [RHEL-108693]
  - bnxt_en: fix incorrect page count in RX aggr ring log (Shruti Parab) [RHEL-108693]
  - bnxt_en: Fix stats context reservation logic (Shruti Parab) [RHEL-108693]
  - bnxt_en: Adjust TX rings if reservation is less than requested (Shruti Parab) [RHEL-108693]
  - bnxt_en: Fix memory corruption when FW resources change during ifdown (Shruti Parab) [RHEL-108693]
  - bnxt_en: Add Hyper-V VF ID (Shruti Parab) [RHEL-108693]
  - bnxt_en: Add pcie_ctx_v2 support for ethtool -d (Shruti Parab) [RHEL-108693]
  - bnxt_en: Add pcie_stat_len to struct bp (Shruti Parab) [RHEL-108693]
  - bnxt_en: Refactor bnxt_get_regs() (Shruti Parab) [RHEL-108693]
  - bnxt: move bnxt_hsi.h to include/linux/bnxt/hsi.h (Shruti Parab) [RHEL-108693]
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Shruti Parab) [RHEL-108693]
  - bnxt_en: Fix DCB ETS validation (Shruti Parab) [RHEL-108693]
  - bnxt_en: eliminate the compile warning in bnxt_request_irq due to CONFIG_RFS_ACCEL (Shruti Parab) [RHEL-108693]
  - bnxt: properly flush XDP redirect lists (Shruti Parab) [RHEL-108693]
  - bnxt_en: Improve comment wording and error return code (Shruti Parab) [RHEL-108693]
  - bnxt_en: Update MRU and RSS table of RSS contexts on queue reset (Shruti Parab) [RHEL-108693]
  - bnxt_en: Add a helper function to configure MRU and RSS (Shruti Parab) [RHEL-108693]
  - bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() (Shruti Parab) [RHEL-108693]
  - bnxt_en: Add TPH support in BNXT driver (Shruti Parab) [RHEL-108693]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-208.el10]
changelog:
  - Merge: qaic driver from upstream v6.12..v6.18 (John Wiele) [RHEL-138457]
  - lib/interval_tree: skip the check before go to the right subtree (Joe Lawrence) [RHEL-147274]
  - ALSA: update RHEL kconfigs for 6.18 upstream code (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: fix micmute LED reversed on HP Abe and Bantie (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: pm4125: drop bogus container_of() error handling (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: q6adm: the the copp device only during last instance (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: q6asm-dai: perform correct state check before closing (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: lpass-tx-macro: fix SM6115 support (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: rz-ssi: Fix rz_ssi_priv::hw_params_cache::sample_width (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: rz-ssi: Fix channel swap issue in full duplex mode (Jaroslav Kysela) [RHEL-118910]
  - ASoC: stm32: sai: fix OF node leak on probe (Jaroslav Kysela) [RHEL-118910]
  - ASoC: stm32: sai: fix clk prepare imbalance on probe failure (Jaroslav Kysela) [RHEL-118910]
  - ASoC: stm32: sai: fix device leak on probe (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd939x: fix regmap leak on probe failure (Jaroslav Kysela) [RHEL-118910]
  - ASoC: ak4458: remove the reset operation in probe and remove (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-mixer: us16x08: validate meter packet indices (Jaroslav Kysela) [RHEL-118910]
  - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path (Jaroslav Kysela) [RHEL-118910]
  - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path (Jaroslav Kysela) [RHEL-118910]
  - ASoC: fsl_sai: Constrain sample rates from audio PLLs only in master mode (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for HP 200 G2i (Jaroslav Kysela) [RHEL-118910]
  - ALSA: realtek/alc288 fix headphone for MS Surface 2/3 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/tas2781: properly initialize speaker_id for TAS2563 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: sof_sdw: Add new quirks for PTL on Dell with CS42L43 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Add Asus quirk for TAS amplifiers (Jaroslav Kysela) [RHEL-118910]
  - regmap: slimbus: fix bus_context pointer in regmap init calls (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40317}
  - ASoC: ops: fix snd_soc_get_volsw for sx controls (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SDCA: support Q7.8 volume format (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs35l41: Always return 0 when a subsystem ID is found (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd937x: Fix error handling in wcd937x codec driver (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: pm4125: Fix potential conflict when probing two devices (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: pm4125: Remove irq_chip on component unbind (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: Fix error handling in pm4125 audio codec driver (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: ipc4-topology: Convert FLOAT to S32 during blob selection (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: ipc4-topology: Prefer 32-bit DMIC blobs for 8-bit formats as well (Jaroslav Kysela) [RHEL-118910]
  - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SDCA: Remove duplicated module macros (Jaroslav Kysela) [RHEL-118910]
  - ALSA: wavefront: Fix integer overflow in sample size validation (Jaroslav Kysela) [RHEL-118910] {CVE-2025-68344}
  - ALSA: wavefront: Clear substream pointers on close (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() (Jaroslav Kysela) [RHEL-118910] {CVE-2025-68345}
  - ALSA: hda/tas2781: fix speaker id retrieval for multiple probes (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Add match for ASUS Xbox Ally projects (Jaroslav Kysela) [RHEL-118910]
  - ALSA: dice: fix buffer overflow in detect_stream_formats() (Jaroslav Kysela) [RHEL-118910] {CVE-2025-68346}
  - ASoC: amd: acp: update tdm channels for specific DAI (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire-motu: add bounds check in put_user loop for DSP events (Jaroslav Kysela) [RHEL-118910]
  - ALSA: uapi: Fix typo in asound.h comment (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (Jaroslav Kysela) [RHEL-118910] {CVE-2025-68347}
  - ASoC: ak5558: Disable regulator when error happens (Jaroslav Kysela) [RHEL-118910]
  - ASoC: ak4458: Disable regulator when error happens (Jaroslav Kysela) [RHEL-118910]
  - ASoC: amd: acp: Audio is not resuming after s0ix (Jaroslav Kysela) [RHEL-118910]
  - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: catpt: Fix error path in hw_params() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: fsl_xcvr: clear the channel status control memory (Jaroslav Kysela) [RHEL-118910]
  - ASoC: nau8325: add missing build config (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: nau8325: Silence uninitialized variables warnings (Jaroslav Kysela) [RHEL-118910]
  - ASoC: nau8325: use simple i2c probe function (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tas2781: correct the wrong period (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tas2781: Correct the wrong chip ID for reset variable check (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SDCA: Fix missing dash in HIDE DisCo property (Jaroslav Kysela) [RHEL-118910]
  - soundwire: intel_auxdevice: add cs42l45 codec to wake_capable_list (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek - Enable Mute LED for HP ZBook X G2i platform (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek - Enable Mute LED and Tas2781 for HP platform (Jaroslav Kysela) [RHEL-118910]
  - platform/x86: serial-multi-instantiate: Add IRQ_RESOURCE_OPT for IRQ missing projects (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Add quirk for HP ProBook 450 G8 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: fix uac2 clock source at terminal parser (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: add quirk for HP pavilion aero laptop 13z-be200 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/cirrus fix cs420x MacPro 6,1 inverted jack detection (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: au88x0: Fix incorrect error handling for PCI config reads (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series (Jaroslav Kysela) [RHEL-118910]
  - ASoC: rsnd: fix OF node reference leak in rsnd_ssiu_probe() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/tas2781: Correct the wrong project ID (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40275}
  - ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list (Jaroslav Kysela) [RHEL-118910] {CVE-2025-68281}
  - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40269}
  - ALSA: hda/tas2781: Add new quirk for HP new projects (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tas2781: fix getting the wrong device number (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: va-macro: fix resource leak in probe error path (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tas2783A: Fix issues in firmware parsing (Jaroslav Kysela) [RHEL-118910]
  - ASoC: sdw_utils: fix device reference leak in is_sdca_endpoint_present() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs4271: Fix regulator leak on probe failure (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver (Jaroslav Kysela) [RHEL-118910] {CVE-2025-68205}
  - ASoC: da7213: Use component driver suspend/resume (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: add min_mute quirk for SteelSeries Arctis (Jaroslav Kysela) [RHEL-118910]
