# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-226.el10]
changelog:
  - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172216]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172216] {CVE-2026-31431}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172216] {CVE-2026-23060}
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172216]
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172216] {CVE-2026-31677}
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172216] {CVE-2026-31431}
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172216]
  - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171460]
  - drm/i915/dmc: Fix an unlikely NULL pointer deference at probe (Desnes Nunes) [RHEL-161592]
  - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Herbert Xu) [RHEL-154016]
  - s390/mm: Add missing secure storage access fixups for donated memory (Mete Durlu) [RHEL-168792]
  - timers/migration: Exclude isolated cpus from hierarchy (CKI Backport Bot) [RHEL-68981]
  - cpumask: Add initialiser to use cleanup helpers (CKI Backport Bot) [RHEL-68981]
  - sched/isolation: Force housekeeping if isolcpus and nohz_full don't leave any (CKI Backport Bot) [RHEL-68981]
  - cgroup/cpuset: Fail if isolated and nohz_full don't leave any housekeeping (CKI Backport Bot) [RHEL-68981]
  - cgroup/cpuset: Rename update_unbound_workqueue_cpumask() to update_isolation_cpumasks() (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Use scoped_guard on available flag set/clear (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Add mask for CPUs available in the hierarchy (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Rename 'online' bit to 'available' (CKI Backport Bot) [RHEL-68981]
  - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-145403]
  - audit: Use kzalloc() instead of kmalloc()/memset() in audit_krule_to_data() (Ricardo Robaina) [RHEL-145403]
  - audit: fix comment misindentation in audit.h (Ricardo Robaina) [RHEL-145403]
  - audit: fix skb leak when audit rate limit is exceeded (Ricardo Robaina) [RHEL-145403]
  - audit: init ab->skb_list earlier in audit_buffer_alloc() (Ricardo Robaina) [RHEL-145403]
  - audit: add record for multiple object contexts (Ricardo Robaina) [RHEL-145403]
  - audit: add record for multiple task security contexts (Ricardo Robaina) [RHEL-145403]
  - lsm: security_lsmblob_to_secctx module selection (Ricardo Robaina) [RHEL-145403]
  - audit: create audit_stamp structure (Ricardo Robaina) [RHEL-145403]
  - audit: add a missing tab (Ricardo Robaina) [RHEL-145403]
  - audit: fix typo in auditfilter.c comment (Ricardo Robaina) [RHEL-145403]
  - audit: Replace deprecated strcpy() with strscpy() (Ricardo Robaina) [RHEL-145403]
  - audit: fix indentation in audit_log_exit() (Ricardo Robaina) [RHEL-145403]
  - audit: mark audit_log_vformat() with __printf() attribute (Ricardo Robaina) [RHEL-145403]
  - fs: Fix filename init after recent refactoring (Ricardo Robaina) [RHEL-145403]
  - netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error (Ricardo Robaina) [RHEL-145403]
  - fs: dedup handling of struct filename init and refcounts bumps (Ricardo Robaina) [RHEL-145403]
  - audit: Initialize lsmctx to avoid memory allocation error (Ricardo Robaina) [RHEL-145403]
  - net: corrections for security_secid_to_secctx returns (Ricardo Robaina) [RHEL-145403]
  - lsm: replace context+len with lsm_context (Ricardo Robaina) [RHEL-145403]
  - lsm: ensure the correct LSM context releaser (Ricardo Robaina) [RHEL-145403]
  - lsm: remove lsm_prop scaffolding (Ricardo Robaina) [RHEL-145403]
  - netlabel,smack: use lsm_prop for audit data (Ricardo Robaina) [RHEL-145403]
  - audit: change context data from secid to lsm_prop (Ricardo Robaina) [RHEL-145403]
  - lsm: create new security_cred_getlsmprop LSM hook (Ricardo Robaina) [RHEL-145403]
  - audit: use an lsm_prop in audit_names (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_inode_getsecid (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_current_getsecid (Ricardo Robaina) [RHEL-145403]
  - audit: update shutdown LSM data (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_ipc_getsecid (Ricardo Robaina) [RHEL-145403]
  - audit: maintain an lsm_prop in audit_context (Ricardo Robaina) [RHEL-145403]
  - lsm: add lsmprop_to_secctx hook (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_audit_rule_match (Ricardo Robaina) [RHEL-145403]
  - lsm: add the lsm_prop data structure (Ricardo Robaina) [RHEL-145403]
  - KVM: arm64: Account for RESx bits in __compute_fgt() (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Fix typos and stale comments in kvm_util (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Move page_align() to shared header (Sebastian Ott) [RHEL-157318]
  - KVM: riscv: selftests: Fix incorrect rounding in page_align() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Fix incorrect rounding in page_align() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Disable unused TTBR1_EL1 translations (Sebastian Ott) [RHEL-157318]
  - tools headers: Sync UAPI KVM headers with kernel sources (Sebastian Ott) [RHEL-157318]
  - Documentation: KVM: Update GICv3 docs for GICv5 hosts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Discard PC update state on vcpu reset (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Don't reprobe for ICH_VTR_EL2.TDS on CPU hotplug (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Correct test for ICH_HCR_EL2_TDIR cap for GICv5 hosts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert ICH_HCR_EL2_TDIR cap to EARLY_LOCAL_CPU_FEATURE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic: Pick EOIcount deactivations from AP-list tail (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove the redundant ISB in __kvm_at_s1e2() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix vma_shift staleness on nested hwpoison path (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Inject a SEA if failed to read the descriptor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Report addrsz fault at level 0 with a bad VTTBR.BADDR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Check S2 limits based on implemented PA size (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2 fault (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Eagerly init vgic dist/redist on vgic creation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Deduplicate ASID retrieval code (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Revert accidental drop of kvm_uninit_stage2_mmu() for non-NV VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix protected mode handling of pages larger than 4kB (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic: Handle const qualifier from gic_kvm_info allocation type (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove redundant kern_hyp_va() in unpin_host_sve_state() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix ID register initialization for non-protected pKVM guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Optimise away S1POE handling when not supported by host (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Hide S1POE from guests when not supported by the host (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add debugfs file dumping computed RESx values (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add sanitisation to SCTLR_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove all traces of HCR_EL2.MIOCNCE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove all traces of FEAT_TME (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify handling of full register invalid constraint (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Get rid of FIXED_VALUE altogether (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify handling of HCR_EL2.E2H RESx (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Move RESx into individual register descriptors (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add RES1_WHEN_E2Hx constraints as configuration flags (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add REQUIRES_E2H1 constraint as configuration flags (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify FIXED_VALUE handling (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert HCR_EL2.RW to AS_RES1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Correctly handle SCTLR_EL1 RES1 bits for unsupported features (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Allow RES1 bits to be inferred from configuration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inherit RESx bits from FGT register descriptors (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Extend unified RESx handling to runtime sanitisation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce data structure tracking both RES0 and RES1 bits (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce standalone FGU computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove duplicate configuration for SCTLR_EL1.{EE,E0E} (Sebastian Ott) [RHEL-157318]
  - arm64: Convert SCTLR_EL2 to sysreg infrastructure (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Avoid NV stage-2 code when NV is not supported (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use standard seq_file iterator for vgic-debug debugfs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Reimplement vgic-debug XArray iteration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use standard seq_file iterator for idregs debugfs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Set vgic_model before initing private IRQs (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Drop ICH_HFGRTR_EL2.ICC_HAPR_EL1 and make RES1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v3: Switch vGIC-v3 to use generated ICH_VMCR_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix various comments (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Add trap config for DBGWCR<15>_EL1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Enable GICv3 CPUIF trapping on GICv5 hosts if required (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify PAGE_S2_MEMATTR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Kill KVM_PGTABLE_S2_NOFWB (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Switch pKVM host S2 over to KVM_PGTABLE_S2_AS_S1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add KVM_PGTABLE_S2_AS_S1 flag (Sebastian Ott) [RHEL-157318]
  - arm64: Add MT_S2{,_FWB}_AS_S1 encodings (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use kvm_has_mte() in pKVM trap initialization (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inject UNDEF when accessing MTE sysregs with MTE disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Trap MTE access and discovery when MTE is disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove dead code resetting HCR_EL2 for pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Return correct RES0 bits for FGT registers (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Always populate FGT masks at boot time (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix error checking for FFA_VERSION (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Prevent host from managing timer offsets for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Check whether a VM IOCTL is allowed in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Track KVM IOCTLs and their associated KVM caps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Do not allow KVM_CAP_ARM_MTE for any guest in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Include VM type when checking VM capabilities in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce helper to calculate fault IPA offset (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix MTE flag initialization for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix Trace Buffer trap polarity for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix Trace Buffer trapping for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Add a test for FEAT_IDST (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Report optional ID register traps with a 0x18 syndrome (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Add a generic synchronous exception injection primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Force trap of GMID_EL1 when the guest doesn't have MTE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle CSSIDR2_EL1 and SMIDR_EL1 in a generic way (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle FEAT_IDST for sysregs without specific handlers (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add a generic synchronous exception injection primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add trap routing for GMID_EL1 (Sebastian Ott) [RHEL-157318]
  - arm64: Repaint ID_AA64MMFR2_EL1.IDS description (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Honor UX/PX attributes for EL2 S1 mappings (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert VTCR_EL2 to config-driven sanitisation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Account for RES1 bits in DECLARE_FEAT_MAP() and co (Sebastian Ott) [RHEL-157318]
  - arm64: Convert VTCR_EL2 to sysreg infratructure (Sebastian Ott) [RHEL-157318]
  - arm64: Convert ID_AA64MMFR0_EL1.TGRAN{4,16,64}_2 to UnsignedEnum (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix missing <asm/stackpage/nvhe.h> include (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Calculate hyp VA size only once (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Don't blindly set set PSTATE.PAN on guest exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Respect stage-2 write permssion when setting stage-1 AF (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove unused vcpu_{clear,set}_wfx_traps() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove unused parameter in synchronize_vcpu_pstate() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove extra argument for __pvkm_host_{share,unshare}_hyp() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inject UNDEF for a register trap without accessor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Copy FGT traps to unprotected pKVM VCPU on VCPU load (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix EL2 S1 XN handling for hVHE setups (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Check for vGICv3 when clearing TWI (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove ISB after writing FPEXC32_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Shuffle KVM_HOST_DATA_FLAG_* indices (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix comment in fpsimd_lazy_switch_to_host() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: at: Update AF on software walk only if VM has FEAT_HAFDBS (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: at: Use correct HA bit in TCR_EL2 when regime is EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Document KVM_PGTABLE_PROT_{UX,PX} (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix spelling mistake "Unexpeced" -> "Unexpected" (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add break to default case in kvm_pgtable_stage2_pte_prot() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add endian casting to kvm_swap_s[12]_desc() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix compilation when CONFIG_ARM64_USE_LSE_ATOMICS=n (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Add test for AT emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Expose hardware access flag management to NV guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Implement HW access flag management in stage-2 SW PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Implement HW access flag management in stage-1 SW PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Propagate PTW errors up to AT emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add helper for swapping guest descriptor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Use pgtable definitions in stage-2 walk (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle endianness in read helper for emulated PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Stop passing vCPU through void ptr in S2 PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Call helper for reading descriptors directly (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Advertise support for FEAT_XNX (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Teach ptdump about FEAT_XNX permissions (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Consider all 7 possible levels of cache (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Remove ARM64_FEATURE_FIELD_BITS and its last user (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add timer deactivation test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add Group-0 enable test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add asymmetric SPI deaectivation test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Perform EOImode==1 deactivation in ack order (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Remove LR-bound limitation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Exclude timer-controlled interrupts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Change configuration before enabling interrupt (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Fix GUEST_ASSERT_IAR_EMPTY() helper (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: gic_v3: Disable Group-0 interrupts by default (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: gic_v3: Add irq group setting helper (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Always trap GICV_DIR register (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Handle deactivation via GICV_DIR traps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Handle LR overflow when EOImode==0 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Force exit to sync ICH_HCR_EL2.En (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: nv: Plug L1 LR sync into deactivation primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: nv: Resync LRs/VMCR/HCR early for better MI emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Avoid broadcast kick on CPUs lacking TDIR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle in-LR deactivation when possible (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Add SPI tracking to handle asymmetric deactivation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Set ICH_HCR_EL2.TDIR when interrupts overflow LR capacity (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Add GICv2 SGI handling to deactivation primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle deactivation via ICV_DIR_EL1 traps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle LR overflow when EOImode==0 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use MI to detect groups being enabled/disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Move undeliverable interrupts to the end of ap_list (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Invert ap_list sorting to push active interrupts out (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Make vgic_target_oracle() globally available (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Turn kvm_vgic_vcpu_enable() into kvm_vgic_vcpu_reset() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Revamp vgic maintenance interrupt configuration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Eagerly save VMCR on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Compute vgic state irrespective of the number of interrupts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Extract LR computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Extract LR folding primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Decouple GICH_HCR programming from LRs being loaded (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Preserve EOIcount on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Extract LR computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Extract LR folding primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Decouple ICH_HCR_EL2 programming from LRs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Preserve EOIcount on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Drop LPI active state when folding LRs (Sebastian Ott) [RHEL-157318]
