# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-209.el10]
changelog:
  - wifi: mt76: mt7925: disable auto regd changes after user set (Jose Ignacio Tornos Martinez) [RHEL-129847]
  - wifi: mt76: mt7925: add auto regdomain switch support (Jose Ignacio Tornos Martinez) [RHEL-129847]
  - wifi: mt76: mt7925: improve EHT capability control in regulatory flow (Jose Ignacio Tornos Martinez) [RHEL-129847]
  - wifi: mt76: mt7925: refactor regulatory notifier flow (Jose Ignacio Tornos Martinez) [RHEL-129847]
  - wifi: mt76: mt7925: refactor CLC support check flow (Jose Ignacio Tornos Martinez) [RHEL-129847]
  - wifi: mt76: mt7925: refactor regulatory domain handling to regd.[ch] (Jose Ignacio Tornos Martinez) [RHEL-129847]
  - redhat: enabled configs for amd isp platform for x86 (Krzysztof Pawlinski) [RHEL-124085]
  - platform/x86: Update swnode graph for amd isp4 (Krzysztof Pawlinski) [RHEL-124085]
  - platform/x86: Use i2c adapter name to fix build errors (Krzysztof Pawlinski) [RHEL-124085]
  - platform/x86: Add AMD ISP platform config for OV05C10 (Krzysztof Pawlinski) [RHEL-124085]
  - redhat: enabled configs for amd isp on x86 (Krzysztof Pawlinski) [RHEL-124084]
  - i2c: I2C_DESIGNWARE_AMDISP should depend on DRM_AMD_ISP (Krzysztof Pawlinski) [RHEL-124084]
  - i2c: amd-isp: Initialize unique adapter name (Krzysztof Pawlinski) [RHEL-124084]
  - i2c: designware: Initialize adapter name only when not set (Krzysztof Pawlinski) [RHEL-124084]
  - i2c: amd-isp: Add ISP i2c-designware driver (Krzysztof Pawlinski) [RHEL-124084]
  - ALSA: update RHEL kconfigs for SoundWire upstream code (Jaroslav Kysela) [RHEL-85740]
  - ASoC: sdw_utils: add name_prefix for rt1321 part id (Jaroslav Kysela) [RHEL-85740]
  - ASoC: tas2783: Fix build for SoundWire API update (Jaroslav Kysela) [RHEL-85740]
  - regmap: sdw-mbq: Don't assume the regmap device is the SoundWire slave (Jaroslav Kysela) [RHEL-85740]
  - soundwire: bus: fix off-by-one when allocating slave IDs (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: pcm: Set the PCM device name for HDMI (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add NO_DIRECT_COMPLETE flag to class driver (Jaroslav Kysela) [RHEL-85740]
  - ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type (Jaroslav Kysela) [RHEL-85740]
  - ASoC: soc-acpi-intel-ptl-match: fix name_prefix of rt1320-2 (Jaroslav Kysela) [RHEL-85740]
  - ASoC: sof_sdw: Add a quirk for Lenovo laptop using sidecar amps with cs42l43 (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56-test: Fix missing module namespace import (Jaroslav Kysela) [RHEL-85740]
  - soundwire: Add missing EXPORT for sdw_slave_type (Jaroslav Kysela) [RHEL-85740]
  - ASoC: sdw_utils: remove dai registered check (Jaroslav Kysela) [RHEL-85740]
  - ASoC: sdw_utils: Call init callbacks on the correct codec DAI (Jaroslav Kysela) [RHEL-85740]
  - ASoC: soc_sdw_utils: drop bogus container_of() error handling (Jaroslav Kysela) [RHEL-85740]
  - ASoC: intel: sof_sdw: Add codec_info for cs42l45 (Jaroslav Kysela) [RHEL-85740]
  - ASoC: sdw_utils: Move codec_name to dai info (Jaroslav Kysela) [RHEL-85740]
  - ASoC: sdw_utils: soc_sdw_utils: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-85740]
  - ASoC: soc_sdw_utils: add cs35l57 support (Jaroslav Kysela) [RHEL-85740]
  - ASoC: tas2783A: sdw_utils: support ch 3 & 4 (Jaroslav Kysela) [RHEL-85740]
  - ASoC: sdw_utils: Add cs42l45 support functions (Jaroslav Kysela) [RHEL-85740]
  - ASoC: sdw_utils: subtract the endpoint that is not present (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Fix incorrect select SND_SOC_CS35L56_CAL_SYSFS_COMMON (Jaroslav Kysela) [RHEL-85740]
  - ASoC: soc.h: Add SND_SOC_BYTES_E_ACC() to allow setting access flags (Jaroslav Kysela) [RHEL-85740]
  - ASoC: soc.h: Add SOC_ENUM_EXT_ACC() to allow setting access flags (Jaroslav Kysela) [RHEL-85740]
  - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) (Jaroslav Kysela) [RHEL-85740]
  - ASoC: soc-acpi-intel-ptl-match: use aggregated endpoint in ptl_rt722_l0_rt1320_l23 (Jaroslav Kysela) [RHEL-85740]
  - ASoC: Intel: soc-acpi-ptl-match: add cs42l43_agg_l3_cs35l56_2 support (Jaroslav Kysela) [RHEL-85740]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Add support for rt722_l0_rt1320_l23 (Jaroslav Kysela) [RHEL-85740]
  - ASoC: Intel: soc-acpi-intel-mtl-match: Add 6 amp CS35L63 with feedback (Jaroslav Kysela) [RHEL-85740]
  - ASoC: Intel: soc-acpi-intel-mtl-match: Add 6 amp CS35L56 with feedback (Jaroslav Kysela) [RHEL-85740]
  - ASoc: tas2783A: acpi match for 4 channel for mtl (Jaroslav Kysela) [RHEL-85740]
  - ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to aggregated (Jaroslav Kysela) [RHEL-85740]
  - ASoC: Intel: sof_sdw: shift SSP BT mask bits. (Jaroslav Kysela) [RHEL-85740]
  - ASoC: intel: sof_sdw: Add ability to have auxiliary devices (Jaroslav Kysela) [RHEL-85740]
  - ASoC: sdw_utils: Add codec_conf for every DAI (Jaroslav Kysela) [RHEL-85740]
  - ASoC: Intel: sof_sdw: add codec speaker support for the SKU (Jaroslav Kysela) [RHEL-85740]
  - ASoC: Intel: sof_sdw: create BT dai link if bt_link_mask is set (Jaroslav Kysela) [RHEL-85740]
  - ASOC: Intel: sof_sdw: add quirk for Avell B.ON (OEM rebranded NUC15) (Jaroslav Kysela) [RHEL-85740]
  - ASoC: Intel: sof_sdw: Add quirk to exclude RT722 speaker (Jaroslav Kysela) [RHEL-85740]
  - ASoC: Intel: boards: fix HDMI playback lookup when HDMI-In capture used (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: topology: Add context when sink or source widget is missing (Jaroslav Kysela) [RHEL-85740]
  - ASoC: soc-acpi / SOF: Add best_effort flag to get_function_tplg_files op (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: ipc4-topology: set playback channel mask (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: ipc4-control: Keep the payload size up to date (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: ipc4-control: If there is no data do not send bytes update (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: Intel: pci-mtl: Change the topology path to intel/sof-ipc4-tplg (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: Intel: hda: Only check SSP MCLK mask in case of IPC3 (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: mock_bin: Add function to create long-offset patches (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: mock_bin: Pass offset32 to cs_dsp_mock_bin_add_raw_block() (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: Handle long-offset data blocks (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: Remove __free() from cs_dsp_debugfs_string_read() (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: Don't use __free() in cs_dsp_load() and cs_dsp_load_coeff() (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: Don't require client to provide a struct cs_dsp_client_ops (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: Take pwr_lock around reading controls debugfs (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: Use kvzalloc() to allocate control caches (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: Remove redundant download buffer allocator (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: Store control length as 32-bit (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: Append \n to debugfs string during read (Jaroslav Kysela) [RHEL-85740]
  - firmware: cs_dsp: Factor out common debugfs string read (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Add KUnit testing of cs35l56_set_fw_suffix() (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Use vendor-specific qualifier in firmware file search (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Log a message if firmware is missing (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Use SND_SOC_BYTES_E_ACC() for CAL_DATA_RB control (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Use SOC_ENUM_EXT_ACC() for CAL_SET_STATUS control (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Allow restoring factory calibration through ALSA control (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Create debugfs files for factory calibration (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Add control to read CAL_SET_STATUS (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Alter error codes for calibration routine (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Add calibration command to store into UEFI (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Add common code for factory calibration (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs35l56: Read silicon ID during initialization and save it (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs-amp-lib: Replace __free(kfree) with normal kfree() cleanup (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs-amp-lib: Add a Kconfig symbol for enabling test hooks (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs-amp-lib: Support Dell SSIDExV2 UEFI variable (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs-amp-lib: Add function to write calibration to UEFI (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs-amp-lib-test: Tests for reading SSIDExV2 (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs-amp-lib-test: Add test cases for cs_amp_set_efi_calibration_data() (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs-amp-lib: Return attributes from cs_amp_get_efi_variable() (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs-amp-lib: Add helpers for factory calibration (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs-amp-lib: Remove redundant calls to kunit_deactivate_static_stub() (Jaroslav Kysela) [RHEL-85740]