  - ASoC: doc: cs35l56: Update firmware filename description for B0 silicon (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Enable mic on Vaio RPL (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: pm4125-sdw: correct number of soundwire ports (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: rz-ssi: Use proper dma_buffer_pos after resume (Jaroslav Kysela) [RHEL-118910]
  - ASoC: fsl_sai: Fix sync error in consumer mode (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Fix build for sdw_utils (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Fix mute led for HP Victus 15-fa1xxx (MB 8C2D) (Jaroslav Kysela) [RHEL-118910]
  - ASoC: rt721: fix prepare clock stop failed (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: don't log messages meant for 1810c when initializing 1824c (Jaroslav Kysela) [RHEL-118910]
  - ASoC: mediatek: Fix double pm_runtime_disable in remove functions (Jaroslav Kysela) [RHEL-118910]
  - ASoC: fsl_micfil: correct the endian format for DSD (Jaroslav Kysela) [RHEL-118910]
  - ASoC: fsl_sai: fix bit order for DSD format (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: Use snd_codec format when initializing probe (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: Disable periods-elapsed work when closing PCM (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40344}
  - ASoC: Intel: avs: Unprepare a stream when XRUN occurs (Jaroslav Kysela) [RHEL-118910]
  - ASoC: sdw_utils: add name_prefix for rt1321 part id (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qdsp6: q6asm: do not sleep while atomic (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Remove cs42l43 match from sdw link3 (Jaroslav Kysela) [RHEL-118910]
  - ASOC: max98090/91: fix for filter configuration: AHPF removed DMIC2_HPF added (Jaroslav Kysela) [RHEL-118910]
  - ASoC: amd: acp: Add ACP7.0 match entries for cs35l56 and cs42l43 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs-amp-lib-test: Fix missing include of kunit/test-bug.h (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs530x: Correct log message with expected variable (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: fix control pipe direction (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 2-in-1 14AKP10 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Fix mute led for HP Omen 17-cb0xxx (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: fix vendor quirk for Logitech H390 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: add volume quirks for MS LifeChat LX-3000 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40162}
  - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: Add compatible string fsl,imx-audio-tlv320 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd938x-sdw: remove redundant runtime pm calls (Jaroslav Kysela) [RHEL-118910]
  - ASoC: sdw_utils: add rt1321 part id to codec_info_list (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40085}
  - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: add mixer_playback_min_mute quirk for Logitech H390 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler (Jaroslav Kysela) [RHEL-118910]
  - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit (Jaroslav Kysela) [RHEL-118910]
  - ASoC: nau8821: Consistently clear interrupts before unmasking (Jaroslav Kysela) [RHEL-118910]
  - ASoC: nau8821: Generalize helper to clear IRQ status (Jaroslav Kysela) [RHEL-118910]
  - ASoC: nau8821: Cancel jdet_work before handling jack ejection (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tas2781: Update ti,tas2781.yaml for adding tas58xx (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tas2781: Support more newly-released amplifiers tas58xx in the driver (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: sc8280xp: Add support for QCS615 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: qcom,sm8250: Add QCS615 sound card (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/tas2781: Set tas2781_hda::tasdevice_priv::chip_id as TAS5825 in case of tas5825 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Add quirk entry for HP ZBook 17 G6 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: apply quirk for Huawei Technologies Co., Ltd. CM-Q3 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/intel: Add MSI X870E Tomahawk to denylist (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda: Fix missing pointer check in hda_component_manager_init function (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40097}
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40098}
  - ASoC: rt722: add settings for rt722VB (Jaroslav Kysela) [RHEL-118910]
  - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb: fpc: replace kmalloc_array followed by copy_from_user with memdup_array_user (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/tas2781: Enable init_profile_id for device initialization (Jaroslav Kysela) [RHEL-118910]
  - ALSA: emu10k1: Fix typo in docs (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Add quirk for ASUS ROG Zephyrus Duo (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: Intel: Read the LLP via the associated Link DMA channel (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: ipc4-pcm: do not report invalid delay values (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: sof-audio: add dev_dbg_ratelimited wrapper (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: Intel: hda-pcm: Place the constraint on period time instead of buffer time (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: ipc4-topology: Account for different ChainDMA host buffer size (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down (Jaroslav Kysela) [RHEL-118910]
  - mfd: cs42l43: Remove IRQ masking in suspend (Jaroslav Kysela) [RHEL-118910]
  - mfd: cs42l43: Move IRQ enable/disable to encompass force suspend (Jaroslav Kysela) [RHEL-118910]
  - mfd: arizona: Make legacy gpiolib interface optional (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/hdmi: Add pin fix for HP ProDesk model (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: don't hardcode gain for output channel of Presonus Studio (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: add the initial mix for Presonus Studio 1824c (Jaroslav Kysela) [RHEL-118910]
  - ALSA: doc: improved docs about quirk_flags in snd-usb-audio (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: make param quirk_flags change-able in runtime (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: improve module param quirk_flags (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: add two-way convert between name and bit for QUIRK_FLAG_* (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free (Jaroslav Kysela) [RHEL-118910] {CVE-2025-39997}
  - ALSA: usb-audio: add mono main switch to Presonus S1824c (Jaroslav Kysela) [RHEL-118910]
  - ALSA: compress: document 'chan_map' member in snd_dec_opus (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs35l56: Add support for CS35L56 B2 silicon (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs35l56: Set fw_regs table after getting REVID (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Add quirk for HP Spectre 14t-ea100 (Jaroslav Kysela) [RHEL-118910]
  - ASoc: tas2783A: Fix an error code in probe() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: sc8280xp: use sa8775p/ subdir for QCS9100 / QCS9075 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: stm32: sai: manage context in set_sysclk callback (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: ignore 1st FSERR (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: Add note for The possibility of R/L opposite Capture (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: setup both (Playback/Capture) in the same time (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: tidyup DMAC stop timing (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: add .symmetric_xxx on snd_soc_dai_driver (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: set SIFCTR register (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: use reset controller (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: add unique NOTE name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd-common: fix signedness bug in wcd_dt_parse_micbias_info() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-binding: Convert MediaTek mt8183-mt6358 to DT schema (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Convert MT8183 DA7219 sound card to DT schema (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-binding: Convert mt8183-afe-pcm to dt-schema (Jaroslav Kysela) [RHEL-118910]
  - ASoc: tas2783A: Fix spelling mistake "Perifpheral" -> "Peripheral" (Jaroslav Kysela) [RHEL-118910]
  - ASoc: tas2783A: Remove unneeded semicolon (Jaroslav Kysela) [RHEL-118910]
  - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: don't apply interface quirk to Presonus S1824c (Jaroslav Kysela) [RHEL-118910]
  - tas2783A: Add acpi match changes for Intel MTL (Jaroslav Kysela) [RHEL-118910]
  - ASoc: tas2783A: add machine driver changes (Jaroslav Kysela) [RHEL-118910]
  - ASoc: tas2783A: machine driver amp utility for TI devices (Jaroslav Kysela) [RHEL-118910]
  - ASoc: tas2783A: Add soundwire based codec driver (Jaroslav Kysela) [RHEL-118910]