  - irqchip/gic: Add missing GICH_HCR control bits (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add LR overflow handling documentation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add tracking of vgic_irq being present in a LR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Repack struct vgic_irq fields (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Detect and work around the lack of ICV_DIR_EL1 trapping (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic-v3: Fix GICv3 trapping in protected mode (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Turn vgic-v3 errata traps into a patched-in constant (Sebastian Ott) [RHEL-157318]
  - irqchip/gic: Expose CPU interface VA to KVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add support for FEAT_XNX stage-2 permissions (Sebastian Ott) [RHEL-157318]
  - arm64: Detect FEAT_XNX (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Reschedule as needed when destroying the stage-2 page-tables (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Split kvm_pgtable_stage2_destroy() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Only drop references on empty tables in stage2_free_walker (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Assert GICR_TYPER.Processor_Number matches selftest CPU number (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: SYNC after guest ITS setup in vgic_lpi_stress (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use kvzalloc() for kvm struct allocation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Drop useless __GFP_HIGHMEM from kvm struct allocation (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Add ICH_VMCR_EL2 (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Move generation of RES0/RES1/UNKN to function (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Support feature-specific fields with 'Prefix' descriptor (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Fix checks for incomplete sysreg definitions (Sebastian Ott) [RHEL-157318]
  - Documentation: kvm: new UAPI for handling SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: selftests: Test for KVM_EXIT_ARM_SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: arm64: VM exit to userspace to handle SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: arm64: vgic-v3: Trap all if no in-kernel irqchip (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v3: Only set ICH_HCR traps for v2-on-v3 or v3 guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Enable nested for GICv5 host with FEAT_GCIE_LEGACY (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use ARM64_HAS_GICV5_LEGACY for GICv5 probing (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v5: Probe for GICv5 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v5: Support GICv3 compat (Sebastian Ott) [RHEL-157318]
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Ricardo Robaina) [RHEL-144438]
  - wifi: ath10k: fix station lookup failure during disconnect (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cw1200: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: correct use sequence of driver_data in skb->info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: pause TCM on fast resume (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: cancel mlo_scan_start_wk (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: correctly decode TTLM with default link map (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: ignore link disabled flag from userspace (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: apply advertised TTLM from association response (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: parse all TTLM entries (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't perform DA check on S1G beacon (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix wrong P2P device link id issue (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix dead lock while flushing management frames (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix scan state stuck in ABORTING after cancel_remain_on_channel (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: cancel scan only on active scan vdev (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: correctly check if CSA is active (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Fix bitrate calculation overflow for HE rates (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: don't force radio frequency check in freq_to_idx() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: collect station statistics earlier when disconnect (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: restore non-chanctx injection behaviour (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211_hwsim: disable BHs for hwsim_radio_lock (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't iterate not running interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: avoid kernel-infoleak from struct iw_point (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Remove blank line after mt792x firmware version dmesg (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: mt76: Strip whitespace from build ddate" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: do not use old MBSSID elements (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't WARN for connections on invalid channels (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: allow sharing identical chanctx for S1G interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: include s1g_primary_2mhz when comparing chandefs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: include s1g_primary_2mhz when sending chandef (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: correct FILS status codes (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Strip whitespace from build ddate (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: skip ieee80211_iter_keys() on scanning link remove (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: skip deflink accounting for offchannel links (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: move mt7996_update_beacons under mt76 mutex (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7925: ensure the 6GHz A-MPDU density cap from the hardware. (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix EMI rings for RRO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix MLO set key and group key issues (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix MLD group index assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: use correct link_id when filling TXD and TXP (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: set link_valid field when initializing wcid (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix teardown command for an MLD peer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: support fixed rate for link station (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix implicit beamforming support for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: no need to wait ACK event for SDO command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix max nss value when getting rx chainmask (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7925: cqm rssi low/high event notify (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: replace use of system_wq with system_percpu_wq (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: adjust BSS conf pointer handling (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: mt76: mt792x: improve monitor interface handling" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mmio_*_copy fix byte order and alignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Use of_reserved_mem_region_to_resource() for "memory-region" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix typos in comments (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Add the capability to set TX token start ID (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Add mt76_dev pointer in mt76_queue struct. (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Move Q_READ/Q_WRITE definitions in dma.h (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Remove useless check in mt7996_msdu_page_get_from_cache() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: relicense to BSD-3-Clause-Clear (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: fix license/copyright of util.h (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: use GFP_DMA32 for page_pool buffer allocation (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7915: add bf backoff limit table support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Fix DTS power-limits on little endian systems (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: connac: Replace memcpy + hard-coded size with strscpy (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Remove unnecessary link_id checks in mt7996_tx (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: stop radar detection in cfg80211_leave() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: use cfg80211_leave() in iftype change (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix channel switching code (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Enable 40 MHz width by default (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix RX channel width reported by RTL8192FU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix the 40 MHz subchannel for RTL8192EU, RTL8723BU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Make RTL8192CU, RTL8723AU TX with 40 MHz width (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852a: correct field mask of reset DAC/ADC FIFO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: refactor CMAC packet handlers (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: refactor CMAC crypt functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: utilize the newly defined CMAC constants (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add generic MMIE struct defines (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix CMAC functions not handling errors (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: replace use of system_unbound_wq with system_dfl_wq (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add support for 6GHz AP role not relevant AP type (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add default ID 0bda:b831 for RTL8831BU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: use separated function to set RX filter (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: correct user macid mask of RX info for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: update format of addr cam H2C command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: add addr cam H2C command v1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fill addr cam H2C command by struct (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: align RA H2C format v1 for RTL8922A (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: print band and port where beacon update on (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: ignore DCFO if not defined in chip_info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: consider type 15 in BB gain table (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: update wcpu_on to download firmware for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: remove undefined bit B_BE_PPDU_MAC_INFO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: calling BB pre-init by chips with/without BB MCU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: separate pre-init code before downloading firmware (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: part size to download firmware by header info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: flush TX queue before deleting key (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: rtw8852bu: Added dev id for ASUS AX57 NANO USB Wifi dongle (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: configure RX antenna if chips can support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: do RF calibration once setting channel when running pure monitor mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: consider data rate/bandwidth/GI for injected packets (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: fix out-of-bounds access in rtw89_phy_read_txpwr_limit() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: add compensation of thermal value from efuse calibration (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: debug: add parser to diagnose along DIAG_MAC fw element (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: parse firmware element of DIAG_MAC (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: pci: add to read PCI configuration space from common code (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: make monitor link info check more specific (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: track MU-MIMO configuration on disabled interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: Add fallback mechanism for INDOOR_SP connection (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: clean up duplicate ap_power handling (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: use a C99 initializer in wiphy_register (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: rtl8188ee: correct allstasleep in P2P PS H2C command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Enable the new rtw89_8852au module (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852au.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852a: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852a_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852a_dle_mem_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Use the correct power sequences for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: fix doc of struct key_params (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove unnecessary vlan NULL check (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: pass frame type to element parsing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove "disabling VHT" message (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add and use chanctx usage iteration (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: simplify ieee80211_recalc_chanctx_min_def() API (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove chanctx to link back-references (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: make link iteration safe for 'break' (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split NAN definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split P2P definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split S1G definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split EHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split HE definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split VHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split HT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split mesh definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix timeout error during beacon stats retrieval (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Make firmware stats reset caller-driven (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: process TX wait skbs for USB via C2H handler (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: provide TX reports for management frames (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: handle IEEE80211_TX_CTL_REQ_TX_STATUS frames for USB (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: anchor TX URBs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fill TX descriptor of FWCMD in shortcut (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: implement C2H TX report handler (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: refine rtw89_core_tx_wait_complete() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: use ieee80211_free_txskb() where appropriate (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: fix leak in rtw89_usb_write_port() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: Add BUFFALO WI-U3-866DHP to the USB ID list (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: 8822c: use fixed rate and bandwidth to reply CSI packets (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Enable the new rtw89_8852cu module (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852cu.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852c_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852c_dle_mem_usb{2,3} (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: Fix rtw8852c_pwr_{on,off}_func() for USB (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Fix rtw89_mac_dmac_func_pre_en_ax() for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_post_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_pre_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Move bulk out map to new struct rtw89_usb_info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw89_core_get_ch_dma_v2() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8832cu: turn off TX partial mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: use = {} to initialize bmi_target_info instead of memset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: use = {} to initialize pm_qos_request instead of memset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: unassign arvif on scan vdev create failure (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: enforce vdev limit in ath12k_mac_vdev_create() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Set EHT fixed rates for associated STAs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add EHT rates to ath12k_mac_op_set_bitrate_mask() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add EHT fixed GI/LTF (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add EHT MCS/NSS rates to Peer Assoc (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add EHT rate handling to existing set rate functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: generalize GI and LTF fixed rate functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix error handling in creating hardware group (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix reusing m3 memory (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: Allow HT Action frame processing on 6 GHz when HE is supported (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rt2x00: add nvmem eeprom support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add RX flag to report radiotap VHT information (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: check for NULL pointer after kmalloc (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: cfg: fix a few device names (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: Move EMLSR prints to IWL_DL_EHT (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: disable EHT if the device doesn't allow it (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: use FW_CHECK on bad ROC notification (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm/mld: report non-HT frames as 20 MHz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fix build when mvm/mld not configured (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: check the validity of noa_len (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: stop checking the firmware's error pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: be more chatty when we fail to find a wifi7 device (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fw: remove support of several iwl_lari_config_change_cmd versions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: include raw PHY notification in radiotap (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: update to new sniffer API (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: set wiphy::iftype_ext_capab dynamically (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: support get/set_antenna (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: cleanup unsupported phy command versions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fix remaining kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: tests: check listed PCI IDs have configs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: cfg: add new device names (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: iwlmld is always used for wifi7 devices (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: move rate conversions to utils.