  - ASoC: cs-amp-lib-test: Add cases for factory calibration helpers (Jaroslav Kysela) [RHEL-85740]
  - ACPICA: Add SoundWire File Table (SWFT) signature (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: functions: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Move most of the messages from info to debug (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Fix NULL vs IS_ERR() bug in sdca_dev_register_functions() (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Correct FDL locking in sdca_fdl_process() (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add companion amp Function (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Parse XU Entity properties (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add stubs for FDL helper functions (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add UMP timeout handling for FDL (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add completion for FDL start and stop (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add helper to write initialization writes (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Populate regmap cache for readable Controls (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Factor out helper to process Control defaults (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Force some SDCA Controls to be volatile (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add comment for function reset polling (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Allow sample width wild cards in set_usage() (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add terminal type into input/output widget name (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Align mute controls to ALSA expectations (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Fixup some more Kconfig issues (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add ASoC jack hookup in class driver (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add ability to connect SDCA jacks to ASoC jacks (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Factor out jack handling into new c file (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: add function devices (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add missing forward declaration in header (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add SDCA FDL data parsing (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Parse Function Reset max delay (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add lock to serialise the Function initialisation (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Device boot into the system suspend process (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add basic system suspend support (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add SDCA IRQ enable/disable helpers (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Use helper macros for control identification (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add HID button IRQ (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Pass SoundWire slave to HID (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add early IRQ handling (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add FDL-specific IRQ processing (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Rely less on the ASoC component in IRQ handling (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Factor out a helper to find SDCA IRQ data (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Update externally_requested flag to cover all requests (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Pass device register map from IRQ alloc to handlers (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add manual PM runtime gets to IRQ handlers (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Rename SoundWire struct device variables (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add basic SDCA function driver (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add basic SDCA class driver (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add FDL library for XU entities (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SDCA: Add UMP buffer helper functions (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: Intel: remove hyphen from AMP<index> name_prexix (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: Intel: add hyphen between name and index to amp name_prefix (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: don't check the existence of dummy topology (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: Don't print the monolithic topology name if function topology may be used (Jaroslav Kysela) [RHEL-85740]
  - ASoC: soc-acpi: make some variables of acpi adr and link adr non-const (Jaroslav Kysela) [RHEL-85740]
  - ASoC: soc_sdw_utils: add name_prefix to asoc_sdw_codec_info struct (Jaroslav Kysela) [RHEL-85740]
  - ASoC: Intel: export sof_sdw_get_tplg_files (Jaroslav Kysela) [RHEL-85740]
  - ASoC: soc_sdw_utils: export asoc_sdw_get_dai_type (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: add platform name into sof_intel_dsp_desc (Jaroslav Kysela) [RHEL-85740]
  - ASoC: SOF: Intel: use sof_sdw as default SDW machine driver (Jaroslav Kysela) [RHEL-85740]
  - ASoC: sof-function-topology-lib: escalate the log when missing function topoplogy (Jaroslav Kysela) [RHEL-85740]
  - r8169: fix RTL8117 Wake-on-Lan in DASH mode (Izabela Bakollari) [RHEL-96436]
  - r8169: improve MAC EEE handling (Izabela Bakollari) [RHEL-96436]
  - r8169: add support for RTL9151A (Izabela Bakollari) [RHEL-96436]
  - r8169: bail out from probe if fiber mode is detected on RTL8127AF (Izabela Bakollari) [RHEL-96436]
  - r8169: add support for RTL8125K (Izabela Bakollari) [RHEL-96436]
  - r8169: reconfigure rx unconditionally before chip reset when resuming (Izabela Bakollari) [RHEL-96436]
  - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP (Izabela Bakollari) [RHEL-96436]
  - r8169: enable EEE at 5Gbps on RTL8126 (Izabela Bakollari) [RHEL-96436]
  - r8169: fix RTL8127 hang on suspend/shutdown (Izabela Bakollari) [RHEL-96436]
  - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H (Izabela Bakollari) [RHEL-96436]
  - r8169: set EEE speed down ratio to 1 (Izabela Bakollari) [RHEL-96436]
  - r8169: log that system vendor flags ASPM as safe (Izabela Bakollari) [RHEL-96436]
  - r8169: remove redundant pci_tbl entry (Izabela Bakollari) [RHEL-96436]
  - r8169: add support for RTL8127A (Izabela Bakollari) [RHEL-96436]
  - r8169: merge chip versions 52 and 53 (RTL8117) (Izabela Bakollari) [RHEL-96436]
  - r8169: merge chip versions 64 and 65 (RTL8125D) (Izabela Bakollari) [RHEL-96436]
  - r8169: merge chip versions 70 and 71 (RTL8126A) (Izabela Bakollari) [RHEL-96436]
  - r8169: refactor chip version detection (Izabela Bakollari) [RHEL-96436]
  - r8169: use pci_prepare_to_sleep in rtl_shutdown (Izabela Bakollari) [RHEL-96436]
  - r8169: add RTL_GIGA_MAC_VER_LAST to facilitate adding support for new chip versions (Izabela Bakollari) [RHEL-96436]
  - r8169: add helper rtl8125_phy_param (Izabela Bakollari) [RHEL-96436]
  - r8169: add helper rtl_csi_mod for accessing extended config space (Izabela Bakollari) [RHEL-96436]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-210.el10]
changelog:
  - gpio: tegra186: Fix GPIO name collisions for Tegra410 (Jennifer Berringer) [RHEL-135122]
  - gpio: tegra186: Add support for Tegra410 (Jennifer Berringer) [RHEL-135122]
  - gpio: tegra186: Use generic macro for port definitions (Jennifer Berringer) [RHEL-135122]