  - ASoC: ops: improve snd_soc_get_volsw (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs35l41: Fallback to reading Subsystem ID property if not ACPI (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: cirrus,cs35l41: Document the cirrus,subsystem-id property (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tas2781: Correct the wrong description and register address on tas2781 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40132}
  - ASoC: qcom: qdsp6/audioreach: add support for offloading raw opus playback (Jaroslav Kysela) [RHEL-118910]
  - ALSA: compress_offload: increase SNDRV_COMPRESS_VERSION minor version by 1 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: compress: add raw opus codec define and opus decoder structs (Jaroslav Kysela) [RHEL-118910]
  - ASoC: fsl: fsl_qmc_audio: Drop struct qmc_dai_chan (Jaroslav Kysela) [RHEL-118910]
  - ASoC: fsl: fsl_qmc_audio: Only request completion on last channel (Jaroslav Kysela) [RHEL-118910]
  - ASoC: fsl: fsl_qmc_audio: Ensure audio channels are ordered in TDM bus (Jaroslav Kysela) [RHEL-118910]
  - ASoC: da7213: Convert to DEFINE_RUNTIME_DEV_PM_OPS() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: ipc3-dtrace: fix potential integer overflow in allocation (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd937x: get regmap directly (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd938x: get regmap directly (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd-common: move status_update callback to common (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd939x: get regmap directly (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd-common: move component ops to common (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd-common: move WCD_SDW_CH to common (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd: add common helper for wcd codecs (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcdxxxx: use sdw_slave_get_current_bank helper (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcdxxxx: use of_sdw_find_device_by_node helper (Jaroslav Kysela) [RHEL-118910]
  - soundwire: bus: add sdw_slave_get_current_bank helper (Jaroslav Kysela) [RHEL-118910]
  - soundwire: bus: add of_sdw_find_device_by_node helper (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd937x: make stub functions inline (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wcd937x: set the comp soundwire port correctly (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40045}
  - ASoC: soc-dapm: add snd_soc_dapm_set_idle_bias() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: add snd_soc_dapm_get_bias_level() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: tidyup idle_bias handling - step2 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: tidyup idle_bias handling - step1 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: remove suspend_bias_off from snd_soc_dapm_context (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-card: add snd_soc_card_to_dapm() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-component: add snd_soc_component_to_dapm() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: use dapm->component instead of container_of() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: add snd_soc_dapm_to_card() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: add snd_soc_dapm_to_dev() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: Fix KCSAN data-race warning at snd_seq_fifo_poll_wait() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: spi/at73c213: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: add bindings for pm4125 audio codec (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: add new pm4125 audio codec driver (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: asahi-kasei,ak4458: Reference common DAI properties (Jaroslav Kysela) [RHEL-118910]
  - ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40142}
  - ASoC: Intel: hda-sdw-bpt: set persistent_buffer false (Jaroslav Kysela) [RHEL-118910]
  - ALSA: serial-generic: remove shared static buffer (Jaroslav Kysela) [RHEL-118910]
  - ALSA: asihpi: Simplify error handling in PCM substream setup (Jaroslav Kysela) [RHEL-118910]
  - ASoC: apple: mca: Add "apple,t8103-mca" compatible (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: apple,mca: Add t6020-mca compatible (Jaroslav Kysela) [RHEL-118910]
  - ALSA: aoa: Remove redundant size arguments from strscpy() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: linux,spdif: Add "port" node (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: pcm1754: add pcm1754 dac driver (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: ti,pcm1754: add binding documentation (Jaroslav Kysela) [RHEL-118910]
  - ALSA: sparc/dbri: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: sparc/cs4231: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: sparc/amd7930: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb: fcp: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: line6: fix scoped_guard done variable misuse (Jaroslav Kysela) [RHEL-118910]
  - ALSA: line6: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ppc: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: snd_ps3: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: parisc: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: snd-n64: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: sgio2audio: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: arm: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: aoa: Don't split string across lines (Jaroslav Kysela) [RHEL-118910]
  - ALSA: aoa: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs-amp-lib-test: Add test for getting cal data from HP EFI (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs-amp-lib: Add HP-specific EFI variable for calibration data (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs-amp-lib-test: Add tests for cs_amp_get_vendor_spkid() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs35l56: Check for vendor-specific speaker ID value (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs-amp-lib: Add handling for Lenovo and HP UEFI speaker ID (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs-amp-lib: Rename defines for Cirrus Logic EFI (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hrtimer: Avoid direct access to hrtimer clockbase (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tas2781: Add tas2118, tas2x20, tas5825 support (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tas2781: Add tas2118, tas2x20, tas5825 support (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40121}
  - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: tlv320dac33: Convert to use gpiod api (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: tlv320dac33: Add default value for burst_bclkdiv (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: tlv320dac33: Remove unused struct tlv320dac33_platform_data and header file tlv320dac33-plat.h (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: rz-ssi: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: fsi: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: rsnd: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: compress_offload: Add SNDRV_COMPRESS_AVAIL64 ioctl (Jaroslav Kysela) [RHEL-118910]
  - ALSA: compress_offload: Add SNDRV_COMPRESS_TSTAMP64 ioctl (Jaroslav Kysela) [RHEL-118910]
  - ALSA: compress_offload: Add 64-bit safe timestamp infrastructure (Jaroslav Kysela) [RHEL-118910]
  - ALSA: scarlett2: Add Vocaster speaker/headphone mute controls (Jaroslav Kysela) [RHEL-118910]
  - ALSA: cs4281: Send the PCM period elapsed notification properly (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: fs210x: Add NULL check in fs210x_register_snd_component (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: apply quirk for MOONDROP Quark2 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: apply "mixer_min_mute" quirks on some devices (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: add quirk QUIRK_FLAG_MIXER_CAPTURE_MIN_MUTE (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: rename QUIRK_FLAG_MIXER_MIN_MUTE to QUIRK_FLAG_MIXER_PLAYBACK_MIN_MUTE (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: qcom,lpass-va-macro: Update bindings for clocks to support ADSP (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs42l43: Shutdown jack detection on suspend (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs42l43: Disable IRQs in system suspend (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs42l43: Store IRQ domain in codec private data (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs42l43: Rename system suspend callback and fix debug print (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: wlf,wm8960: Document routing strings (pin names) (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: nuvoton,nau8825: Document routing strings (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: everest,es8316: Document routing strings (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: lpass-wsa-macro: add Codev version 2.9 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: lpass-macro: add Codec version 2.9 (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: qcom: Add Glymur LPASS wsa and va macro codecs (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: x1e80100: add compatible for glymur SoC (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: qcom,sm8250: Add glymur sound card (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: x1e80100: set card driver name from match data (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: ssm4567: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: rt5682: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: rt5663: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: rt5514: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: rt298: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: rt286: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: rt274: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: probe: Refactor dai_link creation (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: nau8825: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: max98927: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: max98373: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: max98357a: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: i2stest: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: es8336: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: dmic: Refactor dai_link creation (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: da7219: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: hda: Adjust platform name (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/conexant: Fix typos in comments (Jaroslav Kysela) [RHEL-118910]
  - ALSA: rme32: Fix serialization in snd_rme32_capture_adat_open() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: rockchip: i2s-tdm: switch to FIELD_PREP_WM16_CONST macro (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: ipc4-topology: Fix a less than zero check on a u32 (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Use is_s4_resume() macro (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: audioreach: convert to cpu endainess type before accessing (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: topology: convert to cpu endainess type before accessing (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: audioreach: fix potential null pointer dereference (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40013}
  - soundwire: Use min() to improve code (Jaroslav Kysela) [RHEL-118910]
  - soundwire: bus: Drop dev_pm_domain_detach() call (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: rename snd_soc_kcontrol_component() to snd_soc_kcontrol_to_component() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: rename dapm_kcontrol_get_value() to snd_soc_dapm_kcontrol_get_value() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: rename snd_soc_dapm_kcontrol_dapm() to snd_soc_dapm_kcontrol_to_dapm() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: rename snd_soc_dapm_kcontrol_widget() to snd_soc_dapm_kcontrol_to_widget() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: misc: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: virtio: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ac97bus: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: atmel: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: pxa2xx: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: aaci: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: aoa: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: sparc: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: vxpocket: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: pdaudiocf: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: at73c213: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: xen: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: x86: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: x86: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: synth: Use guard() for preset locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: synth: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: synth: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: i2c: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: i2c: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: caiaq: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: bcd2000: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb: qcom: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: line6: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hiface: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hiface: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usx2y: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ua101: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ua101: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: serial-u16550: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: portman2x4: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: mts64: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: mtpav: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: mpu401: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: dummy: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: vx: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: opl4: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: opl4: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: opl3: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: opl3: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: aloop: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: aloop: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: wavefront: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: wss: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: wss: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: sscape: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: emu8000: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: sb: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: sb: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: opti9xx: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: opl3sa2: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: msnd: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: gus: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: gus: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: es18xx: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: es1688: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: cs423x: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: cs423x: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: cmi8330: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ad1816a: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ymfpci: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: vx222: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: via82xx: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: trident: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: trident: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: sonicvibes: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: sis7019: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: sis7019: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: rme9652: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hdspm: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hdsp: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: rme96: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: rme32: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: pcxhr: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: oxygen: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: oxygen: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: nm256: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: nm256: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: mixart: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: maestro3: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: lx6464es: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: lola: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: lola: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: korg1212: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: korg1212: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: intel8x0: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ice1712: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ice1712: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: fm801: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: es1968: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: es1968: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: es1938: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: emu10k1x: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: emu10k1: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: emu10k1: Use guard() for emu1010 FPGA locking (Jaroslav Kysela) [RHEL-118910]