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: reschedule check_tpt_wk also not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: remove support from of alive notif version 6 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: align the name of iwl_alive_ntf_v6 to the convention (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: improve scan time on 6 GHz band (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: restart hardware to recover firmware if power-save becomes abnormal (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: fix ADC oscillation in 160MHz affecting RX performance (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: regd: apply ACPI policy even if country code is programmed (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: support EHT rate pattern via bitrate mask (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mlo: handle needed H2C when link switching is requested by stack (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: use skb_dequeue() for queued ROC packets to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: splice C2H events queue to local to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add parameters to radio-specific debugfs directories (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add debugfs support for multi-radio wiphy (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: default S1G chandef width to 1MHz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: get probe response chan via ieee80211_get_channel_khz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: reset CRC valid after CSA (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211_hwsim: advertise puncturing feature support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: validate radio frequency range for monitor mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rt2x00: check retval for of_get_mac_address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Assert base_lock is held before allocating REO update element (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add support for BSS color change (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: Correctly use "ab" macro parameter (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: advertise NL80211_FEATURE_TX_POWER_INSERTION (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: add support for Tx Power insertion in RRM action frame (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: wrap ath11k_mac_op_get_txpower() with lock-aware internal helper (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: relocate some Tx power related functions in mac.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: fix peer HE MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: Support for FTM TLV test commands (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Use correct power off sequence for RTL8192CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Dump the efuse right after reading it (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Report the signal strength only if it's known (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Replace hardcoded strings with helper functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add MODULE_FIRMWARE() entries (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix TX and RX MCS rate configurations in HE mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix NSS value update in ext_rx_stats (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Defer vdev bring-up until CSA finalize to avoid stale beacon (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: track dropped MSDU buffer type packets in REO exception ring (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix MSDU buffer types handling in RX error path (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: move recovery check logic into a new work (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - selftests: net: unify the Makefile formats (Hangbin Liu) [RHEL-155384]
  - selftests: net: sort configs (Hangbin Liu) [RHEL-155384]
  - lib/test_vmalloc.c: minor fixes to test_vmalloc.c (Audra Mitchell) [RHEL-151432]
  - kselftest: mm: fix typos in test_vmalloc.sh (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc: remove xfail condition check (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc: add no_block_alloc_test case (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: introduce xfail for failing tests (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: restrict default test mask to avoid test warnings (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: use late_initcall() if built-in for init ordering (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: allow built-in execution (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: replace RWSEM to SRCU for setup (Audra Mitchell) [RHEL-151432]
  - bus: mhi: host: pci_generic: Add Foxconn T99W760 modem (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: ep: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: ep: Make mhi_ep_bus_type const (Jose Ignacio Tornos Martinez) [RHEL-151312]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-227.el10]
changelog:
  - PCI/PTM: Drop pci_enable_ptm() granularity parameter (CKI Backport Bot) [RHEL-172222]
  - x86/mce: Remove the redundant mce_hygon_feature_init() (Steve Best) [RHEL-130026]
  - x86/mce: Ensure user polling settings are honored when restarting timer (Steve Best) [RHEL-130026]
  - x86/mce/amd: Fix threshold limit reset (Steve Best) [RHEL-130026]
  - x86/mce/apei: Handle variable SMCA BERT record size (Steve Best) [RHEL-130026]
  - x86/mce/mcelog: Use xchg() to get and clear the flags (Steve Best) [RHEL-130026]
  - x86/mce/inject: Remove call to mce_notify_irq() (Steve Best) [RHEL-130026]
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Steve Best) [RHEL-130026]
  - x86/mce/threshold: Remove the redundant this_cpu_dec_return() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Filter bogus hardware errors on Zen3 clients (Steve Best) [RHEL-130026]
  - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs (Steve Best) [RHEL-130026]
  - x86/mce: Handle AMD threshold interrupt storms (Steve Best) [RHEL-130026]
  - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Add support for physical address valid bit (Steve Best) [RHEL-130026]
  - EDAC/mce_amd: Add support for FRU text in MCA (Steve Best) [RHEL-130026]
  - x86/mce: Save and use APEI corrected threshold limit (Steve Best) [RHEL-130026]
  - x86/mce/amd: Define threshold restart function for banks (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove redundant reset_block() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Support SMCA Corrected Error Interrupt (Steve Best) [RHEL-130026]
  - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD DFR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD THR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/mce: Add a clear_bank() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' (Steve Best) [RHEL-130026]
  - x86/mce: Move machine_check_poll() status checks to helper functions (Steve Best) [RHEL-130026]
  - x86/mce: Separate global and per-CPU quirks (Steve Best) [RHEL-130026]
  - x86/mce: Convert family/model mixed checks to VFM-based checks (Steve Best) [RHEL-130026]
  - x86/mce: Do 'UNKNOWN' vendor check early (Steve Best) [RHEL-130026]
  - x86/mce: Break up __mcheck_cpu_apply_quirks() (Steve Best) [RHEL-130026]
  - x86/mce: Make four functions return bool (Steve Best) [RHEL-130026]
  - x86/mce: Add wrapper for struct mce to export vendor specific info (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only SMCA init (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only init (Steve Best) [RHEL-130026]
  - x86/mce: Set CR4.MCE last during init (Steve Best) [RHEL-130026]
  - x86/mce: Remove __mcheck_cpu_init_early() (Steve Best) [RHEL-130026]
  - x86/mce: Cleanup bank processing on init (Steve Best) [RHEL-130026]
  - x86/mce/amd: Put list_head in threshold_bank (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove smca_banks_map (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Rename threshold restart function (Steve Best) [RHEL-130026]
  - x86/msr: Convert __rdmsr() uses to native_rdmsrq() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Convert __wrmsr() uses to native_wrmsr{,q}() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Add the native_rdmsrq() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'native_wrmsrl()' to 'native_wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' (Steve Best) [RHEL-130026]
  - x86/msr: Add explicit includes of <asm/msr.h> [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_on_cpu()' to 'rdmsrq_on_cpu()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl()' to 'wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl()' to 'rdmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on 'u32' MSR indices in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on u64 in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Harmonize the prototype and definition of do_trace_rdpmc() (Steve Best) [RHEL-130026]
  - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161187]
  - io_uring/kbuf: limit legacy provided buffer lists to USHRT_MAX (Jeff Moyer) [RHEL-161187]
  - redhat/configs: Enable FFA for TPM on AArch64 (Marcin Juszkiewicz) [RHEL-167985]
  - platform/x86/intel/pmc: Remove double empty line (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Enable substate residencies for multiple PMCs (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Move LPM mode attributes to PMC (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Change LPM mode fields to u8 (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Wildcat Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Add Wildcat Lake support to Intel PMC SSRAM Telemetry (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Remove redundant has_die_c6 variable (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Rename PMC index variable to pmc_idx (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add DMU GUID to Arrow Lake U/H (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add support for multiple DMU GUIDs (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Replace dev_warn() with dev_dbg() (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Panther Lake (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Show substate requirement for S0ix blockers (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Improve function to show substate header (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Move telemetry endpoint register handling (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Lunar Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: use kcalloc() instead of kzalloc() (Steve Best) [RHEL-129781]
  - redhat: configs: Enable CONFIG_SENSORS_SPD5118 (Jennifer Berringer) [RHEL-168906]
  - i3c: master: dw-i3c: Balance PM runtime usage count on probe failure (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Detect and support 16-bit register addressing (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Support 16-bit addressing for NVMEM accesses (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Name chips taking the specification literally (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Split into common and I2C specific code (Jennifer Berringer) [RHEL-168906]
  - hwmon: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Disable runtime PM on Agilex5 to avoid bus hang on IBI (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add shutdown support to dw_i3c_master driver (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add quirk to address OD/PP timing issue on AMD platform (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add support for AMDI0015 ACPI ID (Jennifer Berringer) [RHEL-168906]
  - i3c: simplify combined i3c/i2c dependencies (Jennifer Berringer) [RHEL-168906]
  - i3c: Move device name assignment after i3c_bus_init (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Simplify with scoped for each OF child loop (Jennifer Berringer) [RHEL-168906]
  - i3c: fix refcount inconsistency in i3c_master_register (Jennifer Berringer) [RHEL-168906]
  - device property: Add scoped fwnode child node iterators (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Drop duplicate check before calling OF APIs (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Improve initialization of numbered I2C adapters (Jennifer Berringer) [RHEL-168906]
  - thermal: intel: int340x: soc_slider: Set offset only for balanced mode (Steve Best) [RHEL-130009]
  - thermal: int340x: Fix sysfs group leak on DLVR registration failure (Steve Best) [RHEL-130009]
  - drivers: thermal: intel: tcc_cooling: Drop redundant local variable (Steve Best) [RHEL-130009]
  - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature (Steve Best) [RHEL-130009]
  - thermal: intel: Use sysfs_emit() in a sysfs show function (Steve Best) [RHEL-130009]
  - thermal: intel: fix typo "nagative" in comment for cpu argument (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use sysfs_emit{_at}() in sysfs show functions (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Enable slow workload type hints (Steve Best) [RHEL-130009]
  - thermal: intel: intel_pch_thermal: Drop explicit driver data clearing (Steve Best) [RHEL-130009]
  - thermal: intel: intel_tcc_cooling: Add CPU models in the support list (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Wildcat Lake (Steve Best) [RHEL-130009]
  - ACPI: DPTF: Support Nova Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add DLVR support for Nova Lake (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Add Nova Lake processor thermal device (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use symbolic constant for UUID comparison (Steve Best) [RHEL-130009]
  - thermal: intel: Select INT340X_THERMAL from INTEL_SOC_DTS_THERMAL (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Power Slider: Validate slider_balance range (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter to change slider offset (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter for balanced Slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Panther Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add support for power slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Remove redundant acpi_has_method() call (Steve Best) [RHEL-130009]
  - tools/power/x86/intel-speed-select: v1.25 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Allow non root users (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Optimize suspend/resume callbacks (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Check for admin capability for write commands (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Store and restore all domains data (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Add missing write block check (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Use pkg-config for libnl-3.0 detection (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: v1.24 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Reset isst_turbo_freq_info for invalid buckets (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Check feature status (Krzysztof Pawlinski) [RHEL-133093]
  - rh_message.h: update support status of mlx5 devices (Scott Weaver) [RHEL-142605 RHEL-142608 RHEL-166116]
  - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults (Charles Mirabile) [RHEL-154155]
  - x86/resctrl: Fix SNC detection (Phil Auld) [RHEL-147186]
  - x86/topo: Fix SNC topology mess (Phil Auld) [RHEL-147186]
  - x86/topo: Replace x86_has_numa_in_package (Phil Auld) [RHEL-147186]
  - x86/topo: Add topology_num_nodes_per_package() (Phil Auld) [RHEL-147186]
  - x86/numa: Store extra copy of numa_nodes_parsed (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Phil Auld) [RHEL-145610]
  - sched/core: Fix wakeup_preempt's next_class tracking (Phil Auld) [RHEL-147186]
  - sched/fair: Only set slice protection at pick time (Phil Auld) [RHEL-147186]
  - sched/eevdf: Update se->vprot in reweight_entity() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix lag clamp (Phil Auld) [RHEL-147186]
  - sched/fair: Fix zero_vruntime tracking (Phil Auld) [RHEL-147186]
  - sched/clock: Avoid false sharing for sched_clock_irqtime (Phil Auld) [RHEL-147186]
  - sched/rt: Skip currently executing CPU in rto_next_cpu() (Phil Auld) [RHEL-147186]
  - sched/cpufreq: Use %pe format for PTR_ERR() printing (Phil Auld) [RHEL-147186]
  - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups (Phil Auld) [RHEL-147186]
  - sched/debug: Fix dl_server (re)start conditions (Phil Auld) [RHEL-147186]
  - sched/debug: Add support to change sched_ext server params (Phil Auld) [RHEL-147186]
  - sched_ext: Add a DL server for sched_ext tasks (Phil Auld) [RHEL-147186]
  - sched/debug: Stop and start server based on if it was active (Phil Auld) [RHEL-147186]
  - sched/deadline: Clear the defer params (Phil Auld) [RHEL-147186]
  - sched/debug: Fix updating of ppos on server write ops (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix 'stuck' dl_server (Phil Auld) [RHEL-147186]
  - sched/fair: Revert force wakeup preemption (Phil Auld) [RHEL-147186]
  - sched/fair: Disable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched: Update rq->avg_idle when a task is moved to an idle CPU (Phil Auld) [RHEL-147186]
  - sched/debug: Convert copy_from_user() + kstrtouint() to kstrtouint_from_user() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix pelt clock sync when entering idle (Phil Auld) [RHEL-147186]
  - sched/fair: Remove nohz.nr_cpus and use weight of cpumask instead (Phil Auld) [RHEL-147186]
  - sched/fair: Change likelyhood of nohz.nr_cpus (Phil Auld) [RHEL-147186]
  - sched/fair: Fix math notation errors in avg_vruntime comment (Phil Auld) [RHEL-147186]
  - sched/fair: Move checking for nohz cpus after time check (Phil Auld) [RHEL-147186]
  - sched: Audit MOVE vs balance_callbacks (Phil Auld) [RHEL-147186]
  - sched: Deadline has dynamic priority (Phil Auld) [RHEL-147186]
  - sched/deadline: Use ENQUEUE_MOVE to allow priority change (Phil Auld) [RHEL-147186]
  - sched/deadline: Ensure get_prio_dl() is up-to-date (Phil Auld) [RHEL-147186]
  - sched/deadline: Avoid double update_rq_clock() (Phil Auld) [RHEL-147186]
  - sched: Fold rq-pin swizzle into __balance_callbacks() (Phil Auld) [RHEL-147186]
  - sched: Provide idle_rq() helper (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix server stopping with runnable tasks (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix potential race in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/deadline: Remove unnecessary comment in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Drop useless cpumask_empty() in find_energy_efficient_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Simplify task_numa_find_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Use cpumask_weight_and() in sched_balance_find_dst_group() (Phil Auld) [RHEL-147186]
  - sched: Reorder some fields in struct rq (Phil Auld) [RHEL-147186]
  - sched/fair: Fix sched_avg fold (Phil Auld) [RHEL-147186]
  - sched: Fix faulty assertion in sched_change_end() (Phil Auld) [RHEL-147186]
  - sched/core: Rework sched_class::wakeup_preempt() and rq_modified_*() (Phil Auld) [RHEL-147186]
  - sched_ext: Rename pnt_seq to kick_sync (Phil Auld) [RHEL-147186]
  - sched_ext: Don't kick CPUs running higher classes (Phil Auld) [RHEL-147186]
  - sched_ext: Fix SCX_KICK_WAIT to work reliably (Phil Auld) [RHEL-147186]
  - sched_ext: Allow forcibly picking an scx task (Phil Auld) [RHEL-147186]
  - sched_ext: fix flag check for deferred callbacks (Phil Auld) [RHEL-147186]
  - sched/ext: Fold balance_scx() into pick_task_scx() (Phil Auld) [RHEL-147186]
  - sched_ext: defer queue_balance_callback() until after ops.dispatch (Phil Auld) [RHEL-147186]
  - sched_ext: Move internal type and accessor definitions to ext_internal.h (Phil Auld) [RHEL-147186]
  - sched_ext: Make explicit scx_task_iter_relock() calls unnecessary (Phil Auld) [RHEL-147186]
  - sched/fair: Join two #ifdef CONFIG_FAIR_GROUP_SCHED blocks (Phil Auld) [RHEL-147186]
  - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics (Phil Auld) [RHEL-147186]
  - sched/fair: Sort out 'blocked_load*' namespace noise (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight (Phil Auld) [RHEL-147186]
  - sched/fair: Clean up comments in 'struct cfs_rq' (Phil Auld) [RHEL-147186]