  - gpio: tegra186: Add support for Tegra256 (Jennifer Berringer) [RHEL-135122]
  - dt-bindings: gpio: Add Tegra256 support (Jennifer Berringer) [RHEL-135122]
  - gpio: tegra186: fix resource handling in ACPI probe path (Jennifer Berringer) [RHEL-135122]
  - perf/arm_cspmu: nvidia: Add pmevfiltr2 support (Charles Mirabile) [RHEL-121677]
  - perf/arm_cspmu: nvidia: Add revision id matching (Charles Mirabile) [RHEL-121677]
  - perf/arm_cspmu: Add pmpidr support (Charles Mirabile) [RHEL-121677]
  - perf/arm_cspmu: Add callback to reset filter config (Charles Mirabile) [RHEL-121677]
  - tools headers arm64: Add NVIDIA Olympus part (Charles Mirabile) [RHEL-138474]
  - perf arm-spe: Add NVIDIA Olympus to neoverse list (Charles Mirabile) [RHEL-138474]
  - bpf: Fix bpf_xdp_store_bytes proto for read-only arg (Felix Maurer) [RHEL-133468]
  - bpf: Fix invalid prog->stats access when update_effective_progs fails (Felix Maurer) [RHEL-133468]
  - bpf/arm64: Fix BPF_ST into arena memory (Felix Maurer) [RHEL-133468]
  - xsk: Harden userspace-supplied xdp_desc validation (Felix Maurer) [RHEL-133468]
  - bpf, cpumap: Disable page_pool direct xdp_return need larger scope (Felix Maurer) [RHEL-133468]
  - bpf, sockmap: Fix panic when calling skb_linearize (Felix Maurer) [RHEL-133468]
  - bpf, sockmap: fix duplicated data transmission (Felix Maurer) [RHEL-133468]
  - xsk: Fix race condition in AF_XDP generic RX path (Felix Maurer) [RHEL-133468]
  - macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144130] {CVE-2026-23001}
  - soc/tegra: fuse: Do not register SoC device on ACPI boot (Jennifer Berringer) [RHEL-135124]
  - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-136089]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.el10]
changelog:
  - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-150361]
  - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-150361]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-212.el10]
changelog:
  - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-150776]
  - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-150776]
  - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-150776]
  - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-150776]
  - redhat: bump RHEL_MINOR for 10.3 (Alexandra Hájková)
  - net: use NUMA drop counters for softnet_data.dropped (Guillaume Nault) [RHEL-145975]
  - inet: raw: add drop_counters to raw sockets (Guillaume Nault) [RHEL-145975]
  - udp: add drop_counters to udp socket (Guillaume Nault) [RHEL-145975]
  - net: add sk->sk_drop_counters (Guillaume Nault) [RHEL-145975]
  - net: add sk_drops_skbadd() helper (Guillaume Nault) [RHEL-145975]
  - net: add sk_drops_read(), sk_drops_inc() and sk_drops_reset() helpers (Guillaume Nault) [RHEL-145975]
  - NFSD: Fix permission check for read access to executable-only files (Scott Mayhew) [RHEL-135095]
  - fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio (Audra Mitchell) [RHEL-97168]
  - configs: riscv: Enable StarFive and ESWIN drivers (Jennifer Berringer) [RHEL-129062]
  - riscv: Fix memory leak in module_frob_arch_sections() (Jennifer Berringer) [RHEL-129062]
  - reset: eswin: Add eic7700 reset driver (Jennifer Berringer) [RHEL-129062]
  - dt-bindings: reset: eswin: Documentation for eic7700 SoC (Jennifer Berringer) [RHEL-129062]
  - riscv: dts: eswin: add HiFive Premier P550 board device tree (Jennifer Berringer) [RHEL-129062]
  - riscv: dts: add initial support for EIC7700 SoC (Jennifer Berringer) [RHEL-129062]
  - dt-bindings: riscv: Add SiFive HiFive Premier P550 board (Jennifer Berringer) [RHEL-129062]
  - riscv: Add Kconfig option for ESWIN platforms (Jennifer Berringer) [RHEL-129062]
  - riscv: add Andes SoC family Kconfig support (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Fix regulator error check and Kconfig dependency (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Fix unsigned comparison to less than zero issue (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Add EIC7700 pinctrl driver (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Optimize PLT/GOT entry counting (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Allocate PLT entries for R_RISCV_PLT32 (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Fix out-of-bounds relocation access (Jennifer Berringer) [RHEL-129062] {CVE-2025-37975}
  - cache: sifive_ccache: Add ESWIN EIC7700 support (Jennifer Berringer) [RHEL-129062]


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-213.el10]
changelog:
  - powerpc/smp: Expose die_id and die_cpumask (Mamatha Inamdar) [RHEL-138728]
  - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-151838]
  - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-151838]
  - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-153335]
  - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Jared Kangas) [RHEL-152643]
  - arm64: dts: s32g: Add device tree information for the OCOTP driver (Jared Kangas) [RHEL-152643]
  - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Jared Kangas) [RHEL-152643]
  - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Jared Kangas) [RHEL-152643]
  - redhat/scripts: remove remnants of git notes usage and dead code (Jan Stancek)
  - vsock: document write-once behavior of the child_ns_mode sysctl (Stefano Garzarella) [RHEL-151754]
  - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-151754]
  - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-151754]
  - vsock: document namespace mode sysctls (Stefano Garzarella) [RHEL-151754]
  - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148483]
  - ice: dpll: fix rclk pin state get and misplaced header macros (Ivan Vecera) [RHEL-146369]
  - ice: dpll: Support E825-C SyncE and dynamic pin discovery (Ivan Vecera) [RHEL-146369]
  - drivers: Add support for DPLL reference count tracking (Ivan Vecera) [RHEL-146369]
  - redhat: configs: Enable CONFIG_DPLL_REFCNT_TRACKER for debug (Ivan Vecera) [RHEL-146369]
  - dpll: Add reference count tracking support (Ivan Vecera) [RHEL-146369]
  - dpll: Enhance and consolidate reference counting logic (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Add support for mux pin type (Ivan Vecera) [RHEL-146369]
  - dpll: Support dynamic pin index allocation (Ivan Vecera) [RHEL-146369]
  - dpll: Add notifier chain for dpll events (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Associate pin with fwnode handle (Ivan Vecera) [RHEL-146369]
  - dpll: Allow associating dpll pin with a firmware node (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-146257]
  - redhat: set defaults for RHEL 10.2 (Scott Weaver)


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-214.el10]
changelog:
  - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618]
  - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618]
  - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618]
  - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618]
  - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618]
  - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674]
  - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134674]
  - vdpa/mlx5: update MAC address handling in mlx5_vdpa_set_attr() (Cindy Lu) [RHEL-127007]
  - vdpa/mlx5: reuse common function for MAC address updates (Cindy Lu) [RHEL-127007]
  - vdpa/mlx5: update mlx_features with driver state check (Cindy Lu) [RHEL-127007]
  - redhat/configs: enable CONFIG_AQTION on all archs (Michal Schmidt) [RHEL-150852]
  - mm/migrate: fix sleep in atomic for large folios and buffer heads (Ming Lei) [RHEL-144763]
  - fs/ext4: use sleeping version of sb_find_get_block() (Ming Lei) [RHEL-144763]
  - fs/jbd2: use sleeping version of __find_get_block() (Ming Lei) [RHEL-144763]
  - fs/ocfs2: use sleeping version of __find_get_block() (Ming Lei) [RHEL-144763]
  - fs/buffer: use sleeping version of __find_get_block() (Ming Lei) [RHEL-144763]
  - fs/buffer: introduce sleeping flavors for pagecache lookups (Ming Lei) [RHEL-144763]
  - fs/buffer: split locking for pagecache lookups (Ming Lei) [RHEL-144763]
  - fscrypt: fix left shift underflow when inode->i_blkbits > PAGE_SHIFT (Ming Lei) [RHEL-144763]
  - block: reject bs > ps block devices when THP is disabled (Ming Lei) [RHEL-144763]
  - md: init queue_limits->max_hw_wzeroes_unmap_sectors parameter (Ming Lei) [RHEL-144763]
  - block: don't silently ignore metadata for sync read/write (Ming Lei) [RHEL-144763]
  - bio: use memzero_page() in bio_truncate() (Ming Lei) [RHEL-144763]
  - drbd: init queue_limits->max_hw_wzeroes_unmap_sectors parameter (Ming Lei) [RHEL-144763]
  - ext4: add FALLOC_FL_WRITE_ZEROES support (Ming Lei) [RHEL-144763]