  - ALSA: emu10k1: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: echoaudio: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: echoaudio: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ctxfi: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ctxfi: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: cs5535audio: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: cs46xx: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: cs46xx: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: cs4281: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: cmipci: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: cmipci: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ca0106: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: bt87x: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: aw2: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: aw2: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: atiixp: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: atiixp: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ad1889: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: als4000: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: als300: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ens137x: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ens137x: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: azt3328: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ali5451: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ac97: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: ac97: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: motu: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: lib: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: tascam: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: oxfw: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: fireworks: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: fireface: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: digi00x: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: dice: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: bebob: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: lib: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: isight: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: fireface: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: tascam: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: oxfw: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: motu: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: fireworks: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: digi00x: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: dice: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: firewire: bebob: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ASoC: sof: ipc4-topology: Add support to sched_domain attribute (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: sof-client: Introduce sof_client_dev_entry structure (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: sof-client: Convert sof_client_dev_to_sof_dev into function (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: sof-client-probes: Add available points_info(), IPC4 only (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: sof-client-probes-ipc4: Human readable debugfs "probe_points" (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: sof-client: Add sof_client_ipc4_find_swidget_by_id() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: IPC4: Add GET macros for module id and module instance id (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: sof-client-probes-ipc4: Implement ipc4_probes_points_info (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: ipc4-topology: Add support for float sample type (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: ipc4-topology: Add support for 8-bit formats (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: ipc4-pcm: Add fixup for channels (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: oss/rw: Cleanup with guard (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: oss/synth: Clean up with guard and auto cleanup (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: oss/midi: Cleanup with guard and auto-cleanup (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: oss: Clean up core code with guard() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: Clean up fifo locking with guard (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: Clean up queue locking with auto cleanup (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: Clean up port locking with auto cleanup (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: Use auto-cleanup for client refcounting (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: Use guard() for mutex and rwsem locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: Clean up spin lock with guard() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: seq: Simplify internal command operation from OSS layer (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/intel: Use guard() for spinlocks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/common: Use guard() for spinlocks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/core: Use guard() for spinlocks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/ext: Use guard() for spinlocks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/generic: Use auto cleanup for temporary buffers (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Use auto cleanup for temporary buffers (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/common: Use auto cleanup for temporary buffers (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/intel: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/analog: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/generic: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/component: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/cs8409: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/tas2781: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/cs35l41: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Use guard() for mutex locks and COEF locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/hdmi: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/ca0132: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/core: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/common: Use guard() for mutex locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda: Use auto cleanup macros for DSP loader locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/common: Use cleanup macros for PM controls (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/realtek: Use cleanup macros for PM controls (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/hdmi: Use cleanup macros for PM controls (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda/ca0132: Use cleanup macros for PM controls (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda: Introduce auto cleanup macros for PM (Jaroslav Kysela) [RHEL-118910]
  - ASoC: doc: Internally link to Writing an ALSA Driver docs (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: Intel: only detect codecs when HDA DSP probe (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: Intel: split codec mask detect and programming UNSOL (Jaroslav Kysela) [RHEL-118910]
  - ASoC: amd: acp: Remove (explicitly) unused header (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: use int type to store negative error codes (Jaroslav Kysela) [RHEL-118910]
  - ASoC: adau1977: use int type to store negative error codes (Jaroslav Kysela) [RHEL-118910]
  - ASoC: amd: use int type to store negative error codes (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: Allow i2s test and non-test boards to coexist (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: Simplify avs_get_i2s_boards() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: Simplify dmi_match_quirk() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: Cleanup duplicate members (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: New board registration routines (Jaroslav Kysela) [RHEL-118910]
  - ASoC: mediatek: common: Switch to for_each_available_child_of_node_scoped() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: start DMAC first (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: cleanup status clear method (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: tidyup error message (Jaroslav Kysela) [RHEL-118910]
  - ASoC: renesas: msiof: msiof_update_and_wait() checks whether reg was updated (Jaroslav Kysela) [RHEL-118910]
  - ALSA: lx_core: use int type to store negative error codes (Jaroslav Kysela) [RHEL-118910]
  - ALSA: pcm: oss: Use guard() for spin locks (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: us144mkii: Fixes for handshake, MIDI out and cleanup (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tlv320aic32x4: use dev_err_probe() for regulators (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: imx: Remove the use of dev_err_probe() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: imx-hdmi: remove cpu_pdev related code (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: omap-twl4030: convert to DT schema (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: ti,twl4030-audio: convert to DT schema (Jaroslav Kysela) [RHEL-118910]