  - sched/fair: Fold the sched_avg update (Phil Auld) [RHEL-147186]
  - <linux/compiler_types.h>: Add the __signed_scalar_typeof() helper (Phil Auld) [RHEL-147186]
  - sched/fair: Remove superfluous rcu_read_lock() (Phil Auld) [RHEL-147186]
  - sched/fair: Avoid rq->lock bouncing in sched_balance_newidle() (Phil Auld) [RHEL-147186]
  - sched/fair: Switch to rcu_dereference_all() (Phil Auld) [RHEL-147186]
  - sched/headers: Rename rcu_dereference_check_sched_domain() => rcu_dereference_sched_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Limit hrtick work (Phil Auld) [RHEL-147186]
  - sched/core: Add assertions to QUEUE_CLASS (Phil Auld) [RHEL-147186]
  - sched/core: Fix psi_dequeue() for Proxy Execution (Phil Auld) [RHEL-147186]
  - sched/headers: Remove whitespace noise from kernel/sched/sched.h (Phil Auld) [RHEL-147186]
  - sched/rt: Remove a preempt-disable section in rt_mutex_setprio() (Phil Auld) [RHEL-147186]
  - sched/deadline: Walk up cpuset hierarchy to decide root domain when hot-unplug (Phil Auld) [RHEL-147186]
  - cgroup/cpuset: Introduce cpuset_cpus_allowed_locked() (Phil Auld) [RHEL-147186]
  - sched/fair: Enable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched/fair: Reimplement NEXT_BUDDY to align with EEVDF goals (Phil Auld) [RHEL-147186]
  - sched/deadline: Use cpumask_weight_and() in dl_bw_cpus (Phil Auld) [RHEL-147186]
  - sched/deadline: Minor cleanup in select_task_rq_dl() (Phil Auld) [RHEL-147186]
  - sched/deadline: Document dl_server (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server stop condition (Phil Auld) [RHEL-147186]
  - sched/eevdf: Fix min_vruntime vs avg_vruntime (Phil Auld) [RHEL-147186]
  - sched: Fix proxy/current (push,pull)ability (Phil Auld) [RHEL-147186]
  - sched: Start blocked_on chain processing in find_proxy_task() (Phil Auld) [RHEL-147186]
  - sched: Add an initial sketch of the find_proxy_task() function (Phil Auld) [RHEL-147186]
  - sched: Fix runtime accounting w/ split exec & sched contexts (Phil Auld) [RHEL-147186]
  - sched: Move update_curr_task logic into update_curr_se (Phil Auld) [RHEL-147186]
  - configs: Make sure PROXY_EXEC is off (Phil Auld) [RHEL-147186]
  - sched: Add CONFIG_SCHED_PROXY_EXEC & boot argument to enable/disable (Phil Auld) [RHEL-147186]
  - locking/mutex: Rework task_struct::blocked_on (Phil Auld) [RHEL-147186]
  - sched/core: Remove double update_rq_clock() in __set_cpus_allowed_ptr_locked() (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-147186]
  - sched/core: Optimize core cookie matching check (Phil Auld) [RHEL-147186]
  - sched/core: Add comment explaining force-idle vruntime snapshots (Phil Auld) [RHEL-147186]
  - sched/proxy: Yield the donor task (Phil Auld) [RHEL-147186]
  - sched: Fix the do_set_cpus_allowed() locking fix (Phil Auld) [RHEL-147186]
  - sched: Remove never used code in mm_cid_get() (Phil Auld) [RHEL-147186]
  - sched: Detect per-class runqueue changes (Phil Auld) [RHEL-147186]
  - sched: Add support to pick functions to take rf (Phil Auld) [RHEL-147186]
  - sched: Match __task_rq_{,un}lock() (Phil Auld) [RHEL-147186]
  - sched: Mandate shared flags for sched_change (Phil Auld) [RHEL-147186]
  - sched: Cleanup the sched_change NOCLOCK usage (Phil Auld) [RHEL-147186]
  - sched: Make __do_set_cpus_allowed() use the sched_change pattern (Phil Auld) [RHEL-147186]
  - sched: Rename do_set_cpus_allowed() (Phil Auld) [RHEL-147186]
  - sched: Add locking comments to sched_class methods (Phil Auld) [RHEL-147186]
  - sched: Move sched_class::prio_changed() into the change pattern (Phil Auld) [RHEL-147186]
  - sched: Fix do_set_cpus_allowed() locking (Phil Auld) [RHEL-147186]
  - sched: Fix migrate_disable_switch() locking (Phil Auld) [RHEL-147186]
  - sched/deadline: Prepare for switched_from() change (Phil Auld) [RHEL-147186]
  - sched: Cleanup sched_delayed handling for class switches (Phil Auld) [RHEL-147186]
  - sched: Fold sched_class::switch{ing,ed}_{to,from}() into the change pattern (Phil Auld) [RHEL-147186]
  - sched/fair: Only update stats for allowed CPUs when looking for dst group (Phil Auld) [RHEL-147186]
  - sched: Employ sched_change guards (Phil Auld) [RHEL-147186]
  - cleanup: Fix documentation build error for ACQUIRE updates (Phil Auld) [RHEL-147186]
  - tools/testing: add linux/args.h header and fix radix, VMA tests (Phil Auld) [RHEL-147186]
  - cleanup: Introduce ACQUIRE() and ACQUIRE_ERR() for conditional locks (Phil Auld) [RHEL-147186]
  - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Phil Auld) [RHEL-147186]
  - sched: Re-arrange the {EN,DE}QUEUE flags (Phil Auld) [RHEL-147186]
  - sched/topology,x86: Fix build warning (Phil Auld) [RHEL-147186]
  - sched/topology: Fix sched domain build error for GNR, CWF in SNC-3 mode (Phil Auld) [RHEL-147186]
  - sched/fair: Forfeit vruntime on yield (Phil Auld) [RHEL-147186]
  - sched/deadline: only set free_cpus for online runqueues (Phil Auld) [RHEL-147186]
  - sched: Create architecture specific sched domain distances (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix race in push_dl_task() (Phil Auld) [RHEL-147186]
  - vfio/nvgrace-gpu: register device memory for poison handling (Aristeu Rozanski) [RHEL-73608]
  - mm: add stubs for PFNMAP memory failure registration functions (Aristeu Rozanski) [RHEL-73608]
  - mm: fixup pfnmap memory failure handling to use pgoff (Aristeu Rozanski) [RHEL-73608]
  - mm: handle poisoning of pfn without struct pages (Aristeu Rozanski) [RHEL-73608]
  - mm: change ghes code to allow poison of non-struct pfn (Aristeu Rozanski) [RHEL-73608]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-228.el10]
changelog:
  - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - s390/barrier: Make array_index_mask_nospec() __always_inline (Ramesh Chhetri) [RHEL-174629]
  - s390/entry: Scrub r12 register on kernel entry (Ramesh Chhetri) [RHEL-174629]
  - bitmap: introduce bitmap_weighted_xor() (Michal Schmidt) [RHEL-174745]
  - bitmap: add test_zero_nbits() (Michal Schmidt) [RHEL-174745]
  - bitmap: exclude nbits == 0 cases from bitmap test (Michal Schmidt) [RHEL-174745]
  - bitmap: test bitmap_weight() for more (Michal Schmidt) [RHEL-174745]
  - bitmap: add bitmap_weight_from() (Michal Schmidt) [RHEL-174745]
  - bitmap: align test_bitmap output (Michal Schmidt) [RHEL-174745]
  - bitmap: switch test to scnprintf("%*pbl") (Michal Schmidt) [RHEL-174745]
  - bitmap: Add test for out-of-boundary modifications for scatter & gather (Michal Schmidt) [RHEL-174745]
  - cpumask: Introduce cpumask_weighted_or() (Michal Schmidt) [RHEL-174745]
  - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Michal Schmidt) [RHEL-174745]
  - bitmap: remove _check_eq_u32_array (Michal Schmidt) [RHEL-174745]
  - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-172305]
  - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-172305]
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172748] {CVE-2026-43051}
  - redhat/configs: Enable MPAM options (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Make resctrl_mon_ctx_waiters static (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix the check for no monitor components found (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix MBA CDP alloc_capable handling on unmount (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add initial MPAM documentation (Gavin Shan) [RHEL-164228]
  - arm_mpam: Quirk CMN-650's CSU NRDY behaviour (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-6 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-4 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-1 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add quirk framework (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Call resctrl_init() on platforms that can support resctrl (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Select ARCH_HAS_CPU_RESCTRL (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add empty definitions for assorted resctrl functions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Update the rmid reallocation limit (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_rmid_read() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Allow resctrl to allocate monitors (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for csu counters (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add monitor initialisation and domain boilerplate (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add kunit test for control format conversions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for 'MB' resource (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Wait for cacheinfo to be ready (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add rmid index helpers (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Convert to/from MPAMs fixed-point formats (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Hide CDP emulation behind CONFIG_EXPERT (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add CDP emulation (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add plumbing against arm64 task and cpu hooks (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement helpers to update configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_get_config() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement resctrl_arch_reset_all_ctrls() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Pick the caches we will use as resctrl resources (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add boilerplate cpuhp and domain allocation (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Force guest EL1 to use user-space's partid configuration (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add helpers to change a task or cpu's MPAM PARTID/PMG values (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Initialise and context switch the MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Advertise the CPUs MPAM limits to the driver (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Drop the CONFIG_EXPERT restriction (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Re-initialise MPAM regs when CPU comes online (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Context switch the MPAM registers (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Make MPAMSM_EL1 accesses UNDEF (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Preserve host MPAM configuration when changing traps (Gavin Shan) [RHEL-164228]
  - arm64/sysreg: Add MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm_mpam: Reset when feature configuration bit unset (Gavin Shan) [RHEL-164228]
  - arm_mpam: Ensure in_reset_state is false after applying configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: Force __iomem casts (Gavin Shan) [RHEL-100932]
  - arm_mpam: Disable preemption when making accesses to fake MSC in kunit test (Gavin Shan) [RHEL-100932]
  - arm_mpam: Fix null pointer dereference when restoring bandwidth counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use non-atomic bitops when modifying feature bitmap (Gavin Shan) [RHEL-100932]
  - arm_mpam: Remove duplicate linux/srcu.h header (Gavin Shan) [RHEL-100932]
  - arm_mpam: Stop using uninitialized variables in __ris_msmon_read() (Gavin Shan) [RHEL-100932]
  - MAINTAINERS: new entry for MPAM Driver (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit tests for props_mismatch() (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit test for bitmap reset (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helper to reset saved mbwu state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use long MBWU counters if supported (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe for long/lwd mbwu counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Consider overflow in bandwidth counter state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Track bandwidth counter state for power management (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add mpam_msmon_read() to read monitor value (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers to allocate monitors (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe and reset the rest of the features (Gavin Shan) [RHEL-100932]
  - arm_mpam: Allow configuration to be applied and restored during cpu online (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use a static key to indicate when mpam is enabled (Gavin Shan) [RHEL-100932]
  - arm_mpam: Register and enable IRQs (Gavin Shan) [RHEL-100932]
  - arm_mpam: Extend reset logic to allow devices to be reset any time (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add a helper to touch an MSC from any CPU (Gavin Shan) [RHEL-100932]
  - arm_mpam: Reset MSC controls from cpuhp callbacks (Gavin Shan) [RHEL-100932]
  - arm_mpam: Merge supported features during mpam_enable() into mpam_class (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe the hardware features resctrl supports (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers for managing the locking around the mon_sel registers (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe hardware to find the supported partid/pmg values (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add cpuhp callbacks to probe MSC hardware (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add MPAM MSC register layout definitions (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add the class and component structures for firmware described ris (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate (Gavin Shan) [RHEL-100932]
  - ACPI / MPAM: Parse the MPAM table (Gavin Shan) [RHEL-100932]
  - ACPI: Define acpi_put_table cleanup handler and acpi_get_table_pointer() helper (Gavin Shan) [RHEL-100932]
  - platform: Define platform_device_put cleanup handler (Gavin Shan) [RHEL-100932]
  - arm64: kconfig: Add Kconfig entry for MPAM (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Find cache level by cache-id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add acpi_pptt_cache_v1_full to use pptt cache as one structure (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Stop acpi_count_levels() expecting callers to clear levels (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (Gavin Shan) [RHEL-100932]
  - s390/pfault: Fix virtual vs physical address confusion (Mircea Dragan) [RHEL-170908]
  - lib/vsprintf: Add specifier for printing struct timespec64 (CKI Backport Bot) [RHEL-172105]
  - RDMA/rw: Fix MR pool exhaustion in bvec RDMA READ path (Kamal Heib) [RHEL-163515]
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Import DMA-BUF module in uverbs_std_types_dmabuf file (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check id_priv->restricted_node_type in cma_listen_on_dev() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: select CONFIG_DMA_SHARED_BUFFER (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add DMABUF object type and operations (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Support external FD uobjects (Kamal Heib) [RHEL-163515]
  - RDMA/core: introduce rdma_restrict_node_type() (Kamal Heib) [RHEL-163515]
  - RDMA/umem: don't abuse current->group_leader (Kamal Heib) [RHEL-163515]
  - IB/core: Extend rate limit support for RC QPs (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Kamal Heib) [RHEL-163515]
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Kamal Heib) [RHEL-163515]
  - RDMA/core: add MR support for bvec-based RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: use IOVA-based DMA mapping for bvec RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: add bio_vec based RDMA read/write API (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Kamal Heib) [RHEL-163515]
  - RDMA/iwcm: Fix workqueue list corruption by removing work_list (Kamal Heib) [RHEL-163515]
  - RDMA/core: Avoid exporting module local functions and remove not-used ones (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Remove redundant DMABUF ops check (Kamal Heib) [RHEL-163515]
  - IB/core: Add query_port_speed verb (Kamal Heib) [RHEL-163515]
  - IB/core: Refactor rate_show to use ib_port_attr_to_rate() (Kamal Heib) [RHEL-163515]
  - IB/core: Add helper to convert port attributes to data rate (Kamal Heib) [RHEL-163515]
  - IB/core: Add async event on device speed change (Kamal Heib) [RHEL-163515]
  - IB/cache: update gid cache on client reregister event (Kamal Heib) [RHEL-163515]
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Fix rdma_ucm_query_ib_service_resp struct padding (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Fix leaking the multicast GID table reference (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Kamal Heib) [RHEL-163515]
  - RDMA/core: Reduce cond_resched() frequency in __ib_umem_release (Kamal Heib) [RHEL-163515]
  - RDMA/core: Add new IB rate for XDR (8x) support (Kamal Heib) [RHEL-163515]
  - RDMA/core: Prevent soft lockup during large user memory region cleanup (Kamal Heib) [RHEL-163515]
  - RDMA/restrack: Fix typos in the comments (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Correct typedef and bad line warnings (Kamal Heib) [RHEL-163515]
  - IB/isert: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/iser: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/rdmavt: rdmavt_qp.h: clean up kernel-doc comments (Kamal Heib) [RHEL-163515]
  - RDMA/core: WQ_PERCPU added to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Base cm_id destruction timeout on CMA values (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: fix some kernel-doc warnings (Kamal Heib) [RHEL-163515]
  - RDMA/core: let rdma_connect_locked() call lockdep_assert_held(&id_priv->handler_mutex) (Kamal Heib) [RHEL-163515]
  - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-163515]
  - IB/ipoib: Ignore L3 master device (Kamal Heib) [RHEL-163515]
  - RDMA/core: Use route entry flag to decide on loopback traffic (Kamal Heib) [RHEL-163515]
  - RDMA/core: Squash a single user static function (Kamal Heib) [RHEL-163515]
  - RDMA/core: fix "truely"->"truly" (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support write an event into a CM (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support query resolved service records (Kamal Heib) [RHEL-163515]
  - RDMA/cma: Support IB service record resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Support IB service records resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Add RMPP support for SA queries (Kamal Heib) [RHEL-163515]
  - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-165161]
  - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-171979]
  - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-159000]
  - iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement (Jerry Snitselaar) [RHEL-160189]
  - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (Jerry Snitselaar) [RHEL-160189]
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169737] {CVE-2025-68183}
  - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-147247]
  - x86/platform/uv: Handle deconfigured sockets (Krzysztof Pawlinski) [RHEL-158967]
  - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-164699]
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-164699]
  - net/ipv6: Remove HBH helpers (Michal Schmidt) [RHEL-156515]
  - net: mana: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - gve: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - bnxt_en: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - ice: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx4: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx5e: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on RX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on TX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Introduce payload_len helpers (Michal Schmidt) [RHEL-156515]
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-161120] {CVE-2025-68741}
  - selftests/bpf: Add test to verify the fix of kprobe_write_ctx abuse (Ines Qian) [RHEL-78291]
  - bpf: Fix abuse of kprobe_write_ctx via freplace (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix kprobe multi stacktrace_ips test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace ips test for kprobe_multi/kretprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove hexdump dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove xxd util dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Skip livepatch test when prerequisites are missing (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for livepatch + bpf trampoline (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for exclusive maps (Ines Qian) [RHEL-78291]