  - block: add FALLOC_FL_WRITE_ZEROES support (Ming Lei) [RHEL-144763]
  - block: factor out common part in blkdev_fallocate() (Ming Lei) [RHEL-144763]
  - fs: introduce FALLOC_FL_WRITE_ZEROES to fallocate (Ming Lei) [RHEL-144763]
  - dm: clear unmap write zeroes limits when disabling write zeroes (Ming Lei) [RHEL-144763]
  - scsi: sd: set max_hw_wzeroes_unmap_sectors if device supports SD_ZERO_*_UNMAP (Ming Lei) [RHEL-144763]
  - nvmet: set WZDS and DRB if device enables unmap write zeroes operation (Ming Lei) [RHEL-144763]
  - nvme: set max_hw_wzeroes_unmap_sectors if device supports DEAC bit (Ming Lei) [RHEL-144763]
  - block: introduce max_{hw|user}_wzeroes_unmap_sectors to queue limits (Ming Lei) [RHEL-144763]
  - ublk: use READ_ONCE() to read struct ublksrv_ctrl_cmd (Ming Lei) [RHEL-144763]
  - block: don't use strcpy to copy blockdev name (Ming Lei) [RHEL-144763]
  - block: allow IOC_PR_READ_* ioctls with BLK_OPEN_READ (Ming Lei) [RHEL-144763]
  - block: fix EOD return for device with nr_sectors == 0 (Ming Lei) [RHEL-144763]
  - block: change blk_get_meta_cap() stub return -ENOIOCTLCMD (Ming Lei) [RHEL-144763]
  - block: fix lbmd_guard_tag_type assignment in FS_IOC_GETLBMD_CAP (Ming Lei) [RHEL-144763]
  - block: fix FS_IOC_GETLBMD_CAP parsing in blkdev_common_ioctl() (Ming Lei) [RHEL-144763]
  - ata: libata-core: Quirk INTEL SSDSC2KG480G8 max_sectors (Ming Lei) [RHEL-144763]
  - ata: libata: Add libata.force parameter max_sec (Ming Lei) [RHEL-144763]
  - ata: libata: Add support to parse equal sign in libata.force (Ming Lei) [RHEL-144763]
  - ata: libata: Change libata.force to use the generic ATA_QUIRK_MAX_SEC quirk (Ming Lei) [RHEL-144763]
  - ata: libata: Add ata_force_get_fe_for_dev() helper (Ming Lei) [RHEL-144763]
  - ata: libata: Add ATA_QUIRK_MAX_SEC and convert all device quirks (Ming Lei) [RHEL-144763]
  - ata: libata-core: Quirk DELLBOSS VD max_sectors (Ming Lei) [RHEL-144763]
  - loop: revert exclusive opener loop status change (Ming Lei) [RHEL-144763]
  - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (Ming Lei) [RHEL-144763]
  - nvme-pci: handle changing device dma map requirements (Ming Lei) [RHEL-144763]
  - nvme-pci: DMA unmap the correct regions in nvme_free_sgls (Ming Lei) [RHEL-144763]
  - Revert "rnbd-clt: fix refcount underflow in device unmap path" (Ming Lei) [RHEL-144763]
  - blk-mq: use BLK_POLL_ONESHOT for synchronous poll completion (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix garbage output in foreground mode (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix error handling for starting device (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix IO thread idle check (Ming Lei) [RHEL-144763]
  - block: make the new blkzoned UAPI constants discoverable (Ming Lei) [RHEL-144763]
  - ublk: fix ublksrv pid handling for pid namespaces (Ming Lei) [RHEL-144763]
  - block: Fix an error path in disk_update_zone_resources() (Ming Lei) [RHEL-144763]
  - rnbd-clt: fix refcount underflow in device unmap path (Ming Lei) [RHEL-144763]
  - nvmet: do not copy beyond sybsysnqn string length (Ming Lei) [RHEL-144763]
  - null_blk: fix kmemleak by releasing references to fault configfs items (Ming Lei) [RHEL-144763]
  - block: zero non-PI portion of auto integrity buffer (Ming Lei) [RHEL-144763]
  - nvme-fc: release admin tagset if init fails (Ming Lei) [RHEL-144763]
  - nvme-pci: disable secondary temp for Wodposit WPBSNM8 (Ming Lei) [RHEL-144763]
  - ublk: fix use-after-free in ublk_partition_scan_work (Ming Lei) [RHEL-144763]
  - blk-mq: avoid stall during boot due to synchronize_rcu_expedited (Ming Lei) [RHEL-144763]
  - loop: add missing bd_abort_claiming in loop_set_status (Ming Lei) [RHEL-144763]
  - block: don't merge bios with different app_tags (Ming Lei) [RHEL-144763]
  - blk-rq-qos: Remove unlikely() hints from QoS checks (Ming Lei) [RHEL-144763]
  - loop: don't change loop device under exclusive opener in loop_set_status (Ming Lei) [RHEL-144763]
  - block, bfq: update outdated comment (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix Makefile to rebuild on header changes (Ming Lei) [RHEL-144763]
  - selftests/ublk: add test for async partition scan (Ming Lei) [RHEL-144763]
  - ublk: scan partition in async way (Ming Lei) [RHEL-144763]
  - block,bfq: fix aux stat accumulation destination (Ming Lei) [RHEL-144763]
  - block: rnbd-clt: Fix signedness bug in init_dev() (Ming Lei) [RHEL-144763]
  - ublk: clean up user copy references on ublk server exit (Ming Lei) [RHEL-144763]
  - block: validate interval_exp integrity limit (Ming Lei) [RHEL-144763]
  - block: validate pi_offset integrity limit (Ming Lei) [RHEL-144763]
  - block: rnbd-clt: Fix leaked ID in init_dev() (Ming Lei) [RHEL-144763]
  - ublk: fix deadlock when reading partition table (Ming Lei) [RHEL-144763]
  - block: add allocation size check in blkdev_pr_read_keys() (Ming Lei) [RHEL-144763]
  - Documentation: admin-guide: blockdev: replace zone_capacity with zone_capacity_mb when creating devices (Ming Lei) [RHEL-144763]
  - zloop: use READ_ONCE() to read lo->lo_state in queue_rq path (Ming Lei) [RHEL-144763]
  - loop: use READ_ONCE() to read lo->lo_state without locking (Ming Lei) [RHEL-144763]
  - selftests: ublk: add user copy test cases (Ming Lei) [RHEL-144763]
  - selftests: ublk: add support for user copy to kublk (Ming Lei) [RHEL-144763]
  - selftests: ublk: forbid multiple data copy modes (Ming Lei) [RHEL-144763]
  - selftests: ublk: don't share backing files between ublk servers (Ming Lei) [RHEL-144763]
  - selftests: ublk: use auto_zc for PER_IO_DAEMON tests in stress_04 (Ming Lei) [RHEL-144763]
  - selftests: ublk: fix fio arguments in run_io_and_recover() (Ming Lei) [RHEL-144763]
  - selftests: ublk: remove unused ios map in seq_io.bt (Ming Lei) [RHEL-144763]
  - selftests: ublk: correct last_rw map type in seq_io.bt (Ming Lei) [RHEL-144763]
  - selftests: ublk: fix overflow in ublk_queue_auto_zc_fallback() (Ming Lei) [RHEL-144763]
  - block: move around bio flagging helpers (Ming Lei) [RHEL-144763]
  - blk-mq-dma: always initialize dma state (Ming Lei) [RHEL-144763]
  - blk-mq: delete task running check in blk_hctx_poll() (Ming Lei) [RHEL-144763]
  - block: fix cached zone reports on devices with native zone append (Ming Lei) [RHEL-144763]
  - ublk: don't mutate struct bio_vec in iteration (Ming Lei) [RHEL-144763]
  - block: prohibit calls to bio_chain_endio (Ming Lei) [RHEL-144763]
  - ublk: allow non-blocking ctrl cmds in IO_URING_F_NONBLOCK issue (Ming Lei) [RHEL-144763]
  - nvme-fabrics: add ENOKEY to no retry criteria for authentication failures (Ming Lei) [RHEL-144763]
  - nvme-auth: use kvfree() for memory allocated with kvcalloc() (Ming Lei) [RHEL-144763]
  - nvmet-tcp: use kvcalloc for commands array (Ming Lei) [RHEL-144763]
  - nvmet-rdma: use kvcalloc for commands and responses arrays (Ming Lei) [RHEL-144763]
  - nvme: fix typo error in nvme target (Ming Lei) [RHEL-144763]
  - nvmet-fc: use pr_* print macros instead of dev_* (Ming Lei) [RHEL-144763]
  - nvmet-fcloop: remove unused lsdir member. (Ming Lei) [RHEL-144763]
  - nvmet-fcloop: check all request and response have been processed (Ming Lei) [RHEL-144763]
  - nvme-fc: check all request and response have been processed (Ming Lei) [RHEL-144763]
  - block: fix comment for op_is_zone_mgmt() to include RESET_ALL (Ming Lei) [RHEL-144763]
  - block: Clear BLK_ZONE_WPLUG_PLUGGED when aborting plugged BIOs (Ming Lei) [RHEL-144763]
  - blk-mq: add blk_rq_nr_bvec() helper (Ming Lei) [RHEL-144763]
  - block: add IOC_PR_READ_RESERVATION ioctl (Ming Lei) [RHEL-144763]
  - block: add IOC_PR_READ_KEYS ioctl (Ming Lei) [RHEL-144763]
  - nvme: reject invalid pr_read_keys() num_keys values (Ming Lei) [RHEL-144763]
  - scsi: sd: reject invalid pr_read_keys() num_keys values (Ming Lei) [RHEL-144763]
  - block: enable per-cpu bio cache by default (Ming Lei) [RHEL-144763]
  - block: use bio_alloc_bioset for passthru IO by default (Ming Lei) [RHEL-144763]
  - nvme-fc: don't hold rport lock when putting ctrl (Ming Lei) [RHEL-144763]
  - nvme-pci: add debug message on fail to read CSTS (Ming Lei) [RHEL-144763]
  - nvme-pci: print error message on failure in nvme_probe (Ming Lei) [RHEL-144763]
  - nvmet: pci-epf: fix DMA channel debug print (Ming Lei) [RHEL-144763]
  - nvmet: pci-epf: move DMA initialization to EPC init callback (Ming Lei) [RHEL-144763]
  - nvmet: remove redundant subsysnqn field from ctrl (Ming Lei) [RHEL-144763]
  - nvmet: add sanity checks when freeing subsystem (Ming Lei) [RHEL-144763]
  - block/rnbd: correct all kernel-doc complaints (Ming Lei) [RHEL-144763]