  - ASoC: test-component: Use kcalloc() instead of kzalloc() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: fsl: Use kcalloc() instead of kzalloc() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: Use kcalloc() instead of kzalloc() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: us144mkii: Fix null-deref in tascam_midi_in_urb_complete() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: audioreach: add support for SMECNS module (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: audioreach: sort modules based on hex ids (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: audioreach: fix typos in I2S_INTF_TYPE (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: audioreach: add support for static calibration (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: audioreach: add documentation for i2s interface type (Jaroslav Kysela) [RHEL-118910]
  - ASoC: qcom: audioreach: deprecate AR_TKN_U32_MODULE_[IN/OUT]_PORTS (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: us144mkii: Use le16_to_cpu() for product ID comparison (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: wsa883x: Handle shared reset GPIO for WSA883x speakers (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: qcom,wsa8830: Add reset-gpios for shared line (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: Streamline register-component function names (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: Do not share the name pointer between components (Jaroslav Kysela) [RHEL-118910] {CVE-2025-40338}
  - ASoC: Intel: avs: Drop pcm.h dependency for probes (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: Separate debug symbols (Jaroslav Kysela) [RHEL-118910]
  - ASoC: es8323: add proper left/right mixer controls via DAPM (Jaroslav Kysela) [RHEL-118910]
  - ASoC: es8323: remove DAC enablement write from es8323_probe (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: Add infrastructure for TASCAM US-144MKII (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: us144mkii: Add deep sleep command (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: us144mkii: Add MIDI support and mixer controls (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: us144mkii: Implement audio capture and decoding (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: us144mkii: Implement audio playback and feedback (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: us144mkii: Add PCM core infrastructure (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: Add initial driver for TASCAM US-144MKII (Jaroslav Kysela) [RHEL-118910]
  - ASoC: wl1273: Remove (Jaroslav Kysela) [RHEL-118910]
  - ASoC: es8323: enable DAPM power widgets for playback DAC and output (Jaroslav Kysela) [RHEL-118910]
  - ASoC: remove unneeded 'fast_io' parameter in regmap_config (Jaroslav Kysela) [RHEL-118910]
  - ASoC: rt1321: Add RT1321 amplifier support (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda: Improve local variable data type in print_device_list() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda: Use min() to simplify snd_hda_get_devices() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: sst: Remove redundant semicolons (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda: Improve local variable data type in snd_hda_get_num_devices() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: Use auto-cleanup for shutdown locks (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: Convert brcm,bcm2835-i2s to DT schema (Jaroslav Kysela) [RHEL-118910]
  - soundwire: debugfs: add SCP_SDCA_IntStatX and SCP_SDCA_IntMaskX registers (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: realtek,alc5623: convert to DT schema (Jaroslav Kysela) [RHEL-118910]
  - ASoC: fix "dependant"->"dependent" (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb-audio: Replace manual mutex/spinlock with guard() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: 6fire: Clean ups with guard() (Jaroslav Kysela) [RHEL-118910]
  - ALSA: usb: scarlett2: Clean ups with guard() and __free() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: Add FourSemi FS2104/5S audio amplifier driver (Jaroslav Kysela) [RHEL-118910]
  - ASoC: codecs: Add library for FourSemi audio amplifiers (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: Add FS2104/5S audio amplifiers (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda: Add TAS5825 support (Jaroslav Kysela) [RHEL-118910]
  - ALSA: hda: Fix spelling mistake "dismatch" -> "mismatch" (Jaroslav Kysela) [RHEL-118910]
  - ASoC: cs48l32: Use PTR_ERR_OR_ZERO() to simplify code (Jaroslav Kysela) [RHEL-118910]
  - ASoC: rt721: add some vendor registers (Jaroslav Kysela) [RHEL-118910]
  - ASoC: SOF: imx: Remove error print for devm_add_action_or_reset() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: mediatek: Use SND_JACK_AVOUT for HDMI/DP jacks (Jaroslav Kysela) [RHEL-118910]
  - ASoC: tas2781: Add keyword "init" in profile section (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dmaengine_pcm: Add port_window_size to DAI dma data struct (Jaroslav Kysela) [RHEL-118910]
  - ASoC: dt-bindings: Drop imx-audio-sgtl5000.txt (Jaroslav Kysela) [RHEL-118910]
  - ASoC: pxa: add GPIOLIB_LEGACY dependency (Jaroslav Kysela) [RHEL-118910]
  - ASoC: add GPIOLIB_LEGACY dependency where needed (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-component: unpack snd_soc_component_init_bias_level() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-component: unpack snd_soc_component_get_bias_level() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-component: unpack snd_soc_component_force_bias_level() (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: move snd_soc_dapm_init_bias_level() to soc-dpcm (Jaroslav Kysela) [RHEL-118910]
  - ASoC: soc-dapm: move snd_soc_dapm_get_bias_level() to soc-dpcm (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: Conditional-path support (Jaroslav Kysela) [RHEL-118910]
  - ASoC: Intel: avs: Parse conditional path tuples (Jaroslav Kysela) [RHEL-118910]
  - redhat/configs: new config in phy (Izabela Bakollari) [RHEL-121399]
  - net: phy: Don't register LEDs for genphy (Izabela Bakollari) [RHEL-121399]
  - net: sfp: return the number of written bytes for smbus single byte access (Izabela Bakollari) [RHEL-121399]
  - net: phy: mxl-86110: Add power management and soft reset support (Izabela Bakollari) [RHEL-121399]
  - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration (Izabela Bakollari) [RHEL-121399]
  - net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant (Izabela Bakollari) [RHEL-121399]
  - net: phy: marvell-88q2xxx: Fix clamped value in mv88q2xxx_hwmon_write (Izabela Bakollari) [RHEL-121399]
  - net: phy: microchip_t1s: add SQI support for LAN867x Rev.D0 PHYs (Izabela Bakollari) [RHEL-121399]
  - net: phy: phy-c45: add SQI and SQI+ support for OATC14 10Base-T1S PHYs (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: check for NVMEM deferral (Izabela Bakollari) [RHEL-121399]
  - net: phy: Add MDIO_PMA_CTRL1_SPEED for 2.5G and 5G to reflect PMA values (Izabela Bakollari) [RHEL-121399]
  - net: phy: dp83867: implement configurability for SGMII in-band auto-negotiation (Izabela Bakollari) [RHEL-121399]
  - net: phy: nxp-c45-tja11xx: add HW timestamp configuration reporting (Izabela Bakollari) [RHEL-121399]
  - phy: mscc: add HW timestamp configuration reporting (Izabela Bakollari) [RHEL-121399]
  - net: phy: dp83640: add HW timestamp configuration reporting (Izabela Bakollari) [RHEL-121399]
  - net: phy: broadcom: add HW timestamp configuration reporting (Izabela Bakollari) [RHEL-121399]
  - phy: add hwtstamp_get callback to phy drivers (Izabela Bakollari) [RHEL-121399]
  - phy: rename hwtstamp callback to hwtstamp_set (Izabela Bakollari) [RHEL-121399]
  - net: phy: mxl-gpy: add support for MxL86252 and MxL86282 (Izabela Bakollari) [RHEL-121399]
  - net: phy: mxl-gpy: add support for MxL86211C (Izabela Bakollari) [RHEL-121399]
  - net: mdio: eliminate kdoc warnings in mdio_device.c and mdio_bus.c (Izabela Bakollari) [RHEL-121399]
  - net: phy: mxl-gpy: fix link properties on USXGMII and internal PHYs (Izabela Bakollari) [RHEL-121399]
  - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: remove not needed initialization of phy_device members (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: fix missing initialization of fixed phy link (Izabela Bakollari) [RHEL-121399]
  - net: phy: adin1100: Simplify register value passing (Izabela Bakollari) [RHEL-121399]
  - net: phy: adin1100: Fix software power-down ready condition (Izabela Bakollari) [RHEL-121399]
  - net: mdio: improve reset handling in mdio_device.c (Izabela Bakollari) [RHEL-121399]
  - net: mdio: common handling of phy device reset properties (Izabela Bakollari) [RHEL-121399]
  - net: mdiobus: release reset_gpio in mdiobus_unregister_device() (Izabela Bakollari) [RHEL-121399]
  - net: mdio: move device reset functions to mdio_device.c (Izabela Bakollari) [RHEL-121399]
  - net: phylink: add missing supported link modes for the fixed-link (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: lan8814: Enable in-band auto-negotiation (Izabela Bakollari) [RHEL-121399]
  - net: phy: Add helper for fixing RGMII PHY mode based on internal mac delay (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: remove setting supported/advertised modes from fixed_phy_register (Izabela Bakollari) [RHEL-121399]
  - net: phy: mscc: Handle devm_phy_package_join() failure in vsc85xx_probe_common() (Izabela Bakollari) [RHEL-121399]