  - bpf: Require frozen map for calculating map hash (Ines Qian) [RHEL-78291]
  - bpf: Limit bpf program signature size (Ines Qian) [RHEL-78291]
  - bpf: Fix exclusive map memory leak (Ines Qian) [RHEL-78291]
  - selftests/bpf: Allow selftests to build with older xxd (Ines Qian) [RHEL-78291]
  - bpftool: Allow bpftool to build with openssl < 3 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Update test_tag to use sha256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test widen_imprecise_scalars() with different stack depth (Ines Qian) [RHEL-78291]
  - bpf: account for current allocated stack depth in widen_imprecise_scalars() (Ines Qian) [RHEL-78291]
  - bpf: add _impl suffix for bpf_stream_vprintk() kfunc (Ines Qian) [RHEL-78291]
  - bpf:add _impl suffix for bpf_task_work_schedule* kfuncs (Ines Qian) [RHEL-78291]
  - bpf: Conditionally include dynptr copy kfuncs (Ines Qian) [RHEL-78291]
  - libbpf: Fix powerpc's stack register definition in bpf_tracing.h (Ines Qian) [RHEL-78291]
  - bpf: Sync pending IRQ work before freeing ring buffer (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix redefinition of 'off' as different kind of symbol (Ines Qian) [RHEL-78291]
  - bpf: Fix memory leak in __lookup_instance error path (Ines Qian) [RHEL-78291]
  - selftests: arg_parsing: Ensure data is flushed to disk before reading. (Ines Qian) [RHEL-78291]
  - selftests/bpf: make arg_parsing.c more robust to crashes (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for unpinning htab with internal timer struct (Ines Qian) [RHEL-78291]
  - bpf: Avoid RCU context warning when unpinning htab with internal structs (Ines Qian) [RHEL-78291]
  - libbpf: Fix undefined behavior in {get,put}_unaligned_be32() (Ines Qian) [RHEL-78291]
  - bpf: Finish constification of 1st parameter of bpf_d_path() (Ines Qian) [RHEL-78291]
  - libbpf: Fix missing #pragma in libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for rejection of ALU ops with negative offsets (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - bpf: Reject negative offsets for ALU ops (Ines Qian) [RHEL-78291]
  - libbpf: remove linux/unaligned.h dependency for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_sha256() implementation into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_errstr() into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: remove unused libbpf_strerror_r and STRERR_BUFSIZE (Ines Qian) [RHEL-78291]
  - libbpf: make libbpf_errno.c into more generic libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix realloc size in bpf_get_addrs (Ines Qian) [RHEL-78291]
  - libbpf: Replace AF_ALG with open coded SHA-256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stress test for rqspinlock in NMI (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test case for different expected_attach_type (Ines Qian) [RHEL-78291]
  - bpf: Enforce expected_attach_type for tailcall compatibility (Ines Qian) [RHEL-78291]
  - bpftool: Remove duplicate string.h header (Ines Qian) [RHEL-78291]
  - bpf: Remove duplicate crypto/sha2.h header (Ines Qian) [RHEL-78291]
  - libbpf: Fix error when st-prefix_ops and ops from differ btf (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace map lookup_and_delete_elem test case (Ines Qian) [RHEL-78291]
  - selftests/bpf: Refactor stacktrace_map case with skeleton (Ines Qian) [RHEL-78291]
  - bpf: Add lookup_and_delete_elem for BPF_MAP_STACK_TRACE (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix flaky bpf_cookie selftest (Ines Qian) [RHEL-78291]
  - selftests/bpf: Task_work selftest cleanup fixes (Ines Qian) [RHEL-78291]
  - bpf: Mark kfuncs as __noclone (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe multi write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context ip register change test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context registers changes test (Ines Qian) [RHEL-78291]
  - uprobe: Do not emulate/sstep original instruction when ip is changed (Ines Qian) [RHEL-78291]
  - bpf: Allow uprobe program to change context registers (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for program signing options (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add union argument tests using fexit programs (Ines Qian) [RHEL-78291]
  - bpf: Allow union argument in trampoline based programs (Ines Qian) [RHEL-78291]
  - selftests: bpf: Add tests for signed loads from arena (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - bpf, x86: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - selftests/bpf: add bpf task work stress tests (Ines Qian) [RHEL-78291]
  - selftests/bpf: BPF task work scheduling tests (Ines Qian) [RHEL-78291]
  - bpf: task work scheduling kfuncs (Ines Qian) [RHEL-78291]
  - bpf: extract map key pointer calculation (Ines Qian) [RHEL-78291]
  - bpf: bpf task work plumbing (Ines Qian) [RHEL-78291]
  - bpf: verifier: permit non-zero returns from async callbacks (Ines Qian) [RHEL-78291]
  - bpf: htab: extract helper for freeing special structs (Ines Qian) [RHEL-78291]
  - bpf: extract generic helper from process_timer_func() (Ines Qian) [RHEL-78291]
  - bpf: refactor special field-type detection (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable signature verification for some lskel tests (Ines Qian) [RHEL-78291]
  - bpftool: Add support for signing BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Embed and verify the metadata hash in the loader (Ines Qian) [RHEL-78291]
  - libbpf: Update light skeleton for signing (Ines Qian) [RHEL-78291]
  - bpf: Implement signature verification for BPF programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix selftest verifier_arena_large failure (Ines Qian) [RHEL-78291]
  - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 (Ines Qian) [RHEL-78291]
  - bpftool: Fix UAF in get_delegate_value (Ines Qian) [RHEL-78291]
  - bpftool: Add HELP_SPEC_OPTIONS in token.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: test cases for callchain sensitive live stack tracking (Ines Qian) [RHEL-78291]
  - selftests/bpf: __not_msg() tag for test_loader framework (Ines Qian) [RHEL-78291]
  - bpf: table based bpf_insn_successors() (Ines Qian) [RHEL-78291]
  - bpf: disable and remove registers chain based liveness (Ines Qian) [RHEL-78291]
  - bpf: signal error if old liveness is more conservative than new (Ines Qian) [RHEL-78291]
  - bpf: enable callchain sensitive stack liveness tracking (Ines Qian) [RHEL-78291]
  - bpf: callchain sensitive stack liveness tracking using CFG (Ines Qian) [RHEL-78291]
  - bpf: compute instructions postorder per subprogram (Ines Qian) [RHEL-78291]
  - bpf: declare a few utility functions as internal api (Ines Qian) [RHEL-78291]
  - bpf: remove redundant REG_LIVE_READ check in stacksafe() (Ines Qian) [RHEL-78291]
  - bpf: use compute_live_registers() info in clean_func_state (Ines Qian) [RHEL-78291]
  - bpf: bpf_verifier_state->cleaned flag instead of REG_LIVE_DONE (Ines Qian) [RHEL-78291]
  - bpf: Move the signature kfuncs to helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Return hashes of maps in BPF_OBJ_GET_INFO_BY_FD (Ines Qian) [RHEL-78291]
  - libbpf: Support exclusive map creation (Ines Qian) [RHEL-78291]
  - libbpf: Implement SHA256 internal helper (Ines Qian) [RHEL-78291]
  - bpf: Implement exclusive map creation (Ines Qian) [RHEL-78291]
  - bpf: Update the bpf_prog_calc_tag to use SHA256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf: Enforce RCU protection for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() (Ines Qian) [RHEL-78291]
  - bpf...d_path(): constify path argument (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a test for bpf_cgroup_from_id lookup in non-root cgns (Ines Qian) [RHEL-78291]
  - bpf: Do not limit bpf_cgroup_from_id to current's namespace (Ines Qian) [RHEL-78291]
  - bpftool: Search for tracefs at /sys/kernel/tracing first (Ines Qian) [RHEL-78291]
  - selftests/bpf: More open-coded gettid syscall cleanup (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for arena fault reporting (Ines Qian) [RHEL-78291]
  - selftests: bpf: use __stderr in stream error tests (Ines Qian) [RHEL-78291]
  - selftests: bpf: introduce __stderr and __stdout (Ines Qian) [RHEL-78291]
  - bpf: Report arena faults to BPF stderr (Ines Qian) [RHEL-78291]
  - bpf: core: introduce main_prog_aux for stream access (Ines Qian) [RHEL-78291]
  - bpf: arm64: simplify exception table handling (Ines Qian) [RHEL-78291]
  - bpf: WQ_PERCPU added to alloc_workqueue users (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_unbound_wq with system_dfl_wq (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_wq with system_percpu_wq (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix the issue where the error code is 0 (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_ATOMIC instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Introduce bpf_jit_emit_atomic_ops() to emit atomic instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement bpf_addr_space_cast instruction (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_MEM32 pseudo instructions (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add BPF program dump in veristat (Ines Qian) [RHEL-78291]
  - libbpf: Remove unused args in parse_usdt_note (Ines Qian) [RHEL-78291]
  - bpf, arm64: Remove duplicated bpf_flush_icache() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test kfunc bpf_strcasecmp (Ines Qian) [RHEL-78291]
  - bpf: add bpf_strcasecmp kfunc (Ines Qian) [RHEL-78291]
  - selftests/bpf: add benchmark testing for kprobe-multi-all (Ines Qian) [RHEL-78291]
  - selftests/bpf: skip recursive functions for kprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: move get_ksyms and get_addrs to trace_helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpftool: Add CET-aware symbol matching for x86_64 architectures (Ines Qian) [RHEL-78291]
  - bpftool: Refactor kernel config reading into common helper (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add LPM trie microbenchmarks (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto tests for arm64 (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enrich subtest_basic_usdt case in selftests to cover SIB handling logic (Ines Qian) [RHEL-78291]
  - libbpf: Fix USDT SIB argument handling causing unrecognized register error (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix typos and grammar in test sources (Ines Qian) [RHEL-78291]
  - bpf: Add selftest to check the verifier's abstract multiplication (Ines Qian) [RHEL-78291]
  - bpf: Improve the general precision of tnum_mul (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove may_goto tests from DENYLIST.s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto verifier tests on s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add __arch_s390x macro (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a missing newline to the "bad arch spec" message (Ines Qian) [RHEL-78291]
  - s390/bpf: Add s390 JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove entries from config.{arch} already present in config (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for trampoline.c (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_prog_run_array_cg() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_task_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_iter_run_prog() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_inode_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_cgrp_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: Use sha1() instead of sha1_transform() in bpf_prog_calc_tag() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Tests for is_scalar_branch_taken tnum logic (Ines Qian) [RHEL-78291]
  - bpf: Use tnums for JEQ/JNE is_branch_taken logic (Ines Qian) [RHEL-78291]
  - selftests/bpf: Use vmlinux.h for BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Add documentation to version and error API functions (Ines Qian) [RHEL-78291]
  - s390/bpf: Use direct calls and jumps where possible (Ines Qian) [RHEL-78291]
  - bpftool: Add kernel.kptr_restrict hint for no instructions (Ines Qian) [RHEL-78291]
  - bpf: Add a verbose message when the BTF limit is reached (Ines Qian) [RHEL-78291]
  - bpf: Replace get_next_cpu() with cpumask_next_wrap() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for DEVMAP reuse (Ines Qian) [RHEL-78291]
  - libbpf: Fix reuse of DEVMAP (Ines Qian) [RHEL-78291]
  - bpf: Remove migrate_disable in kprobe_multi_link_prog_run (Ines Qian) [RHEL-78291]
  - selftests/bpf: Copy test_kmods when installing selftest (Ines Qian) [RHEL-78291]
  - bpf: Don't use %pK through printk (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpf: Remove redundant __GFP_NOWARN (Ines Qian) [RHEL-78291]
  - bpf: Standardize function declaration style (Ines Qian) [RHEL-78291]
  - bpf: removed unused 'env' parameter from is_reg64 and insn_has_def32 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test multi_st_ops and calling kfuncs from different programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add multi_st_ops that supports multiple instances (Ines Qian) [RHEL-78291]
  - bpf: Allow struct_ops to get map id by kdata (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for token argument (Ines Qian) [RHEL-78291]
  - bpftool: Add bpftool-token manpage (Ines Qian) [RHEL-78291]
  - bpftool: Add bpf_token show (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test concurrent task local data key creation (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test basic task local data operations (Ines Qian) [RHEL-78291]
  - selftests/bpf: Introduce task local data (Ines Qian) [RHEL-78291]
  - bpf: Allow syscall bpf programs to call non-recur helpers (Ines Qian) [RHEL-78291]
  - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (Charles Haithcock) [RHEL-154387]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-229.el10]
changelog:
  - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176448] {CVE-2026-46333}
  - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174757] {CVE-2026-43303}
  - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171616] {CVE-2026-23375}
  - anon_inode: rework assertions (Rafael Aquini) [RHEL-171616]
  - vfs: use the new debug macros in inode_set_cached_link() (Rafael Aquini) [RHEL-171616]
  - vfs: catch invalid modes in may_open() (Rafael Aquini) [RHEL-171616]
  - vfs: add initial support for CONFIG_DEBUG_VFS (Rafael Aquini) [RHEL-171616]
  - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add open() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add exec() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add chmod() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add chown() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests: add file SLAB_TYPESAFE_BY_RCU recycling stressor (Rafael Aquini) [RHEL-171616]
  - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171616]
  - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171616]
  - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171616]
  - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171616]
  - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171616]
  - coccinelle: kmalloc_obj: Remove default GFP_KERNEL arg (Michal Schmidt) [RHEL-174796]
  - default_gfp(): avoid using the "newfangled" __VA_OPT__ trick (Michal Schmidt) [RHEL-174796]
  - add default_gfp() helper macro and use it in the new *alloc_obj() helpers (Michal Schmidt) [RHEL-174796]
  - coccinelle: Add kmalloc_objs conversion script (Michal Schmidt) [RHEL-174796]
  - slab.h: disable completely broken overflow handling in flex allocations (Michal Schmidt) [RHEL-174796]
  - slab: Introduce kmalloc_flex() and family (Michal Schmidt) [RHEL-174796]
  - compiler_types: Introduce __flex_counter() and family (Michal Schmidt) [RHEL-174796]
  - checkpatch: Suggest kmalloc_obj family for sizeof allocations (Michal Schmidt) [RHEL-174796]
  - slab: Introduce kmalloc_obj() and family (Michal Schmidt) [RHEL-174796]
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (David Marlin) [RHEL-172460]
  - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (David Marlin) [RHEL-172460 RHEL-172865] {CVE-2026-31772}
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state (David Marlin) [RHEL-172460]
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response (David Marlin) [RHEL-172460]
  - Bluetooth: MGMT: validate mesh send advertising payload length (David Marlin) [RHEL-172460]
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (David Marlin) [RHEL-172460]
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (David Marlin) [RHEL-172460]
  - Bluetooth: MGMT: validate LTK enc_size on load (David Marlin) [RHEL-172460 RHEL-172580] {CVE-2026-43020}
  - Bluetooth: hci_h4: Fix race during initialization (David Marlin) [RHEL-172460]
  - Bluetooth: hci_event: move wake reason storage into validated event handlers (David Marlin) [RHEL-172460]
  - Bluetooth: SCO: fix race conditions in sco_sock_connect() (David Marlin) [RHEL-172460 RHEL-172607] {CVE-2026-43023}
  - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (David Marlin) [RHEL-172460]
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
  - Bluetooth: hci_aml: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Enable HFP hardware offload for WCN6855 and WCN7850 (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Refactor HFP hardware offload capability handling (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Remove duplicate entry for 0x13d3/0x3618 (David Marlin) [RHEL-172460]
  - Bluetooth: btintel: Remove unneeded CONFIG_PM* #ifdef's (David Marlin) [RHEL-172460]
  - Bluetooth: btnxpuart: Remove unneeded CONFIG_PM ifdef (David Marlin) [RHEL-172460]
  - Bluetooth: btintel_pcie: Remove unnecessary check before kfree_skb() (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Reject autosuspend if discovery is active (David Marlin) [RHEL-172460]
  - Bluetooth: hci_core: Export hci_discovery_active (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
  - Bluetooth: Fix using PHYs bitfields as PHY value (David Marlin) [RHEL-172460]
  - Bluetooth: btqca: Add WCN6855 firmware priority selection feature (David Marlin) [RHEL-172460]
  - Bluetooth: btqca: move WCN7850 workaround to the caller (David Marlin) [RHEL-172460]
  - Bluetooth: btmtksdio: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
  - Bluetooth: hci_bcm4377: Use generic power management (David Marlin) [RHEL-172460]
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174522] {CVE-2026-43284}
  - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-170705]
  - iommu/arm-smmu-v3: Fix typos introduced by arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Do not continue in __arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Perform per-domain invalidations using arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add arm_smmu_invs based arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Populate smmu_domain->invs when attaching masters (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Pre-allocate a per-master invalidation array (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Introduce a per-domain arm_smmu_invs array (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add an inline arm_smmu_domain_free() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Explicitly set smmu_domain->stage for SVA (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (Jerry Snitselaar) [RHEL-88961]
  - sort.h: hoist cmp_int() into generic header file (Jerry Snitselaar) [RHEL-88961]
  - lib/sort.c: add _nonatomic() variants with cond_resched() (Jerry Snitselaar) [RHEL-88961]
  - lib/list_sort: clarify comparison function requirements in list_sort() (Jerry Snitselaar) [RHEL-88961]
  - lib/sort: clarify comparison function requirements in sort_r() (Jerry Snitselaar) [RHEL-88961]
  - cgroup/cpuset: Skip security check for hotplug induced v1 task migration (Waiman Long) [RHEL-160958]
  - cgroup/cpuset: Simplify setsched decision check in task iteration loop of cpuset_can_attach() (Waiman Long) [RHEL-160958]
  - blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-93825]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-230.el10]
changelog:
  - powercap: intel_rapl: Add support for Nova Lake processors (Steve Best) [RHEL-117269]
  - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171638]
  - selftests/bpf: Ensure typedef are deduplicated in split BTF (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix deduplication of typedef with base definitions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs (Jerome Marchand) [RHEL-139985]
  - bpf: Remove static qualifier from local subprog pointer (Jerome Marchand) [RHEL-139985]
  - bpf: Fix ld_{abs,ind} failure path analysis in subprogs (Jerome Marchand) [RHEL-139985]
  - bpf: Propagate error from visit_tailcall_insn (Jerome Marchand) [RHEL-139985]
  - ftrace,bpf: Remove FTRACE_OPS_FL_JMP ftrace_ops flag (Jerome Marchand) [RHEL-139985]
  - ftrace: Fix address for jmp mode in t_show() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add regression test for bpf_d_path() (Jerome Marchand) [RHEL-139985]
  - bpf: Fix verifier assumptions of bpf_d_path's output buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test for truncated dmabuf_iter reads (Jerome Marchand) [RHEL-139985]
  - bpf: Fix truncated dmabuf iterator reads (Jerome Marchand) [RHEL-139985]
  - x86/unwind/orc: Support reliable unwinding through BPF stack frames (Jerome Marchand) [RHEL-139985]
  - bpf: Add bpf_has_frame_pointer() (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix -Wdiscarded-qualifiers under C23 (Jerome Marchand) [RHEL-139985]
  - bpftool: Fix build warnings due to MS extensions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add -fms-extensions to bpf build flags (Jerome Marchand) [RHEL-139985]
  - bpf: optimize bpf_map_update_elem() for map-in-map types (Jerome Marchand) [RHEL-139985]
  - bpf: make kprobe_multi_link_prog_run always_inline (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add success stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Precede non-head waiter queueing with AA check (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Disable spinning for trylock fallback (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Use trylock fallback when per-CPU rqnode is busy (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Perform AA checks immediately (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Enclose lock/unlock within lock entry acquisitions (Jerome Marchand) [RHEL-139985]
  - bpf: Remove runqslower tool (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Remove usage of lsm/file_alloc_security in selftest (Jerome Marchand) [RHEL-139985]
  - bpf: Disable file_alloc_security hook (Jerome Marchand) [RHEL-139985]
  - bpf: check for insn arrays in check_ptr_alignment (Jerome Marchand) [RHEL-139985]
  - bpf: force BPF_F_RDONLY_PROG on insn array creation (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Make CS length configurable for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add lock wait time stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Relax CPU requirements for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - bpf: Introduce internal bpf_map_check_op_flags helper function (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix some incorrect @param descriptions in the comment of libbpf.h (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Call bpf_get_numa_node_id() in trigger_count() (Jerome Marchand) [RHEL-139985]
  - docs: bpf: map_array: Specify BPF_MAP_TYPE_PERCPU_ARRAY value size limit (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix htab_update/reenter_update selftest failure (Jerome Marchand) [RHEL-139985]
  - bpf: implement "jmp" mode for trampoline (Jerome Marchand) [RHEL-139985]
  - bpf: specify the old and new poke_type for bpf_arch_text_poke (Jerome Marchand) [RHEL-139985]
  - bpf,x86: adjust the "jmp" mode for bpf trampoline (Jerome Marchand) [RHEL-139985]
  - bpf: fix the usage of BPF_TRAMP_F_SKIP_FRAME (Jerome Marchand) [RHEL-139985]
  - x86/ftrace: Implement DYNAMIC_FTRACE_WITH_JMP (Jerome Marchand) [RHEL-139985]
  - ftrace: Introduce FTRACE_OPS_FL_JMP (Jerome Marchand) [RHEL-139985]
  - bpf: cleanup aux->used_maps after jit (Jerome Marchand) [RHEL-139985]
  - selftests: bpf: Add tests for unbalanced rcu_read_lock (Jerome Marchand) [RHEL-139985]
  - bpf: support nested rcu critical sections (Jerome Marchand) [RHEL-139985]
  - bpf: test the correct stack liveness of tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: correct stack liveness for tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: test the proper verification of tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: properly verify tail call behavior (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Improve reliability of test_perf_branches_no_hw() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms (Jerome Marchand) [RHEL-139985]
  - bpf: Document cfi_stubs and owner fields in struct bpf_struct_ops (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names (Jerome Marchand) [RHEL-139985]
  - bpf: don't skip other information if xlated_prog_insns is skipped (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: Move desc->imm setup to sort_kfunc_descs_by_imm_off() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Align kfuncs renamed in bpf tree (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add BTF dedup tests for recursive typedef definitions (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix BTF dedup to support recursive typedef definitions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix failure paths in send_signal test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Convert glob_match() to bpf arena (Jerome Marchand) [RHEL-139985]
  - bpf: Handle return value of ftrace_set_filter_ip in register_fentry (Jerome Marchand) [RHEL-139985]
  - bpf: Add missing checks to avoid verbose verifier log (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: retry bpf_map_update_elem() when E2BIG is returned (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test to verify freeing the special fields in pcpu maps (Jerome Marchand) [RHEL-139985]
  - bpf: Free special fields when update [lru_,]percpu_hash maps (Jerome Marchand) [RHEL-139985]
  - bpf: Adjust return value for queue destruction in rqspinlock (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add C-level selftests for indirect jumps (Jerome Marchand) [RHEL-139985]
  - libbpf: support llvm-generated indirect jumps (Jerome Marchand) [RHEL-139985]
  - bpf: disasm: add support for BPF_JMP|BPF_JA|BPF_X (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: test instructions arrays with blinding (Jerome Marchand) [RHEL-139985]
  - bpf: support instructions arrays with constants blinding (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add selftests for new insn_array map (Jerome Marchand) [RHEL-139985]
  - libbpf: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
  - bpftool: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
  - bpf, x86: add new map type: instructions array (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Test parsing of (multi-)split BTF (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix parsing of multi-split BTF (Jerome Marchand) [RHEL-139985]
  - docs/bpf: Add missing BPF k/uprobe program types to docs (Jerome Marchand) [RHEL-139985]
  - libbpf: Update the comment to remove the reference to the deprecated interface bpf_program__load(). (Jerome Marchand) [RHEL-139985]
  - libbpf: Complete the missing @param and @return tags in btf.h (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
  - bpf: Skip bounds adjustment for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add ABBCCA case for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Disable queue destruction for deadlocks (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix intermittent failures in file_reader test (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix the incorrect reference to the memlock_rlim variable in the comment. (Jerome Marchand) [RHEL-139985]
  - libbpf: Optimize the redundant code in the bpf_object__init_user_btf_maps() function. (Jerome Marchand) [RHEL-139985]
  - bpf: Fix stackmap overflow check in __bpf_get_stackid() (Jerome Marchand) [RHEL-139985]
  - bpf: Refactor stack map trace depth calculation into helper function (Jerome Marchand) [RHEL-139985]
  - bpftool: Fix missing closing parethesis for BTF_KIND_UNKN (Jerome Marchand) [RHEL-139985]
  - selftests/bpf/benchs: Add overwrite mode benchmark for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add overwrite mode test for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - bpf: Add overwrite mode for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add file dynptr tests (Jerome Marchand) [RHEL-139985]
  - bpf: dispatch to sleepable file dynptr (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: refactor kfunc specialization (Jerome Marchand) [RHEL-139985]
  - bpf: add kfuncs and helpers support for file dynptrs (Jerome Marchand) [RHEL-139985]
  - bpf: add plumbing for file-backed dynptr (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: centralize const dynptr check in unmark_stack_slots_dynptr() (Jerome Marchand) [RHEL-139985]
  - bpf: widen dynptr size/offset to 64 bit (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: remove unnecessary kfunc prototypes (Jerome Marchand) [RHEL-139985]
  - libbpf: fix formatting of bpf_object__append_subprog_code (Jerome Marchand) [RHEL-139985]
  - bpf: make bpf_insn_successors to return a pointer (Jerome Marchand) [RHEL-139985]
  - bpf: generalize and export map_get_next_key for arrays (Jerome Marchand) [RHEL-139985]
  - bpf: save the start of functions in bpf_prog_aux (Jerome Marchand) [RHEL-139985]
  - bpf: fix the return value of push_stack (Jerome Marchand) [RHEL-139985]
  - bpf: Clarify get_outer_instance() handling in propagate_to_outer_instance() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix list_del() in arena list (Jerome Marchand) [RHEL-139985]
  - samples/bpf: Fix spelling typos in samples/bpf (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix selftest verif_scale_strobemeta failure with llvm22 (Jerome Marchand) [RHEL-139985]
  - bpf: mark vma->{vm_mm,vm_file} as __safe_trusted_or_null (Jerome Marchand) [RHEL-139985]
  - bpf: mark mm->owner as __safe_rcu_or_null (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Silence unused-but-set build warnings (Jerome Marchand) [RHEL-139985]
  - bpf: Consistently use bpf_rcu_lock_held() everywhere (Jerome Marchand) [RHEL-139985]
  - bpf: Extract internal structs validation logic into helpers (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add more bpf_wq tests (Jerome Marchand) [RHEL-139985]
  - bpf: Fix handling maps with no BTF and non-constant offsets for the bpf_wq (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Test bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
  - bpf: add bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add tests for async cb context (Jerome Marchand) [RHEL-139985]
  - bpf: Refactor storage_get_func_atomic to generic non_sleepable flag (Jerome Marchand) [RHEL-139985]
  - bpf: Fix sleepable context for async callbacks (Jerome Marchand) [RHEL-139985]
  - bpf: Cleanup unused func args in rqspinlock implementation (Jerome Marchand) [RHEL-139985]
  - bpf: Add dynptr type for skb metadata (Jerome Marchand) [RHEL-139985]
  - cpufreq/amd-pstate: Add comment explaining nominal_perf usage for performance policy (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Add static asserts for EPP indices (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Fix some whitespace issues (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Adjust return values in amd_pstate_update_status() (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Make amd_pstate_get_mode_string() never return NULL (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Drop NULL value from amd_pstate_mode_string (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Use sysfs_match_string() for epp (Steve Best) [RHEL-127643]
  - efi/cper: Fix cper_bits_to_str buffer handling and return value (Thomas Huth) [RHEL-164371]
  - efi: Wipe INITRD config table from memory after consumption (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Fix EDID support in mixed-mode (Thomas Huth) [RHEL-164371]
  - docs: efi: add CPER functions to driver-api (Thomas Huth) [RHEL-164371]
  - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs (Thomas Huth) [RHEL-164371]
  - efi/cper: Add a new helper function to print bitmasks (Thomas Huth) [RHEL-164371]
  - efi/cper: Adjust infopfx size to accept an extra space (Thomas Huth) [RHEL-164371]
  - efi/libstub: x86: Store EDID in boot_params (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Add support for reading EDID (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Initialize screen_info in helper function (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Find GOP handle instead of GOP data (Thomas Huth) [RHEL-164371]
  - efi: Fix trailing whitespace in header file (Thomas Huth) [RHEL-164371]
  - efi/memattr: Convert efi_memattr_init() return type to void (Thomas Huth) [RHEL-164371]
  - efi: stmm: fix kernel-doc "bad line" warnings (Thomas Huth) [RHEL-164371]
  - efi/riscv: Remove the useless failure return message print (Thomas Huth) [RHEL-164371]
  - efistub/x86: Add fallback for SMBIOS record lookup (Thomas Huth) [RHEL-164371]
  - kthread: Warn if mm_struct lacks user_ns in kthread_use_mm() (Thomas Huth) [RHEL-164371]
  - arm64/efi: Don't fail check current_in_efi() if preemptible (Thomas Huth) [RHEL-164371]
  - arm64: efi: Fix NULL pointer dereference by initializing user_ns (Thomas Huth) [RHEL-164371]
  - arm64/efi: Call EFI runtime services without disabling preemption (Thomas Huth) [RHEL-164371]
  - arm64/efi: Move uaccess en/disable out of efi_set_pgd() (Thomas Huth) [RHEL-164371]
  - arm64/efi: Drop efi_rt_lock spinlock from EFI arch wrapper (Thomas Huth) [RHEL-164371]
  - arm64/fpsimd: Permit kernel mode NEON with IRQs off (Thomas Huth) [RHEL-164371]
  - arm64/fpsimd: Don't warn when EFI execution context is preemptible (Thomas Huth) [RHEL-164371]
  - efi/runtime-wrappers: Keep track of the efi_runtime_lock owner (Thomas Huth) [RHEL-164371]
  - efi: Add missing static initializer for efi_mm::cpus_allowed_lock (Thomas Huth) [RHEL-164371]
  - efi/libstub: Fix page table access in 5-level to 4-level paging transition (Thomas Huth) [RHEL-164371]
  - platform/x86/amd/pmf: Added a module parameter to disable the Smart PC function (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Introduce new interface to export NPU metrics (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Use devm_mutex_init() for mutex initialization (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Refactor repetitive BIOS output handling (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Replace magic table id with METRICS_TABLE_ID (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Rename IPU metrics fields to NPU for consistency (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Remove redundant ternary operators (Steve Best) [RHEL-127641]
  - hwmon: (k10temp) Add AMD Steam Deck APU ID (Steve Best) [RHEL-127650]
  - hwmon: (k10temp) Add device ID for Strix Halo (Steve Best) [RHEL-127650]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-231.el10]
changelog:
  - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-175521]
  - KVM: arm64: Invert KVM_PGTABLE_WALK_HANDLE_FAULT to fix pKVM walkers (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Fix page leak in user_mem_abort() on atomic fault (Sebastian Ott) [RHEL-151899]
  - kselftest/arm64: Add HWCAP test for FEAT_LS64 (Sebastian Ott) [RHEL-151899]
  - arm64: Add support for FEAT_{LS64, LS64_V} (Sebastian Ott) [RHEL-151899]
  - docs: arm64: Document EL3 requirements for FEAT_PMUv3 (Sebastian Ott) [RHEL-151899]
  - docs: arm64: Document EL3 requirements for cpu debug architecture (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Enable FEAT_{LS64, LS64_V} in the supported guest (Sebastian Ott) [RHEL-151899]
  - arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1 (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Handle DABT caused by LS64* instructions on unsupported memory (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Add documentation for KVM_EXIT_ARM_LDST64B (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Add exit to userspace on {LD,ST}64B* outside of memslots (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Verify that reads to inaccessible guest_memfd VMAs SIGBUS (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Verify that faulting in private guest_memfd memory fails (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add wrapper macro to handle and assert on expected SIGBUS (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Isolate the guest_memfd Copy-on-Write negative testcase (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add wrappers for mmap() and munmap() to assert success (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add test coverage for guest_memfd without GUEST_MEMFD_FLAG_MMAP (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Create a new guest_memfd for each testcase (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Stash the host page size in a global in the guest_memfd test (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Allow mmap() on guest_memfd for x86 VMs with private memory (Sebastian Ott) [RHEL-151899]
  - KVM: Explicitly mark KVM_GUEST_MEMFD as depending on KVM_GENERIC_MMU_NOTIFIER (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Invalidate SHARED GPAs if gmem supports INIT_SHARED (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Add INIT_SHARED flag, reject user page faults if not set (Sebastian Ott) [RHEL-151899]
  - KVM: Rework KVM_CAP_GUEST_MEMFD_MMAP into KVM_CAP_GUEST_MEMFD_FLAGS (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: nv: Forward FEAT_XNX permissions to the shadow stage-2 (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add guest_memfd testcase to fault-in on !mmap()'d memory (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: guest_memfd mmap() test when mmap is supported (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Do not use hardcoded page sizes in guest_memfd test (Sebastian Ott) [RHEL-151899]
  - KVM: Allow and advertise support for host mmap() on guest_memfd files (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Enable support for guest_memfd backed memory (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: nv: Handle VNCR_EL2-triggered faults backed by guest_memfd (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Handle guest_memfd-backed guest page faults (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Refactor user_mem_abort() (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Handle guest page faults for guest_memfd with shared memory (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Extend guest_memfd's max mapping level to shared mappings (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Enforce guest_memfd's max order when recovering hugepages (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Hoist guest_memfd max level/order helpers "up" in mmu.c (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Rename .private_max_mapping_level() to .gmem_max_mapping_level() (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Track guest_memfd mmap support in memslot (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Add plumbing to host to map guest_memfd pages (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Enable KVM_GUEST_MEMFD for all 64-bit builds (Sebastian Ott) [RHEL-151899]
  - KVM: Fix comment that refers to kvm uapi header path (Sebastian Ott) [RHEL-151899]
  - KVM: Fix comments that refer to slots_lock (Sebastian Ott) [RHEL-151899]
  - KVM: Rename kvm_slot_can_be_private() to kvm_slot_has_gmem() (Sebastian Ott) [RHEL-151899]
  - KVM: Rename CONFIG_KVM_GENERIC_PRIVATE_MEM to CONFIG_HAVE_KVM_ARCH_GMEM_POPULATE (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Select TDX's KVM_GENERIC_xxx dependencies iff CONFIG_KVM_INTEL_TDX=y (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Select KVM_GENERIC_PRIVATE_MEM directly from KVM_SW_PROTECTED_VM (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Have all vendor neutral sub-configs depend on KVM_X86, not just KVM (Sebastian Ott) [RHEL-151899]
  - KVM: Rename CONFIG_KVM_PRIVATE_MEM to CONFIG_KVM_GUEST_MEMFD (Sebastian Ott) [RHEL-151899]