  - blk-mq: use queue_hctx in blk_mq_map_queue_type (Ming Lei) [RHEL-144763]
  - sbitmap: fix all kernel-doc warnings (Ming Lei) [RHEL-144763]
  - ublk: add helper of __ublk_fetch() (Ming Lei) [RHEL-144763]
  - ublk: pass const pointer to ublk_queue_is_zoned() (Ming Lei) [RHEL-144763]
  - ublk: refactor auto buffer register in ublk_dispatch_req() (Ming Lei) [RHEL-144763]
  - ublk: add `union ublk_io_buf` with improved naming (Ming Lei) [RHEL-144763]
  - ublk: add parameter `struct io_uring_cmd *` to ublk_prep_auto_buf_reg() (Ming Lei) [RHEL-144763]
  - kfifo: add kfifo_alloc_node() helper for NUMA awareness (Ming Lei) [RHEL-144763]
  - blk-mq: fix potential uaf for 'queue_hw_ctx' (Ming Lei) [RHEL-144763]
  - blk-mq: use array manage hctx map instead of xarray (Ming Lei) [RHEL-144763]
  - ublk: prevent invalid access with DEBUG (Ming Lei) [RHEL-144763]
  - s390/dasd: Use scnprintf() instead of sprintf() (Ming Lei) [RHEL-144763]
  - s390/dasd: Move device name formatting into separate function (Ming Lei) [RHEL-144763]
  - s390/dasd: Remove unnecessary debugfs_create() return checks (Ming Lei) [RHEL-144763]
  - s390/dasd: Fix gendisk parent after copy pair swap (Ming Lei) [RHEL-144763]
  - block: ignore __blkdev_issue_discard() return value (Ming Lei) [RHEL-144763]
  - block: fix typos in comments and strings in blk-core (Ming Lei) [RHEL-144763]
  - block: Remove references to __device_add_disk() (Ming Lei) [RHEL-144763]
  - Revert "Merge branch 'loop-aio-nowait' into for-6.19/block" (Ming Lei) [RHEL-144763]
  - block: use min() instead of min_t() (Ming Lei) [RHEL-144763]
  - zloop: clear nowait flag in workqueue context (Ming Lei) [RHEL-144763]
  - loop: clear nowait flag in workqueue context (Ming Lei) [RHEL-144763]
  - zloop: fix zone append check in zloop_rw() (Ming Lei) [RHEL-144763]
  - MAINTAINERS: add a maintainer for zoned block device support (Ming Lei) [RHEL-144763]
  - MAINTAINERS: add missing block layer user API header files (Ming Lei) [RHEL-144763]
  - block: remove the declaration of elevator_init_mq function (Ming Lei) [RHEL-144763]
  - Revert "block: consider discard merge last" (Ming Lei) [RHEL-144763]
  - fs: Add the __data_racy annotation to backing_dev_info.ra_pages (Ming Lei) [RHEL-144763]
  - block: plug attempts to batch allocate tags multiple times (Ming Lei) [RHEL-144763]
  - loop: add hint for handling aio via IOCB_NOWAIT (Ming Lei) [RHEL-144763]
  - loop: try to handle loop aio command via NOWAIT IO first (Ming Lei) [RHEL-144763]
  - loop: move command blkcg/memcg initialization into loop_queue_work (Ming Lei) [RHEL-144763]
  - loop: add lo_submit_rw_aio() (Ming Lei) [RHEL-144763]
  - loop: add helper lo_rw_aio_prep() (Ming Lei) [RHEL-144763]
  - loop: add helper lo_cmd_nr_bvec() (Ming Lei) [RHEL-144763]
  - drbd: turn bitmap I/O comments into regular block comments (Ming Lei) [RHEL-144763]
  - block: rate-limit capacity change info log (Ming Lei) [RHEL-144763]
  - Documentation: admin-guide: blockdev: update zloop parameters (Ming Lei) [RHEL-144763]
  - zloop: introduce the ordered_zone_append configuration parameter (Ming Lei) [RHEL-144763]
  - zloop: introduce the zone_append configuration parameter (Ming Lei) [RHEL-144763]
  - zloop: simplify checks for writes to sequential zones (Ming Lei) [RHEL-144763]
  - zloop: fail zone append operations that are targeting full zones (Ming Lei) [RHEL-144763]
  - zloop: make the write pointer of full zones invalid (Ming Lei) [RHEL-144763]
  - block/blk-throttle: Remove throtl_slice from struct throtl_data (Ming Lei) [RHEL-144763]
  - block/blk-throttle: drop unneeded blk_stat_enable_accounting (Ming Lei) [RHEL-144763]
  - block/blk-throttle: Fix throttle slice time for SSDs (Ming Lei) [RHEL-144763]
  - block: consider discard merge last (Ming Lei) [RHEL-144763]
  - floppy: fix for PAGE_SIZE != 4KB (Ming Lei) [RHEL-144763]
  - ps3disk: use memcpy_{from,to}_bvec index (Ming Lei) [RHEL-144763]
  - block-dma: properly take MMIO path (Ming Lei) [RHEL-144763]
  - nvme-pci: migrate to dma_map_phys instead of map_page (Ming Lei) [RHEL-144763]
  - block: define alloc_sched_data and free_sched_data methods for kyber (Ming Lei) [RHEL-144763]
  - block: use {alloc|free}_sched data methods (Ming Lei) [RHEL-144763]
  - block: introduce alloc_sched_data and free_sched_data elevator methods (Ming Lei) [RHEL-144763]
  - block: move elevator tags into struct elevator_resources (Ming Lei) [RHEL-144763]
  - block: unify elevator tags and type xarrays into struct elv_change_ctx (Ming Lei) [RHEL-144763]
  - dm: fix zone reset all operation processing (Ming Lei) [RHEL-144763]
  - block: fix NULL pointer dereference in disk_report_zones() (Ming Lei) [RHEL-144763]
  - block: fix NULL pointer dereference in blk_zone_reset_all_bio_endio() (Ming Lei) [RHEL-144763]
  - blk-zoned: Move code from disk_zone_wplug_add_bio() into its caller (Ming Lei) [RHEL-144763]
  - blk-zoned: Document disk_zone_wplug_schedule_bio_work() locking (Ming Lei) [RHEL-144763]
  - blk-zoned: Fix a typo in a source code comment (Ming Lei) [RHEL-144763]
  - null_blk: fix zone read length beyond write pointer (Ming Lei) [RHEL-144763]
  - blk-mq-dma: fix kernel-doc function name for integrity DMA iterator (Ming Lei) [RHEL-144763]
  - block: fix merging data-less bios (Ming Lei) [RHEL-144763]
  - ublk: return unsigned from ublk_{,un}map_io() (Ming Lei) [RHEL-144763]
  - ublk: remove unnecessary checks in ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - block: add lockdep to queue_limits_commit_update() (Ming Lei) [RHEL-144763]
  - nbd: defer config unlock in nbd_genl_connect (Ming Lei) [RHEL-144763]
  - block: clean up indentation in blk_rq_map_iter_init() (Ming Lei) [RHEL-144763]
  - nbd: defer config put in recv_work (Ming Lei) [RHEL-144763]
  - block: introduce bdev_zone_start() (Ming Lei) [RHEL-144763]
  - block: refactor disk_zone_wplug_sync_wp_offset() (Ming Lei) [RHEL-144763]
  - block: improve blk_zone_wp_offset() (Ming Lei) [RHEL-144763]
  - block: don't return 1 for the fallback case in blkdev_get_zone_info (Ming Lei) [RHEL-144763]
  - nvme: remove virtual boundary for sgl capable devices (Ming Lei) [RHEL-144763]
  - block: accumulate memory segment gaps per bio (Ming Lei) [RHEL-144763]
  - virtio_blk: NULL out vqs to avoid double free on failed resume (Ming Lei) [RHEL-144763]
  - null_blk: allow byte aligned memory offsets (Ming Lei) [RHEL-144763]
  - null_blk: single kmap per bio segment (Ming Lei) [RHEL-144763]
  - null_blk: use memzero_page() (Ming Lei) [RHEL-144763]
  - null_blk: consistently use blk_status_t (Ming Lei) [RHEL-144763]
  - null_blk: simplify copy_from_nullb (Ming Lei) [RHEL-144763]
  - ublk: use rq_for_each_segment() for user copy (Ming Lei) [RHEL-144763]
  - ublk: use copy_{to,from}_iter() for user copy (Ming Lei) [RHEL-144763]
  - block: fix cached zone reporting after zone append was used (Ming Lei) [RHEL-144763]
  - block: don't leak disk->zones_cond for !disk_need_zone_resources (Ming Lei) [RHEL-144763]
  - xfs: use blkdev_report_zones_cached() (Ming Lei) [RHEL-144763]
  - block: add zone write plug condition to debugfs zone_wplugs (Ming Lei) [RHEL-144763]
  - block: improve zone_wplugs debugfs attribute output (Ming Lei) [RHEL-144763]
  - block: introduce BLKREPORTZONESV2 ioctl (Ming Lei) [RHEL-144763]
  - block: introduce blkdev_report_zones_cached() (Ming Lei) [RHEL-144763]
  - block: introduce blkdev_get_zone_info() (Ming Lei) [RHEL-144763]
  - block: refactor blkdev_report_zones() code (Ming Lei) [RHEL-144763]
  - block: track zone conditions (Ming Lei) [RHEL-144763]
  - block: use zone condition to determine conventional zones (Ming Lei) [RHEL-144763]
  - block: reorganize struct blk_zone_wplug (Ming Lei) [RHEL-144763]
  - block: introduce disk_report_zone() (Ming Lei) [RHEL-144763]
  - block: cleanup blkdev_report_zones() (Ming Lei) [RHEL-144763]
  - block: freeze queue when updating zone resources (Ming Lei) [RHEL-144763]
  - block: handle zone management operations completions (Ming Lei) [RHEL-144763]
  - block: make bio auto-integrity deadlock safe (Ming Lei) [RHEL-144763]
  - block: blocking mempool_alloc doesn't fail (Ming Lei) [RHEL-144763]
  - selftests: ublk: make ublk_thread thread-local variable (Ming Lei) [RHEL-144763]
  - selftests: ublk: set CPU affinity before thread initialization (Ming Lei) [RHEL-144763]
  - ublk: use struct_size() for allocation (Ming Lei) [RHEL-144763]
  - ublk: implement NUMA-aware memory allocation (Ming Lei) [RHEL-144763]
  - ublk: reorder tag_set initialization before queue allocation (Ming Lei) [RHEL-144763]