  - net: phy: mscc: Add support for PHY LED control (Izabela Bakollari) [RHEL-121399]
  - net: phy: mscc: Consolidate probe functions into a common helper (Izabela Bakollari) [RHEL-121399]
  - net: phy: mscc: Simplify LED mode update using phy_modify() (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: initialize the link status as up (Izabela Bakollari) [RHEL-121399]
  - net: mdio: fix resource leak in mdiobus_register_device() (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: lan8814 fix reset of the QSGMII interface (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: shrink size of struct fixed_phy_status (Izabela Bakollari) [RHEL-121399]
  - net: phy: microchip_t1s:: add cable diagnostic support for LAN867x Rev.D0 (Izabela Bakollari) [RHEL-121399]
  - net: phy: phy-c45: add OATC14 10BASE-T1S PHY cable diagnostic support (Izabela Bakollari) [RHEL-121399]
  - net: phy: qt2025: Wait until PHY becomes ready (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: remove fixed_phy_add (Izabela Bakollari) [RHEL-121399]
  - MIPS: BCM47XX: remove creating a fixed phy (Izabela Bakollari) [RHEL-121399]
  - net: b44: register a fixed phy using fixed_phy_register_100fd if needed (Izabela Bakollari) [RHEL-121399]
  - m68k: coldfire: remove creating a fixed phy (Izabela Bakollari) [RHEL-121399]
  - net: fec: register a fixed phy using fixed_phy_register_100fd if needed (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: add helper fixed_phy_register_100fd (Izabela Bakollari) [RHEL-121399]
  - net: phy: make phy_device members pause and asym_pause bitfield bits (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: add MSE interface support for KSZ9477 family (Izabela Bakollari) [RHEL-121399]
  - net: phy: introduce internal API for PHY MSE diagnostics (Izabela Bakollari) [RHEL-121399]
  - net: phy: microchip_t1s: add support for Microchip LAN867X Rev.D0 PHY (Izabela Bakollari) [RHEL-121399]
  - net: phy: use new iterator mdiobus_for_each_phy in mdiobus_prevent_c45_scan (Izabela Bakollari) [RHEL-121399]
  - net: phy: add iterator mdiobus_for_each_phy (Izabela Bakollari) [RHEL-121399]
  - net: phy: dp83869: fix STRAP_OPMODE bitmask (Izabela Bakollari) [RHEL-121399]
  - net: phy: motorcomm: Add support for PHY LEDs on YT8531 (Izabela Bakollari) [RHEL-121399]
  - phy: mscc: Fix PTP for VSC8574 and VSC8572 (Izabela Bakollari) [RHEL-121399]
  - phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X (Izabela Bakollari) [RHEL-121399]
  - net: phy: dp83867: Disable EEE support as not implemented (Izabela Bakollari) [RHEL-121399]
  - net: phylink: add phylink managed wake-on-lan PHY speed control (Izabela Bakollari) [RHEL-121399]
  - net: phylink: add phylink managed MAC Wake-on-Lan support (Izabela Bakollari) [RHEL-121399]
  - net: phy: add phy_may_wakeup() (Izabela Bakollari) [RHEL-121399]
  - net: phy: add phy_can_wakeup() (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Add support for non PTP SKUs for lan8814 (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: fix typos in comments (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: simplify return in ksz9477_phy_errata() (Izabela Bakollari) [RHEL-121399]
  - net: mdio: use macro module_driver to avoid boilerplate code (Izabela Bakollari) [RHEL-121399]
  - net: phy: RTL8211FVD: Restore disabling of PHY-mode EEE (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: create rtl8211f_config_phy_eee() helper (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: eliminate priv->phycr1 variable (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: allow CLKOUT to be disabled on RTL8211F(D)(I)-VD-CG (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: eliminate has_phycr2 variable (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: eliminate priv->phycr2 variable (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: create rtl8211f_config_rgmii_delay() (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: add interrupt support for RTL8221B (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: Add RTL8224 cable testing support (Izabela Bakollari) [RHEL-121399]
  - net: phy: motorcomm: fix duplex setting error for phy leds (Izabela Bakollari) [RHEL-121399]
  - net: mdio: rtl9300: use scoped for loops (Izabela Bakollari) [RHEL-121399]
  - of: mdio: warn if deprecated fixed-link binding is used (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: lan8842 errata (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: lan8842 errata (Izabela Bakollari) [RHEL-121399]
  - net: phy: add Kconfig symbol PHY_PACKAGE (Izabela Bakollari) [RHEL-121399]
  - net: phy: make phy_package a separate module (Izabela Bakollari) [RHEL-121399]
  - net: phy: make mdio consumer / device layer a separate module (Izabela Bakollari) [RHEL-121399]
  - net: phy: remove Kconfig symbol MDIO_DEVRES (Izabela Bakollari) [RHEL-121399]
  - net: phy: factor out provider part from mdio_bus.c (Izabela Bakollari) [RHEL-121399]
  - mdio: fix CONFIG_MDIO_DEVRES selects (Izabela Bakollari) [RHEL-121399]
  - net: mdio: Add RTL9300 MDIO driver (Izabela Bakollari) [RHEL-121399]
  - dt-bindings: ethernet-phy: add MII-Lite phy interface type (Izabela Bakollari) [RHEL-121399]
  - dt-bindings: net: qca,ar803x: Add IPQ5018 Internal GE PHY support (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: always set shared->phydev for LAN8814 (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: fix rtl8221b-vm-cg name (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: Avoid PHYCR2 access if PHYCR2 not present (Izabela Bakollari) [RHEL-121399]
  - net: phy: bcm54811: Fix GMII/MII/MII-Lite selection (Izabela Bakollari) [RHEL-121399]
  - net: doc: Fix typos in docs (Izabela Bakollari) [RHEL-121399]
  - net: sfp: improve poll interval handling (Izabela Bakollari) [RHEL-121399]
  - net: sfp: don't include swphy.h (Izabela Bakollari) [RHEL-121399]
  - net: phy: annotate linkmode initializers as not used after init phase (Izabela Bakollari) [RHEL-121399]
  - net: phy: stop exporting phy_driver_unregister (Izabela Bakollari) [RHEL-121399]
  - docs: networking: phy: clarify abbreviation "PAL" (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Fix lan8814_config_init (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Fix default LED behaviour (Izabela Bakollari) [RHEL-121399]
  - net: phy: stop exporting phy_driver_register (Izabela Bakollari) [RHEL-121399]
  - net: phy: dp83640: improve phydev and driver removal handling (Izabela Bakollari) [RHEL-121399]
  - net: phy: ax88796b: Replace hard-coded values with PHY_ID_MATCH_MODEL() (Izabela Bakollari) [RHEL-121399]
  - net: sfp: remove old sfp_parse_* functions (Izabela Bakollari) [RHEL-121399]
  - net: phy: update all PHYs to use sfp_get_module_caps() (Izabela Bakollari) [RHEL-121399]
  - net: phylink: use sfp_get_module_caps() (Izabela Bakollari) [RHEL-121399]
  - net: sfp: provide sfp_get_module_caps() (Izabela Bakollari) [RHEL-121399]
  - net: sfp: convert sfp quirks to modify struct sfp_module_support (Izabela Bakollari) [RHEL-121399]
  - net: sfp: pre-parse the module support (Izabela Bakollari) [RHEL-121399]
  - net: phy: add phy_interface_copy() (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: use %pe in print format (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Add Fast link failure support for lan8842 (Izabela Bakollari) [RHEL-121399]
  - net: phy: clear link parameters on admin link down (Izabela Bakollari) [RHEL-121399]
  - net: phy: nxp-c45-tja11xx: use bitmap_empty() where appropriate (Izabela Bakollari) [RHEL-121399]
  - net: phylink: warn if deprecated array-style fixed-link binding is used (Izabela Bakollari) [RHEL-121399]
  - net: phy: clear EEE runtime state in PHY_HALTED/PHY_ERROR (Izabela Bakollari) [RHEL-121399]
  - net: phy: broadcom: Convert to PHY_ID_MATCH_MODEL macro (Izabela Bakollari) [RHEL-121399]
  - net: phy: broadcom: Convert to phy_id_compare_model() (Izabela Bakollari) [RHEL-121399]
  - net: phy: introduce phy_id_compare_model() PHY ID helper (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Update Kconfig help text (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: remove two function stubs (Izabela Bakollari) [RHEL-121399]
  - net: phy: marvell: Fix 88e1510 downshift counter errata (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: delete aqr_firmware_read_fingerprint() prototype (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: remove struct fixed_mdio_bus (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: add helper fixed_phy_find (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: remove member no_carrier from struct fixed_phy (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: remove unused interrupt support (Izabela Bakollari) [RHEL-121399]
  - net: phy: fix phy_uses_state_machine() (Izabela Bakollari) [RHEL-121399]
  - net: phy: NXP_TJA11XX: Update Kconfig with TJA1102 support (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: support phy-mode = "10g-qxgmii" on NXP SPF-30841 (AQR412C) (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: create and store a 64-bit firmware image fingerprint (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: report and configure in-band autoneg capabilities (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: print global syscfg registers (Izabela Bakollari) [RHEL-121399]