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80610


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 5:5.1.1-1
changelog:
  - podman-5.1.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.1.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-138726


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-168121, RHEL-167887


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-168121, RHEL-167887


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as a provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as an OpenSSL provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladislav Dronov <vdronov@redhat.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0 @ 686d209b (RHEL-91079)
  - Add autoconf-archive as a dependency
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code
  - Add sysusers.d config file to allow rpm to create users/groups automatically


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba (RHEL-73092, RHEL-50462)
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-2
changelog:
  - kvm-e1000e-Prevent-crash-from-legacy-interrupt-firing-af.patch [RHEL-112882]
  - Resolves: RHEL-112882
    ([DEV Task]: Assertion `core->delayed_causes == 0' failed with e1000e NIC)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-3
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-119368]
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-116443]
  - kvm-target-i386-add-compatibility-property-for-arch_capa.patch [RHEL-120253]
  - kvm-target-i386-add-compatibility-property-for-pdcm-feat.patch [RHEL-120253]
  - Resolves: RHEL-119368
    ([rhel10] Backport "arm/kvm: report registers we failed to set")
  - Resolves: RHEL-116443
    (qemu crash after hot-unplug disk from the multifunction enabled bus,crash point PCIDevice *vf = dev->exp.sriov_pf.vf[i])
  - Resolves: RHEL-120253
    (Backport fixes for PDCM and ARCH_CAPABILITIES migration incompatibility)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-4
changelog:
  - kvm-qapi-machine-s390x-add-QAPI-event-SCLP_CPI_INFO_AVAI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-tests-functional-add-tests-for-SCLP-event-CPI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-redhat-Add-new-rhel9.8.0-and-rhel10.2.0-machine-type.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-vfio-rename-field-to-num_initial_regions.patch [RHEL-118810]
  - kvm-vfio-only-check-region-info-cache-for-initial-region.patch [RHEL-118810]
  - kvm-arm-create-new-rhel-10.2-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-arm-create-new-rhel-9.8-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-10.2-specific-pc-q35-machine-typ.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-9.8-specific-pc-q35-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-rh-enable-CONFIG_USB_STORAGE_BOT.patch [RHEL-101929]
  - Resolves: RHEL-104009
    ([IBM 10.2 FEAT] KVM: Enhance machine type definition to include CPI and PCI passthru capabilities (qemu))
  - Resolves: RHEL-105823
    (Add new -rhel10.2.0 machine type to qemu-kvm [s390x])
  - Resolves: RHEL-73008
    ([IBM 10.2 FEAT] KVM: Implement Control Program Identification (qemu))
  - Resolves: RHEL-118810
    ([RHEL 10.2] Windows 11 VM fails to boot up with ramfb='on' with QEMU 10.1)
  - Resolves: RHEL-105826
    (Add new -rhel10.2.0 machine type to qemu-kvm [aarch64])
  - Resolves: RHEL-105828
    (Add new -rhel10.2.0 machine type to qemu-kvm [x86_64])
  - Resolves: RHEL-101929
    (enable 'usb-bot' device for proper support of USB CD-ROM drives via libvirt  )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-5
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120116]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120116]
  - kvm-vfio-Disable-VFIO-migration-with-MultiFD-support.patch [RHEL-126573]
  - kvm-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-from-10..patch [RHEL-67323]
  - kvm-hw-arm-smmu-common-Check-SMMU-has-PCIe-Root-Complex-.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Re-arrange-SMMUv3-IORT-build.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Update-IORT-for-multiple-smmu.patch [RHEL-73800]
  - kvm-hw-arm-virt-Factor-out-common-SMMUV3-dt-bindings-cod.patch [RHEL-73800]
  - kvm-hw-arm-virt-Add-an-SMMU_IO_LEN-macro.patch [RHEL-73800]
  - kvm-hw-pci-Introduce-pci_setup_iommu_per_bus-for-per-bus.patch [RHEL-73800]
  - kvm-hw-arm-virt-Allow-user-creatable-SMMUv3-dev-instanti.patch [RHEL-73800]
  - kvm-qemu-options.hx-Document-the-arm-smmuv3-device.patch [RHEL-73800]
  - kvm-bios-tables-test-Allow-for-smmuv3-test-data.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Add-tests-for-legacy-smmuv3-a.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Update-tables-for-smmuv3-test.patch [RHEL-73800]
  - kvm-qtest-Do-not-run-bios-tables-test-on-aarch64.patch []
  - Resolves: RHEL-120116
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-10.2])
  - Resolves: RHEL-126573
    (VFIO migration using multifd should be disabled by default)
  - Resolves: RHEL-67323
    ([aarch64] Support ACPI based PCI hotplug on ARM)
  - Resolves: RHEL-73800
    (NVIDIA:Grace-Hopper:Backport support for user-creatable nested SMMUv3 - RHEL 10.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-6
changelog:
  - kvm-ram-block-attributes-fix-interaction-with-hugetlb-me.patch [RHEL-126708]
  - kvm-ram-block-attributes-Unify-the-retrieval-of-the-bloc.patch [RHEL-126708]
  - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-128085]
  - kvm-Fix-the-typo-of-vfio-pci-device-s-enable-migration-o.patch [RHEL-130704]
  - Resolves: RHEL-126708
    ([RHEL 10]snp guest fail to boot with hugepage)
  - Resolves: RHEL-128085
    (VM crashes during boot when virtio device is attached through vfio_ccw)
  - Resolves: RHEL-130704
    ([rhel10] Fix the typo under vfio-pci device's enable-migration option )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-7
changelog:
  - kvm-pcie_sriov-Fix-broken-MMIO-accesses-from-SR-IOV-VFs.patch [RHEL-120115]
  - kvm-arm-fix-oob-access-in-compat-handling.patch [RHEL-130478]
  - Resolves: RHEL-120115
    (The vf nic created using the IGB emulated nic can not obtain ip address )
  - Resolves: RHEL-130478
    (Migration from RHEL 10.2 to RHEL 10.1 with virt-rhel10.0.0 machine type fails on Grace)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-8
changelog:
  - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540]
  - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543]
  - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212]
  - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212]
  - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212]
  - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212]
  - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212]
  - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212]
  - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212]
  - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212]
  - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212]
  - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212]
  - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212]
  - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212]
  - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212]
  - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212]
  - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212]
  - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212]
  - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212]
  - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212]
  - Resolves: RHEL-129540
    (Assertion failure on drain with iothread and I/O load)
  - Resolves: RHEL-121543
    (The VM hit io error when do S3-PR integration on the pass-through  failover multipath device)
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-9
changelog:
  - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212]
  - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003]
  - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003]
  - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003]
  - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003]
  - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853]
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)
  - Resolves: RHEL-110003
    (Expose block limits of block nodes in QMP and qemu-img)
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-10
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142]
  - Resolves: RHEL-108142
    (QEMU crashes when stopping source VM during live migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-11
changelog:
  - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-126707]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028]
  - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853]
  - Resolves: RHEL-126707
    ([qemu, rhel-10] increase default TSEG size)
  - Resolves: RHEL-139028
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2])
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-12
changelog:
  - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118]
  - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118]
  - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118]
  - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118]
  - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118]
  - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785]
  - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785]
  - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785]
  - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785]
  - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785]
  - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785]
  - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785]
  - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785]
  - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-net-implement-tunnel-probing.patch [RHEL-143785]
  - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785]
  - Resolves: RHEL-79118
    ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10])
  - Resolves: RHEL-143785
    (backport support for GSO over UDP tunnel offload)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425]
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749]
  - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584]
  - Resolves: RHEL-147425
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-132749
    (Migrate SCSI PR state and preempt reservation upon live migration)
  - Resolves: RHEL-134989
    (Hotplugged interface device can not be shown in the guest)
  - Resolves: RHEL-146584
    ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-14
changelog:
  - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
  - Resolves: RHEL-153058
    (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
  - Resolves: RHEL-144004
    ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-15
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
  - Resolves: RHEL-155601
    (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-16
changelog:
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
  - Resolves: RHEL-158224
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-17
changelog:
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-114231]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-114231]
  - Resolves: RHEL-114231
    (Add stats-intervals support to --blockdev)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-18
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-158212]
  - kvm-hw-tpm-Factor-tpm_ppi_enabled-out.patch [RHEL-112608]
  - kvm-hw-tpm-Add-TPMIfClass-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Remove-CRBState-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Propagate-ppi_enabled-to-tpm_tis_reset-and-re.patch [RHEL-112608]
  - kvm-hw-tpm-Simplify-tpm_ppi_enabled.patch [RHEL-112608]
  - kvm-docs-specs-tpm-document-PPI-support-on-ARM64-virt.patch [RHEL-112608]
  - kvm-hw-acpi-tpm-parameterize-PPI-base-address-in-tpm_bui.patch [RHEL-112608]
  - kvm-hw-tpm-add-PPI-support-to-tpm-tis-device-for-ARM64-v.patch [RHEL-112608]
  - Resolves: RHEL-158212
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.3])
  - Resolves: RHEL-112608
    ([ARM64] Windows 11 VM should install without TPM Bypass)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Tyonnchie Berry <tyberry@redhat.com> - 2.8-5
changelog:
  - Added patch Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch sched_attr-Do-not-define-for-glibc-2.41.patch
  Resolves: RHEL-88470


author: Tyonnchie Berry <tyberry@redhat.com> - 2.9-1
changelog:
  - Rebased to latest upstream version
  - Dropped previously applied patches
  - Cleaned up spec file
  Resolves: RHEL-86705


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase realtime-tests to the latest upstream
  - Added 3 patches and updated spec file
  Resolves: RHEL-144701


author: John Kacur <jkacur@redhat.com> - 2.6-5
changelog:
  - Added the following upstream patches
    rt-tests-Fix-warnings.patch
    rt-tests-cyclictest-Remove-histogram-totals.patch
    rt-tests-cyclictest-Replace-histogram-code-with-libr.patch
    rt-tests-cyclicdeadline-Add-histogram-support.patch
    rt-tests-cyclics-Fix-json-segfault-when-not-using-hi.patch
    rt-tests-cyclicdeadline-Print-the-histogram-regardle.patch
    rt-tests-cyclicdeadline-Remove-dead-verbose-code-in-.patch
    rt-tests-oslat-should-use-MHz-not-Mhz.patch
    rt-tests-oslat-convert-to-nanoseconds-correctly.patch
  - Added gating.yaml
  - Added tests dir
  Resolves: RHEL-30184


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: mjcr99 <macano@redhat.com> - 1:0.3.9-1
changelog:
  - Update rhc to 0.3.9
  - Resolves: RHEL-174319
  - Resolves: RHEL-174314
  - Resolves: RHEL-153860
  - Resolves: RHEL-138740


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-2
changelog:
  - Rebase to 8.2604.0
    Resolves: RHEL-140910
  - Drop ossl-free-cert.patch (upstream)
  - Drop gtls-unused-certificates.patch (upstream)
  - Add SAN:IP validation support
    Resolves: RHEL-150376
  - Add TlsRevocationCheck support
    Resolves: RHEL-151324
  - Fix omelasticsearch IPv6 handling
    Resolves: RHEL-164768
  - Fix imfile not releasing deleted file FDs in inotify mode
    Resolves: RHEL-149118


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100438)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744)
  - zipl: makedumpfile is required for ngdump support (RHEL-114661)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109214)
  - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100438)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829)
  - Secure Execution: Add tool to verify host-key documents (RHEL-136795)
  - Resolves: RHEL-100438 RHEL-71829 RHEL-136795


author: Dan Horák <dhorak@redhat.com> - 2:2.41.0-1
changelog:
  - rebased to 2.41.0 (RHEL-136097)
  - hsci: Automatically set appropriate MTU for HSCI (RHEL-153550)
  - Resolves: RHEL-136097 RHEL-153550