  - blktrace: add support for REQ_OP_WRITE_ZEROES tracing (Ming Lei) [RHEL-144763]
  - drbd: replace kmap() with kmap_local_page() in receiver path (Ming Lei) [RHEL-144763]
  - blktrace: for ftrace use correct trace format ver (Ming Lei) [RHEL-144763]
  - blktrace: use debug print to report dropped events (Ming Lei) [RHEL-144763]
  - blktrace: handle BLKTRACESETUP2 ioctl (Ming Lei) [RHEL-144763]
  - blktrace: trace zone write plugging operations (Ming Lei) [RHEL-144763]
  - blktrace: expose ZONE APPEND completions to blktrace (Ming Lei) [RHEL-144763]
  - blktrace: add block trace commands for zone operations (Ming Lei) [RHEL-144763]
  - blktrace: move ftrace blk_io_tracer to blk_io_trace2 (Ming Lei) [RHEL-144763]
  - blktrace: move trace_note to blk_io_trace2 (Ming Lei) [RHEL-144763]
  - blktrace: differentiate between blk_io_trace versions (Ming Lei) [RHEL-144763]
  - blktrace: add definitions for struct blk_io_trace2 (Ming Lei) [RHEL-144763]
  - blktrace: pass blk_user_trace2 to setup functions (Ming Lei) [RHEL-144763]
  - blktrace: add definitions for blk_user_trace_setup2 (Ming Lei) [RHEL-144763]
  - blktrace: split do_blk_trace_setup into two functions (Ming Lei) [RHEL-144763]
  - blktrace: change the internal action to 64bit (Ming Lei) [RHEL-144763]
  - blktrace: untangle if/else sequence in __blk_add_trace (Ming Lei) [RHEL-144763]
  - blktrace: split out relaying a blktrace event (Ming Lei) [RHEL-144763]
  - blktrace: factor out recording a blktrace event (Ming Lei) [RHEL-144763]
  - blktrace: only calculate trace length once (Ming Lei) [RHEL-144763]
  - block: rename min_segment_size (Ming Lei) [RHEL-144763]
  - blk-mq: use struct_size() in kmalloc() (Ming Lei) [RHEL-144763]
  - block/mq-deadline: Switch back to a single dispatch list (Ming Lei) [RHEL-144763]
  - block/mq-deadline: Introduce dd_start_request() (Ming Lei) [RHEL-144763]
  - nvme-multipath: fix lockdep WARN due to partition scan work (Ming Lei) [RHEL-144763]
  - MAINTAINERS: correct git location for block layer tree (Ming Lei) [RHEL-144763]
  - null_blk: set dma alignment to logical block size (Ming Lei) [RHEL-144763]
  - blk-crypto: use BLK_STS_INVAL for alignment errors (Ming Lei) [RHEL-144763]
  - block: make REQ_OP_ZONE_OPEN a write operation (Ming Lei) [RHEL-144763]
  - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL (Ming Lei) [RHEL-144763]
  - nvme-pci: use blk_map_iter for p2p metadata (Ming Lei) [RHEL-144763]
  - block: require LBA dma_alignment when using PI (Ming Lei) [RHEL-144763]
  - block: Remove elevator_lock usage from blkg_conf frozen operations (Ming Lei) [RHEL-144763]
  - blk-mq: fix stale tag depth for shared sched tags in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - loop: remove redundant __GFP_NOWARN flag (Ming Lei) [RHEL-144763]
  - block: move bio_iov_iter_get_bdev_pages to block/fops.c (Ming Lei) [RHEL-144763]
  - iomap: open code bio_iov_iter_get_bdev_pages (Ming Lei) [RHEL-144763]
  - block: rename bio_iov_iter_get_pages_aligned to bio_iov_iter_get_pages (Ming Lei) [RHEL-144763]
  - block: remove bio_iov_iter_get_pages (Ming Lei) [RHEL-144763]
  - block: Update a comment of disk statistics (Ming Lei) [RHEL-144763]
  - s390/dasd: enforce dma_alignment to ensure proper buffer validation (Ming Lei) [RHEL-144763]
  - s390/dasd: Return BLK_STS_INVAL for EINVAL from do_dasd_request (Ming Lei) [RHEL-144763]
  - ublk: remove redundant zone op check in ublk_setup_iod() (Ming Lei) [RHEL-144763]
  - nvme: Use non zero KATO for persistent discovery connections (Ming Lei) [RHEL-144763]
  - nvmet: add safety check for subsys lock (Ming Lei) [RHEL-144763]
  - nvme-core: use nvme_is_io_ctrl() for I/O controller check (Ming Lei) [RHEL-144763]
  - nvme-core: do ioccsz/iorcsz validation only for I/O controllers (Ming Lei) [RHEL-144763]
  - nvme-core: add method to check for an I/O controller (Ming Lei) [RHEL-144763]
  - blk-mq: Fix more tag iteration function documentation (Ming Lei) [RHEL-144763]
  - selftests: ublk: fix behavior when fio is not installed (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_unmap_io() (Ming Lei) [RHEL-144763]
  - ublk: pass ublk_io to __ublk_complete_rq() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_need_complete_req() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_check_commit_and_fetch() (Ming Lei) [RHEL-144763]
  - ublk: don't pass ublk_queue to ublk_fetch() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_config_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_check_fetch_buf() (Ming Lei) [RHEL-144763]
  - ublk: pass q_id and tag to __ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_daemon_register_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_register_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: pass ublk_device to ublk_register_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: don't dereference ublk_queue in ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - ublk: don't dereference ublk_queue in ublk_ch_uring_cmd_local() (Ming Lei) [RHEL-144763]
  - ublk: add helpers to check ublk_device flags (Ming Lei) [RHEL-144763]
  - ublk: don't pass ublk_queue to __ublk_fail_req() (Ming Lei) [RHEL-144763]
  - ublk: don't pass q_id to ublk_queue_cmd_buf_size() (Ming Lei) [RHEL-144763]
  - ublk: remove ubq check in ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - selftests: ublk: add test to verify that feat_map is complete (Ming Lei) [RHEL-144763]
  - selftests: ublk: kublk: add UBLK_F_BUF_REG_OFF_DAEMON to feat_map (Ming Lei) [RHEL-144763]
  - selftests: ublk: kublk: simplify feat_map definition (Ming Lei) [RHEL-144763]
  - blk-throttle: fix throtl_data leak during disk release (Ming Lei) [RHEL-144763]
  - blk-mq: Fix the blk_mq_tagset_busy_iter() documentation (Ming Lei) [RHEL-144763]
  - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk (Ming Lei) [RHEL-144763]
  - block/mq-deadline: Remove the redundant rb_entry_rq in the deadline_from_pos(). (Ming Lei) [RHEL-144763]
  - nvme-fc: use lock accessing port_state and rport state (Ming Lei) [RHEL-144763]
  - nvmet-fcloop: call done callback even when remote port is gone (Ming Lei) [RHEL-144763]
  - nvmet-fc: avoid scheduling association deletion twice (Ming Lei) [RHEL-144763]
  - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op (Ming Lei) [RHEL-144763]
  - blk-mq: fix stale nr_requests documentation (Ming Lei) [RHEL-144763]
  - blk-mq: remove blk_mq_tag_update_depth() (Ming Lei) [RHEL-144763]
  - blk-mq: fix potential deadlock while nr_requests grown (Ming Lei) [RHEL-144763]
  - blk-mq-sched: add new parameter nr_requests in blk_mq_alloc_sched_tags() (Ming Lei) [RHEL-144763]
  - blk-mq: split bitmap grow and resize case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - blk-mq: cleanup shared tags case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - blk-mq: convert to serialize updating nr_requests with update_nr_hwq_lock (Ming Lei) [RHEL-144763]
  - blk-mq: check invalid nr_requests in queue_requests_store() (Ming Lei) [RHEL-144763]
  - blk-mq: remove useless checkings in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - blk-mq: remove useless checking in queue_requests_store() (Ming Lei) [RHEL-144763]
  - ublk: consolidate nr_io_ready and nr_queues_ready (Ming Lei) [RHEL-144763]
  - block: fix ordering of recursive split IO (Ming Lei) [RHEL-144763]
  - block: skip unnecessary checks for split bio (Ming Lei) [RHEL-144763]
  - blk-crypto: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-144763]
  - block: factor out a helper bio_submit_split_bioset() (Ming Lei) [RHEL-144763]
  - blk-crypto: fix missing blktrace bio split events (Ming Lei) [RHEL-144763]
  - blk-mq: add QUEUE_FLAG_BIO_ISSUE_TIME (Ming Lei) [RHEL-144763]
  - block: initialize bio issue time in blk_mq_submit_bio() (Ming Lei) [RHEL-144763]
  - block: cleanup bio_issue (Ming Lei) [RHEL-144763]
  - blk-map: provide the bdev to bio if one exists (Ming Lei) [RHEL-144763]
  - blk-mq-dma: bring back p2p request flags (Ming Lei) [RHEL-144763]
  - blk-integrity: enable p2p source and destination (Ming Lei) [RHEL-144763]
  - iov_iter: remove iov_iter_is_aligned (Ming Lei) [RHEL-144763]
  - blk-integrity: use simpler alignment check (Ming Lei) [RHEL-144763]
  - block: remove bdev_iter_is_aligned (Ming Lei) [RHEL-144763]
  - iomap: simplify direct io validity check (Ming Lei) [RHEL-144763]
  - block: simplify direct io validity check (Ming Lei) [RHEL-144763]
  - block: align the bio after building it (Ming Lei) [RHEL-144763]
  - block: add size alignment to bio_iov_iter_get_pages (Ming Lei) [RHEL-144763]
  - block: check for valid bio while splitting (Ming Lei) [RHEL-144763]