  - net: phy: transfer phy_config_inband() locking responsibility to phylink (Izabela Bakollari) [RHEL-121399]
  - net: phylink: add lock for serializing concurrent pl->phydev writes with resolver (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: remove link gpio support (Izabela Bakollari) [RHEL-121399]
  - phy: mscc: Stop taking ts_lock for tx_queue and use its own lock (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Add PTP support for lan8842 (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Introduce function __lan8814_ptp_probe_once (Izabela Bakollari) [RHEL-121399]
  - net: phylink: move PHY interrupt request to non-fail path (Izabela Bakollari) [RHEL-121399]
  - net: phylink: disable autoneg for interfaces that have no inband (Izabela Bakollari) [RHEL-121399]
  - net: phylink: provide phylink_get_inband_type() (Izabela Bakollari) [RHEL-121399]
  - net: phy: add phy_interface_weight() (Izabela Bakollari) [RHEL-121399]
  - net: sfp: add quirk for FLYPRO copper SFP+ module (Izabela Bakollari) [RHEL-121399]
  - net: phy: mtk-2p5ge: Add LED support for MT7988 (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: simplify fixed_mdio_read (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: support for TRIGGER_NETDEV_LINK on RTL8211E and RTL8211F (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed_phy: let fixed_phy_unregister free the phy_device (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed: let fixed_phy_add always use addr 0 and remove return value (Izabela Bakollari) [RHEL-121399]
  - phy: mscc: Fix when PTP clock is register and unregister (Izabela Bakollari) [RHEL-121399]
  - net: phy: as21xxx: better handle PHY HW reset on soft-reboot (Izabela Bakollari) [RHEL-121399]
  - net: phy: introduce phy_id_compare_vendor() PHY ID helper (Izabela Bakollari) [RHEL-121399]
  - net: phy: mxl-86110: add basic support for MxL86111 PHY (Izabela Bakollari) [RHEL-121399]
  - net: phy: mxl-86110: fix indentation in struct phy_driver (Izabela Bakollari) [RHEL-121399]
  - net: phy: mxl-86110: add basic support for led_brightness_set op (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: add support for AQR115 (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: promote AQR813 and AQR114C to aqr_gen4_config_init() (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: rename aqr113c_config_init() to aqr_gen4_config_init() (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: reimplement aqcs109_config_init() as aqr_gen2_config_init() (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: call aqr_gen3_config_init() for AQR112 and AQR412(C) (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: call aqr_gen2_fill_interface_modes() for AQCS109 (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: merge and rename aqr105_read_status() and aqr107_read_status() (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: use cached GLOBAL_CFG registers in aqr107_read_rate() (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: remove handling for get_rate_matching(PHY_INTERFACE_MODE_NA) (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: save a local shadow of GLOBAL_CFG register values (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: fill supported_interfaces for all aqr_gen2_config_init() callers (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: rename some aqr107 functions according to generation (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: reorder AQR113C PMD Global Transmit Disable bit clearing with supported_interfaces (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: merge aqr113c_fill_interface_modes() into aqr107_fill_interface_modes() (Izabela Bakollari) [RHEL-121399]
  - net: phy: aquantia: rename AQR412 to AQR412C and add real AQR412 (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Add support for lan8842 (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Replace hardcoded pages with defines (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Introduce lanphy_modify_page_reg (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Start using PHY_ID_MATCH_MODEL (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: enable serdes option mode for RTL8226-CG (Izabela Bakollari) [RHEL-121399]
  - phy: mscc: Fix timestamping for vsc8584 (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: fix RTL8211F wake-on-lan support (Izabela Bakollari) [RHEL-121399]
  - net: phy: fixed: remove usage of a faux device (Izabela Bakollari) [RHEL-121399]
  - net: phy: mscc: report and configure in-band auto-negotiation for SGMII/QSGMII (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: convert RTL8226-CG to c45 only (Izabela Bakollari) [RHEL-121399]
  - net: phy: motorcomm: Add support for PHY LEDs on YT8521 (Izabela Bakollari) [RHEL-121399]
  - net: phy: nxp-c45-tja11xx: fix the PHY ID mismatch issue when using C45 (Izabela Bakollari) [RHEL-121399]
  - net: phy: smsc: add proper reset flags for LAN8710A (Izabela Bakollari) [RHEL-121399]
  - phy: mscc: Fix parsing of unicast frames (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (Izabela Bakollari) [RHEL-121399]
  - net: phy: qcom: qca807x: Enable WoL support using shared library (Izabela Bakollari) [RHEL-121399]
  - net: phy: qcom: qca807x: Support PHY counter (Izabela Bakollari) [RHEL-121399]
  - net: phy: qcom: qca808x: Support PHY counter (Izabela Bakollari) [RHEL-121399]
  - net: phy: qcom: Add PHY counter support (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Add ksz9131_resume() (Izabela Bakollari) [RHEL-121399]
  - net: phy: bcm54811: PHY initialization (Izabela Bakollari) [RHEL-121399]
  - net: phy: bcm5481x: MII-Lite activation (Izabela Bakollari) [RHEL-121399]
  - net: phy: MII-Lite PHY interface mode (Izabela Bakollari) [RHEL-121399]
  - net: phy: smsc: Fix link failure in forced mode with Auto-MDIX (Izabela Bakollari) [RHEL-121399]
  - net: phy: smsc: Force predictable MDI-X state on LAN87xx (Izabela Bakollari) [RHEL-121399]
  - net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap (Izabela Bakollari) [RHEL-121399]
  - net: phy: declare package-related struct members only if CONFIG_PHY_PACKAGE is enabled (Izabela Bakollari) [RHEL-121399]
  - net: phylink: add phylink_sfp_select_interface_speed() (Izabela Bakollari) [RHEL-121399]
  - net: phylink: clear SFP interfaces when not in use (Izabela Bakollari) [RHEL-121399]
  - net: phylink: restrict SFP interfaces to those that are supported (Izabela Bakollari) [RHEL-121399]
  - net: phy: qcom: qca808x: Fix WoL issue by utilizing at8031_set_wol() (Izabela Bakollari) [RHEL-121399]
  - net: phy: qcom: move the WoL function to shared library (Izabela Bakollari) [RHEL-121399]
  - net: phy: air_en8811h: Introduce resume/suspend and clk_restore_context to ensure correct CKO settings after network interface reinitialization. (Izabela Bakollari) [RHEL-121399]
  - phy: micrel: add Signal Quality Indicator (SQI) support for KSZ9477 switch PHYs (Izabela Bakollari) [RHEL-121399]
  - net: phy: realtek: add error handling to rtl8211f_get_wol (Izabela Bakollari) [RHEL-121399]
  - net: phy: Add interface types for 50G and 100G (Izabela Bakollari) [RHEL-121399]
  - net: phy: qcom: at803x: Add Qualcomm IPQ5018 Internal PHY support (Izabela Bakollari) [RHEL-121399]
  - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick (Izabela Bakollari) [RHEL-121399]
  - net: phy: Add c45_phy_ids sysfs directory entry (Izabela Bakollari) [RHEL-121399]
  - net: phy: remove phy_driver_is_genphy_10g (Izabela Bakollari) [RHEL-121399]
  - net: phy: improve phy_driver_is_genphy (Izabela Bakollari) [RHEL-121399]
  - net: phy: add flag is_genphy_driven to struct phy_device (Izabela Bakollari) [RHEL-121399]
  - net: phy: move __phy_package_[read|write]_mmd to phy_package.c (Izabela Bakollari) [RHEL-121399]
  - net: phy: improve rgmii_clock() documentation (Izabela Bakollari) [RHEL-121399]
  - net: phy: dp83tg720: switch to adaptive polling and remove random delays (Izabela Bakollari) [RHEL-121399]
  - net: phy: dp83tg720: remove redundant 600ms post-reset delay (Izabela Bakollari) [RHEL-121399]
  - net: phy: dp83tg720: implement soft reset with asymmetric delay (Izabela Bakollari) [RHEL-121399]
  - net: phy: directly copy struct mdio_board_info in mdiobus_register_board_info (Izabela Bakollari) [RHEL-121399]
  - net: phy: improve mdio-boardinfo.h (Izabela Bakollari) [RHEL-121399]
  - net: phy: move definition of struct mdio_board_entry to mdio-boardinfo.c (Izabela Bakollari) [RHEL-121399]
  - net: phy: simplify mdiobus_setup_mdiodev_from_board_info (Izabela Bakollari) [RHEL-121399]
  - net: phy: simplify phy_get_internal_delay() (Izabela Bakollari) [RHEL-121399]
  - net: phy: move definition of genphy_c45_driver to phy_device.c (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: add cable test support for KSZ9477-class PHYs (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: Add RX error counter support for KSZ9477 switch-integrated PHYs (Izabela Bakollari) [RHEL-121399]
  - net: phy: micrel: add MDI/MDI-X control support for KSZ9477 switch-integrated PHYs (Izabela Bakollari) [RHEL-121399]
  - net/mdiobus: Fix potential out-of-bounds read/write access (Izabela Bakollari) [RHEL-121399]