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-36
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-113741
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-114454
  - Add support for Image Mode
    Resolves: RHEL-114454


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.36-1
changelog:
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code
  - browser: Always show "Report Bug" button


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-1
changelog:
  - Migrate from libxml2 to xml.etree.ElementTree
  - Handle ImportError when setroubleshoot.browser is not available
  - Add support for multiple commands in fix_cmd (RHEL-155209)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.22.2-2
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.22.2
  - re-add test file installation to fix tier0 tests
  - Resolves: RHEL-153734


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - new upstream release
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-2
changelog:
  - use %configure RPM macro instead of bare ./configure to inject
    RPM hardening flags (stack protector, FORTIFY_SOURCE)
  - use %make_build and %make_install RPM macros
  - Resolves: RHEL-152227


author: Kalev Lember <klember@redhat.com> - 45.0-2
changelog:
  - Package review fixes (rhbz#2241553)
  - Add SourceLicense tag to distinguish between the license of the app
    itself and its crate deps
  - Slightly change virtual provides for bundled aperture crate to better
    match other rust packages


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-9
changelog:
  - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-10
changelog:
  - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-12
changelog:
  - Resolves: RHEL-160670 - squid: Squid: Denial of Service via heap
    Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  - Resolves: RHEL-160671 - squid: Squid: Denial of Service via crafted
    ICP traffic (CVE-2026-32748)


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0
  - Drop upstreamed patches


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Make queue_track the default backend
  - Remove LTO build flags
  - Remove the -m64 build flag
  Resolves: RHEL-105604 RHEL-114506


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Alejandro López <allopez@redhat.com> - 1.9.17-3.p2
changelog:
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-4.p2
changelog:
  - Bump release number
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-22
changelog:
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
  - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
  - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
  - hwdb: update rules (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - Add Razer Cobra mouse to hwdb (RHEL-72702)
  - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
  - hwdb: sort SDR devices by vendor name (RHEL-72702)
  - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
  - hwdb: run "update-hwdb" (RHEL-72702)
  - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
  - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
  - hwdb: add Airspy devices (RHEL-72702)
  - hwdb: add more devices (RHEL-72702)
  - hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
  - hwdb: add missing Ettus Research B200 rule (RHEL-72702)
  - hwdb: add LimeSDR XTRX devices (RHEL-72702)
  - hwdb: add HydraSDR RFOne (RHEL-72702)
  - hwdb: add SDRplay devices (RHEL-72702)
  - hwdb: update (RHEL-72702)
  - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
  - Add Nulea M501 trackball to hwdb (RHEL-72702)
  - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
  - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
  - remove bonus line (RHEL-72702)
  - hwdb: drop trailing whitespace (RHEL-72702)
  - remove Nulea M501 usb entry from hwdb (RHEL-72702)
  - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702)
  - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702)
  - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702)
  - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702)
  - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702)
  - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702)
  - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702)
  - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702)
  - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702)
  - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702)
  - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702)
  - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702)
  - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702)
  - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702)
  - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702)
  - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702)
  - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702)
  - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702)
  - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702)
  - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702)
  - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702)
  - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702)
  - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702)
  - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702)
  - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard   device as set 1 (appears as raw set 2) or as set 2 (appears as   translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for   posterity. (RHEL-72702)
  - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702)
  - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702)
  - hwdb: keyboard: uppercase apple id (RHEL-72702)
  - integritysetup: Add support for hmac-sha512 (RHEL-27852)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852)
  - core: increment start limit counter only when we can start the unit (RHEL-115032)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032)
  - test: extend start limit interval (RHEL-115032)
  - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029)
  - man: fix typo (RHEL-143029)
  - test: fix test with -Dnetworkd=false (RHEL-143029)
  - ci: run apt-get update before running mkosi (RHEL-115001)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-23
changelog:
  - test-journal-dump: dump the headers of journal files (RHEL-106795)
  - journal: store counts, not byte sizes, in table size constants (RHEL-106795)
  - journal: treble field hash table size (RHEL-106795)
  - nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
  - user-classification: add new "foreign" UID range (RHEL-143036)
  - userdb: synthesize stub user records for the foreign UID (RHEL-143036)
  - dissect: add new --shift command (RHEL-143036)
  - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
  - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
  - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
  - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
  - sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
  - user-record: add helper for dispatching a disposition mask (RHEL-143036)
  - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036)
  - user-record: add some helpers for working with UserDBMatch (RHEL-143036)
  - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
  - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
  - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
  - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
  - update TODO (RHEL-143036)
  - JSON User/Group records: Add properties for UUIDs (RHEL-143036)
  - userdb: add support for printing the UUID from user and group records (RHEL-143036)
  - userdb: add support for looking up users or groups by uuid. (RHEL-143036)
  - userdbctl: add --uuid filtering option (RHEL-143036)
  - userdbctl: add missing --uuid= to --help text (RHEL-143036)
  - userdb: fix typo (RHEL-143036)
  - man/userdbctl: fixup version info (RHEL-143036)
  - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
  - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
  - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
  - logind: support deserializing session leader through pidfdid (RHEL-53112)
  - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
  - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
  - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219)
  - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-24
changelog:
  - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-155454)
  - ci: add bpftool workaround to codeql job too (RHEL-155454)
  - ci: fix workaround about bpftool for codeql (RHEL-155454)
  - ci: add bpftool workaround to coverity too (RHEL-155454)
  - Revert "man: mention RHEL documentation in systemctl's man page" (RHEL-155805)
  - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-155396)
  - cgroup: port some code over to path_startswith_full() (RHEL-155396)
  - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-155396)
  - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-155396)
  - core/cgroup: avoid one unnecessary strjoina() (RHEL-155396)
  - core: validate input cgroup path more prudently (RHEL-155396)
  - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-158303)
  - nspawn: normalize pivot_root paths (RHEL-158303)
  - udev: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-158354)
  - udev: ensure tag parsing stays within bounds (RHEL-158354)
  - udev: fix review mixup (RHEL-158354)
  - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev-builtin-net-id: print cescaped bad attributes (RHEL-158354)
  - core: only activate transaction that contain useful jobs (RHEL-143728)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-168098)
  - string-util: introduce strprepend() helper (RHEL-143028)
  - missing: add quotactl_fd() wrapper (RHEL-143028)
  - homed: always use quotactl_fd() if its available (RHEL-143028)
  - pid1: add GracefulOptions= setting to .mount units (RHEL-143028)
  - pid1: enable usrquota support on /dev/shm (RHEL-143028)
  - units: enable usrquota support on /tmp/ (RHEL-143028)
  - nspawn: enable usrquota support on /tmp/ and /dev/shm/ (RHEL-143028)
  - nspawn: downgrade log message about usrquota to debug (RHEL-143028)
  - mount-setup: drop outdated comment (RHEL-143028)
  - mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too (RHEL-143028)
  - devnum-util: add macros to safely convert dev_t to pointers and back (RHEL-143028)
  - user-record: add fields for setting limits on /tmp/ and /dev/shm/ (RHEL-143028)
  - user-runtime-dir: some smaller modernizations/refactorings (RHEL-143028)
  - user-runtime-dir: enforce /tmp/ and /dev/shm/ quota (RHEL-143028)
  - homectl: add support for configuring tmpfs limits (RHEL-143028)
  - test: add test case for tmpfs quota logic + PAMName= ask-password logic (RHEL-143028)
  - update TODO (RHEL-143028)
  - core/dbus-service: fix alignment (RHEL-143028)
  - core/mount: filter out "fail" option as well (RHEL-143028)
  - core/mount: check parameters_fragment first in mount_enter_(re)mounting() (RHEL-143028)
  - core/mount: report accurate can_start and can_reload (RHEL-143028)
  - core/mount: trivial coding style cleanups (RHEL-143028)
  - core/dbus-mount: add missing ReloadResult and CleanResult properties (RHEL-143028)
  - bus-unit-util: add missing assertions (RHEL-143028)
  - core/mount: rework GracefulOptions= to be just x-systemd.graceful-option= (RHEL-143028)
  - mountpoint-util: assume fsopen() works in mount_option_supported() (RHEL-143028)
  - core/mount: log only once about fs not supporting new mount API (RHEL-143028)
  - user-runtime-dir: correct quota size calculation (RHEL-143028)
  - test-display-quota: add a little helper binary to show quota on tmpfs (RHEL-143028)
  - TEST-46-HOMED: check for support on /dev/shm and /tmp separately (RHEL-143028)
  - TEST-46-HOMED: conditionally skip usrquota tests (RHEL-143028)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-25
changelog:
  - core: cleanup unit's dropin directories from global cache (RHEL-171097)
  - libsystemd: drop "const" decorators on public inline functions (RHEL-155454)
  - sd-id128: Drop _sd_const_ from sd_id128_in_setv() (RHEL-155454)
  - test: wrap mount/umount when running with sanitizers (RHEL-155454)
  - test: wrap even more binaries when running with sanitizers (RHEL-155454)
  - test: temporarily ignore sanitizer warning about blocked ptrace() (RHEL-155454)
  - test: slightly reduce the performance/memory overhead for wrapped binaries (RHEL-155454)
  - fstab-generator: support swap on network block devices (RHEL-128058)
  - man: add tags for the next few versions (RHEL-128058)
  - test: drop some extraneous whitespaces (RHEL-155021)
  - shared: fix segfault when processing matchHostname field (RHEL-155021)
  - shared: don't exclude valid min/max values for cgroup weight fields (RHEL-155021)
  - shared: don't leak memory from array fields (RHEL-155021)
  - man: fix short option for userdbctl's --from-file= (RHEL-155021)
  - fuzz: add a fuzzer for user records (RHEL-155021)
  - user-record: extract user_record_image_is_blockdev() common helper (RHEL-155021)
  - udev/net_id: introduce naming scheme for RHEL-9.9 (RHEL-72814)
  - udev/net_id: introduce naming scheme for RHEL-10.3 (RHEL-72814)
  - Tag accel devices for uaccess-render (RHEL-153030)
  - udev: tag kfd devices for xaccess-render (#40888) (RHEL-153030)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Kate Hsuan <hpa@redhat.com> - 2.5.10-1
changelog:
  - Update to the upstream version 2.5.10
  - Update to 2.5.10 the commits 3144beaf22c4a (Update Panther Lake sysfs
    paths) be2049afdee80 (Add Panther Lake to the supported list)
    03b4a139388f6 (Check for target code ITMT3) were included in the 2.5.10
    release.
  - Include commits c921e802f6e49 (Compile issue on i586 for time_t print)
    352125763b8f9 (itmt3 support) to enable itmt3 support.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Tomas Popela <tpopela@redhat.com> - 3.7.4-1
changelog:
  - Update to 3.7.4 and sync the macro naming with Fedora
    Resolves: RHEL-71387
  - Drop references to non-existent tracker-extract-3.service
    Resolves: RHEL-70242


author: Benson Muite <benson_muite@emailplus.org> - 1.13.1-3
changelog:
  - Fix type declaration error
  - Fix to enable use of GCC 13
  - Use SPDX license identifier
  - Fix build requires #RBZ2166925


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - selinux: comply with with the "Unify bin and sbin" change
    Resolves: RHEL-113206
  - Restore permissions of the log directory
    Resolves: RHEL-92260


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later
  - Clarify License of valgrind-scripts.


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-4
changelog:
  - Add VALGRIND_3_26_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
    - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
    - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
    - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
    - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
    - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch
    - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
    - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.1.6-1
changelog:
  - Rebase to version 8.1
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689
  - add sub-package for rdma module
  - use patch for configuration changes
  - add /etc/valkey/modules drop-in directory for module configuration files
  - add %valkey_version and %valkey_modules_cfg macros
  - fix module linker flags using patch from
    https://github.com/valkey-io/valkey/pull/3344


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-10
changelog:
  - Resolves: RHEL-159617 vim: Vim: Arbitrary code execution via command injection
    in glob() function


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-11
changelog:
  - RHEL-170124 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
    via path traversal bypass


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-5
changelog:
  - RHEL patches:
    * Select correct qemu binary for -o qemu mode
    * Disable the --qemu-boot / -oo qemu-boot option
    * Fix list of supported sound cards to match RHEL qemu
    * Fixes for libguestfs-winsupport
    * -i disk: force VNC as display
    * point to KB for supported v2v hypervisors/guests
    * Remove -o glance
    * Remove the --in-place option
    * tests: Remove btrfs test
    * Remove --block-driver option
  - Remove input from Xen
    resolves: RHEL-37687
  - Remove -o rhv, -o rhv-upload and -o vdsm modes
    resolves: RHEL-36712


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-78505
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-78657


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-9
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313
  - Remove virt-v2v -io vddk-noextents=true option
    resolves: RHEL-102619
  - Add -o kubevirt -oo disk and -oo create options
    resolves: RHEL-101599
  - Fix escaping of nbdkit-vddk-plugin export parameter
    resolves: RHEL-102734
  - Fix installation of drivers on firstboot with pending reboots
    resolves: RHEL-103356
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104018
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109130
  - Set boot order for Linux guests based on grub location
    resolves: RHEL-108991


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-3
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove cache=none
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938
  - Expose XFS version in virt-v2v-inspector
    resolves: RHEL-144075


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-4
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938
  - Expose XFS version in virt-v2v-inspector
    resolves: RHEL-144075
  - Fix Debian 12 UEFI conversions
    resolves: RHEL-144467
  - Fix import when datastore name has characters like '+'
    resolves: RHEL-133729


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-5
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938
  - Expose XFS version in virt-v2v-inspector
    resolves: RHEL-144075
  - Fix Debian 12 UEFI conversions
    resolves: RHEL-144467
  - Fix import when datastore name has characters like '+'
    resolves: RHEL-133729
  - Replace /etc/crypttab /dev/sdX with UUID
    resolves: RHEL-93583
  - Replace '/' in output name with '_'
    resolves: RHEL-136479


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.8-1
changelog:
  - Rebase to virt-v2v 2.11.8
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-97010]
  - Resolves: RHEL-97010
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-1
changelog:
  - Rebase to 1.13.3 [RHEL-133034]
  - Resolves: RHEL-133034
    (Rebase virtiofsd to latest version for RHEL 10.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-2
changelog:
  - Fixing README file [RHEL-169757]
  - Resolves: RHEL-169757
    (Fix the README file: --announce-submounts is enabled by default)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Neal Gompa <ngompa@centosproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races
    Resolves: RHEL-79119
  - Fix minor spec formatting inconsistencies


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-3
changelog:
  - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
    Resolves: https://redhat.atlassian.net/browse/RHEL-169759


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-4
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163190
    Resolves: https://redhat.atlassian.net/browse/RHEL-163286
    Resolves: https://redhat.atlassian.net/browse/RHEL-163244


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