  - drivers/block: WQ_PERCPU added to alloc_workqueue users (Ming Lei) [RHEL-144763]
  - drivers/block: replace use of system_unbound_wq with system_dfl_wq (Ming Lei) [RHEL-144763]
  - drivers/block: replace use of system_wq with system_percpu_wq (Ming Lei) [RHEL-144763]
  - block: floppy: Replace kmalloc() + copy_from_user() with memdup_user() (Ming Lei) [RHEL-144763]
  - block: remove the bi_inline_vecs variable sized array from struct bio (Ming Lei) [RHEL-144763]
  - block: add a bio_init_inline helper (Ming Lei) [RHEL-144763]
  - blk-throttle: fix access race during throttle policy activation (Ming Lei) [RHEL-144763]
  - null_blk: Fix the description of the cache_size module argument (Ming Lei) [RHEL-144763]
  - ublk: inline __ublk_ch_uring_cmd() (Ming Lei) [RHEL-144763]
  - block: use int to store blk_stack_limits() return value (Ming Lei) [RHEL-144763]
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx (Ming Lei) [RHEL-144763]
  - floppy: Sort headers alphabetically (Ming Lei) [RHEL-144763]
  - floppy: Replace custom SZ_64K constant (Ming Lei) [RHEL-144763]
  - floppy: Remove unused CROSS_64KB() macro from arch/ code (Ming Lei) [RHEL-144763]
  - block: Move a misplaced comment in queue_wb_lat_store() (Ming Lei) [RHEL-144763]
  - nvme-pci: convert metadata mapping to dma iter (Ming Lei) [RHEL-144763]
  - nvme-pci: create common sgl unmapping helper (Ming Lei) [RHEL-144763]
  - blk-integrity: use iterator for mapping sg (Ming Lei) [RHEL-144763]
  - blk-mq-dma: add scatter-less integrity data DMA mapping (Ming Lei) [RHEL-144763]
  - blk-mq-dma: move common dma start code to a helper (Ming Lei) [RHEL-144763]
  - blk-mq: remove REQ_P2PDMA flag (Ming Lei) [RHEL-144763]
  - blk-mq-dma: require unmap caller provide p2p map type (Ming Lei) [RHEL-144763]
  - blk-mq-dma: provide the bio_vec array being iterated (Ming Lei) [RHEL-144763]
  - blk-mq-dma: create blk_map_iter type (Ming Lei) [RHEL-144763]
  - block: switch ->getgeo() to struct gendisk (Ming Lei) [RHEL-144763]
  - scsi: switch ->bios_param() to passing gendisk (Ming Lei) [RHEL-144763]
  - scsi: switch scsi_bios_ptable() and scsi_partsize() to gendisk (Ming Lei) [RHEL-144763]
  - nvme: fix PI insert on write (Ming Lei) [RHEL-144763]
  - blk-zoned: Fix a lockdep complaint about recursive locking (Ming Lei) [RHEL-144763]
  - loop: fix zero sized loop for block special file (Ming Lei) [RHEL-144763]
  - block: tone down bio_check_eod (Ming Lei) [RHEL-144763]
  - loop: use vfs_getattr_nosec for accurate file size (Ming Lei) [RHEL-144763]
  - loop: Consolidate size calculation logic into lo_calculate_size() (Ming Lei) [RHEL-144763]
  - block: remove newlines from the warnings in blk_validate_integrity_limits (Ming Lei) [RHEL-144763]
  - block: handle pi_tuple_size in queue_limits_stack_integrity (Ming Lei) [RHEL-144763]
  - fs: add ioctl to query metadata and protection info capabilities (Ming Lei) [RHEL-144763]
  - nvme: set pi_offset only when checksum type is not BLK_INTEGRITY_CSUM_NONE (Ming Lei) [RHEL-144763]
  - block: introduce pi_tuple_size field in blk_integrity (Ming Lei) [RHEL-144763]
  - block: rename tuple_size field in blk_integrity to metadata_size (Ming Lei) [RHEL-144763]
  - block: always allocate integrity buffer when required (Ming Lei) [RHEL-144763]
  - Docs: admin-guide: Correct spelling mistake (Ming Lei) [RHEL-144763]
  - blk-wbt: doc: Update the doc of the wbt_lat_usec interface (Ming Lei) [RHEL-144763]
  - blk-wbt: Eliminate ambiguity in the comments of struct rq_wb (Ming Lei) [RHEL-144763]
  - blk-wbt: Optimize wbt_done() for non-throttled writes (Ming Lei) [RHEL-144763]
  - blk-cgroup: remove redundant __GFP_NOWARN (Ming Lei) [RHEL-144763]
  - block, bfq: remove redundant __GFP_NOWARN (Ming Lei) [RHEL-144763]
  - drbd: Remove the open-coded page pool (Ming Lei) [RHEL-144763]
  - nvmet: exit debugfs after discovery subsystem exits (Ming Lei) [RHEL-144763]
  - block, bfq: Reorder struct bfq_iocq_bfqq_data (Ming Lei) [RHEL-144763]
  - block: ensure discard_granularity is zero when discard is not supported (Ming Lei) [RHEL-144763]
  - block: Fix default IO priority if there is no IO context (Ming Lei) [RHEL-144763]
  - nvme: fix various comment typos (Ming Lei) [RHEL-144763]
  - nvme-pci: fix leak on sgl setup error (Ming Lei) [RHEL-144763]
  - nvmet: initialize discovery subsys after debugfs is initialized (Ming Lei) [RHEL-144763]
  - nvme: add capability to connect to an administrative controller (Ming Lei) [RHEL-144763]
  - nvmet: add support for FDP in fabrics passthru path (Ming Lei) [RHEL-144763]
  - blk-ioc: don't hold queue_lock for ioc_lookup_icq() (Ming Lei) [RHEL-144763]
  - block: Enforce power-of-2 physical block size (Ming Lei) [RHEL-144763]
  - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (Ming Lei) [RHEL-144763]
  - block: Improve read ahead size for rotational devices (Ming Lei) [RHEL-144763]
  - cdrom: Call cdrom_mrw_exit from cdrom_release function (Ming Lei) [RHEL-144763]
  - sunvdc: Balance device refcount in vdc_port_mpgroup_check (Ming Lei) [RHEL-144763]
  - nvme-pci: try function level reset on init failure (Ming Lei) [RHEL-144763]
  - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (Ming Lei) [RHEL-144763]
  - nvme: fix typo in status code constant for self-test in progress (Ming Lei) [RHEL-144763]
  - nvmet: remove redundant assignment of error code in nvmet_ns_enable() (Ming Lei) [RHEL-144763]
  - nvme: fix incorrect variable in io cqes error message (Ming Lei) [RHEL-144763]
  - nvme: fix multiple spelling and grammar issues in host drivers (Ming Lei) [RHEL-144763]
  - block: fix blk_zone_append_update_request_bio() kernel-doc (Ming Lei) [RHEL-144763]
  - block: add trace messages to zone write plugging (Ming Lei) [RHEL-144763]
  - block: add tracepoint for blkdev_zone_mgmt (Ming Lei) [RHEL-144763]
  - block: add tracepoint for blk_zone_update_request_bio (Ming Lei) [RHEL-144763]
  - block: split blk_zone_update_request_bio into two functions (Ming Lei) [RHEL-144763]
  - blktrace: add zoned block commands to blk_fill_rwbs (Ming Lei) [RHEL-144763]
  - block: floppy: Fix uninitialized use of outparam (Ming Lei) [RHEL-144763]
  - loop: Avoid updating block size under exclusive owner (Ming Lei) [RHEL-144763]
  - nvme-pci: don't allocate dma_vec for IOVA mappings (Ming Lei) [RHEL-144763]
  - drbd: add missing kref_get in handle_write_conflicts (Ming Lei) [RHEL-144763]
  - block: mtip32xx: Fix usage of dma_map_sg() (Ming Lei) [RHEL-144763]
  - nvme-pci: fix dma unmapping when using PRPs and not using the IOVA mapping (Ming Lei) [RHEL-144763]
  - zram: pass buffer offset to zcomp_available_show() (Ming Lei) [RHEL-144763]
  - block: zram: replace scnprintf() with sysfs_emit() in *_show() functions (Ming Lei) [RHEL-144763]
  - virtio: blk/scsi: use block layer helpers to calculate num of queues (Ming Lei) [RHEL-144763]
  - scsi: use block layer helpers to calculate num of queues (Ming Lei) [RHEL-144763]
  - nvme-pci: use block layer helpers to calculate num of queues (Ming Lei) [RHEL-144763]
  - lib/group_cpus: Let group_cpu_evenly() return the number of initialized masks (Ming Lei) [RHEL-144763]
  - nvme-pci: rework the build time assert for NVME_MAX_NR_DESCRIPTORS (Ming Lei) [RHEL-144763]
  - nvme-pci: replace NVME_MAX_KB_SZ with NVME_MAX_BYTE (Ming Lei) [RHEL-144763]
  - nvme-pci: convert the data mapping to blk_rq_dma_map (Ming Lei) [RHEL-144763]
  - nvme-pci: remove superfluous arguments (Ming Lei) [RHEL-144763]
  - nvme-pci: merge the simple PRP and SGL setup into a common helper (Ming Lei) [RHEL-144763]
  - nvme-pci: refactor nvme_pci_use_sgls (Ming Lei) [RHEL-144763]
  - block: add scatterlist-less DMA mapping helpers (Ming Lei) [RHEL-144763]
  - block: don't merge different kinds of P2P transfers in a single bio (Ming Lei) [RHEL-144763]
  - block: Increase BLK_DEF_MAX_SECTORS_CAP (Ming Lei) [RHEL-144763]
  - block/bdev: lift block size restrictions to 64k (Ming Lei) [RHEL-144763]
  - block/bdev: enable large folio support for large logical block sizes (Ming Lei) [RHEL-144763]
  - fs/buffer fs/mpage: remove large folio restriction (Ming Lei) [RHEL-144763]
  - fs/mpage: use blocks_per_folio instead of blocks_per_page (Ming Lei) [RHEL-144763]
  - fs/mpage: avoid negative shift for large blocksize (Ming Lei) [RHEL-144763]
  - fs/buffer: remove batching from async read (Ming Lei) [RHEL-144763]
  - fs/buffer: simplify block_read_full_folio() with bh_offset() (Ming Lei) [RHEL-144763]
  - block: don't autoload drivers on stat (Ming Lei) [RHEL-144763]
  - platform/x86/amd/pmf: Use ring buffer to store custom BIOS input values (Steve Best) [RHEL-130539]
  - platform/x86/amd/pmf: Add BIOS_INPUTS_MAX macro to replace hardcoded array size (Steve Best) [RHEL-130539]
  - platform/x86/amd/pmf: Use explicit SET_CMD/GET_CMD flags in amd_pmf_send_cmd() (Steve Best) [RHEL-130539]
  - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails (Steve Best) [RHEL-130538]
  - crypto: ccp - Factor out ring destroy handling to a helper (Steve Best) [RHEL-130538]
  - crypto: ccp - Add an S4 restore flow (Steve Best) [RHEL-130538]
  - crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails (Steve Best) [RHEL-130538]
  - platform/x86/amd/pmf: Prevent TEE errors after hibernate (Steve Best) [RHEL-130538]
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-152916]
  - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-152916]


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-215.el10]
changelog:
  - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT (Aristeu Rozanski) [RHEL-132213]
  - tcp: reclaim 8 bytes in struct request_sock_queue (Guillaume Nault) [RHEL-123211]
  - tcp: move mtu_info to remove two 32bit holes (Guillaume Nault) [RHEL-123211]
  - tcp: move tcp_clean_acked to tcp_sock_read_tx group (Guillaume Nault) [RHEL-123211]
  - tcp: move recvmsg_inq to tcp_sock_read_txrx (Guillaume Nault) [RHEL-123211]
  - tcp: move tcp->rcv_tstamp to tcp_sock_write_txrx group (Guillaume Nault) [RHEL-123211]
  - tcp: remove CACHELINE_ASSERT_GROUP_SIZE() uses (Guillaume Nault) [RHEL-123211]
  - net: move sk->sk_err_soft and sk->sk_sndbuf (Guillaume Nault) [RHEL-123211]
  - net: move sk_uid and sk_protocol to sock_read_tx (Guillaume Nault) [RHEL-123211]
  - tcp: move icsk_clean_acked to a better location (Guillaume Nault) [RHEL-123211]
  - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Jan Stancek) [RHEL-132871]
  - timekeeping: Fix timex status validation for auxiliary clocks (Waiman Long) [RHEL-152433]
  - time/sched_clock: Use ACCESS_PRIVATE() to evaluate hrtimer::function (Waiman Long) [RHEL-152433]
  - hrtimer: Fix trace oddity (Waiman Long) [RHEL-152433]
  - clocksource: Reduce watchdog readout delay limit to prevent false positives (Waiman Long) [RHEL-152433]
  - timekeeping: Adjust the leap state for the correct auxiliary timekeeper (Waiman Long) [RHEL-152433] {CVE-2026-23106}
  - hrtimer: Fix softirq base check in update_needs_ipi() (Waiman Long) [RHEL-152433]
  - time: Fix a few typos in time[r] related code comments (Waiman Long) [RHEL-152433]
  - timers/migration: Remove dead code handling idle CPU checking for remote timers (Waiman Long) [RHEL-152433]
  - timers/migration: Remove unused "cpu" parameter from tmigr_get_group() (Waiman Long) [RHEL-152433]
  - timers/migration: Assert that hotplug preparing CPU is part of stable active hierarchy (Waiman Long) [RHEL-152433]
  - timers/migration: Fix imbalanced NUMA trees (Waiman Long) [RHEL-152433]
  - timers/migration: Remove locking on group connection (Waiman Long) [RHEL-152433]
  - timers/migration: Convert "while" loops to use "for" (Waiman Long) [RHEL-152433]
  - timekeeping: Fix error code in tk_aux_sysfs_init() (Waiman Long) [RHEL-152433]
  - timers: Fix NULL function pointer race in timer_shutdown_sync() (Waiman Long) [RHEL-152433] {CVE-2025-68214}
  - timekeeping: Fix resource leak in tk_aux_sysfs_init() error paths (Waiman Long) [RHEL-152433]
  - tick/sched: Fix bogus condition in report_idle_softirq() (Waiman Long) [RHEL-152433]
  - timekeeping: Fix aux clocks sysfs initialization loop bound (Waiman Long) [RHEL-152433]
  - time: export timespec64_add_safe() symbol (Waiman Long) [RHEL-152433]
  - time: Build generic update_vsyscall() only with generic time vDSO (Waiman Long) [RHEL-152433]
  - time/sched_clock: Export symbol for sched_clock register function (Waiman Long) [RHEL-152433]
  - time: Fix spelling mistakes in comments (Waiman Long) [RHEL-152433]
  - clocksource: Print durations for sync check unconditionally (Waiman Long) [RHEL-152433]
  - hrtimer: Reorder branches in hrtimer_clockid_to_base() (Waiman Long) [RHEL-152433]
  - hrtimer: Remove hrtimer_clock_base:: Get_time (Waiman Long) [RHEL-152433]
  - hrtimer: Use hrtimer_cb_get_time() helper (Waiman Long) [RHEL-152433]
  - media: pwm-ir-tx: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - lib: test_objpool: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - sched/core: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - timers/itimer: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - posix-timers: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - jiffies: Remove obsolete SHIFTED_HZ comment (Waiman Long) [RHEL-152433]
  - copy_process: pass clone_flags as u64 across calltree (Waiman Long) [RHEL-152433]
  - hrtimers: Unconditionally update target CPU base after offline timer migration (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Avoid slow division loop in auxiliary clock update (Waiman Long) [RHEL-152433]
  - clocksource: Improve randomness in clocksource_verify_choose_cpus() (Waiman Long) [RHEL-152433]
  - cpumask: introduce cpumask_random() (Waiman Long) [RHEL-152433]
  - bitmap: generalize node_random() (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Update auxiliary clock data in the datapage (Waiman Long) [RHEL-152433]
  - vdso: Introduce aux_clock_resolution_ns() (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Split up __arch_update_vsyscall() into __arch_update_vdso_clock() (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Introduce a helper to fill clock configurations (Waiman Long) [RHEL-152433]
  - timekeeping: Remove the temporary CLOCK_AUX workaround (Waiman Long) [RHEL-152433]
  - timekeeping: Provide ktime_get_clock_ts64() (Waiman Long) [RHEL-152433]
  - timekeeping: Provide interface to control auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Provide update for auxiliary timekeepers (Waiman Long) [RHEL-152433]
  - timekeeping: Provide adjtimex() for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Prepare do_adtimex() for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Make do_adjtimex() reusable (Waiman Long) [RHEL-152433]
  - timekeeping: Add auxiliary clock support to __timekeeping_inject_offset() (Waiman Long) [RHEL-152433]
  - timekeeping: Make timekeeping_inject_offset() reusable (Waiman Long) [RHEL-152433]
  - timekeeping: Provide time setter for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Add minimal posix-timers support for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Provide time getters for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Update auxiliary timekeepers on clocksource change (Waiman Long) [RHEL-152433]
  - timekeeping: Add AUX offset to struct timekeeper (Waiman Long) [RHEL-152433]
  - ntp: Use ktime_get_ntp_seconds() (Waiman Long) [RHEL-152433]
  - timekeeping: Provide ktime_get_ntp_seconds() (Waiman Long) [RHEL-152433]
  - timekeeping: Introduce auxiliary timekeepers (Waiman Long) [RHEL-152433]
  - timekeeping: Add clock_valid flag to timekeeper (Waiman Long) [RHEL-152433]
  - timekeeping: Prepare timekeeping_update_from_shadow() (Waiman Long) [RHEL-152433]
  - timekeeping: Make __timekeeping_advance() reusable (Waiman Long) [RHEL-152433]
  - ntp: Rename __do_adjtimex() to ntp_adjtimex() (Waiman Long) [RHEL-152433]
  - ntp: Add timekeeper ID arguments to public functions (Waiman Long) [RHEL-152433]
  - ntp: Add support for auxiliary timekeepers (Waiman Long) [RHEL-152433]
  - redhat/configs: Add CONFIG_POSIX_AUX_CLOCKS=n (Waiman Long) [RHEL-152433]
  - time: Introduce auxiliary POSIX clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Introduce timekeeper ID (Waiman Long) [RHEL-152433]
  - timekeeping: Avoid double notification in do_adjtimex() (Waiman Long) [RHEL-152433]
  - timekeeping: Cleanup kernel doc of __ktime_get_real_seconds() (Waiman Long) [RHEL-152433]
  - timekeeping: Remove hardcoded access to tk_core (Waiman Long) [RHEL-152433]
  - clocksource: Use cpumask_next_wrap() in clocksource_watchdog() (Waiman Long) [RHEL-152433]
  - clocksource: Use cpumask_any_but() in clocksource_verify_choose_cpus() (Waiman Long) [RHEL-152433]
  - timers/migration: Clean up the loop in tmigr_quick_check() (Waiman Long) [RHEL-152433]
  - PCI: Add PCI_BRIDGE_NO_ALIAS quirk for ASPEED AST1150 (Myron Stowe) [RHEL-143320]
  - PCI: Add ASPEED vendor ID to pci_ids.h (Myron Stowe) [RHEL-143320]
  - PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads (Myron Stowe) [RHEL-143320]
  - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mete Durlu) [RHEL-155896]
  - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix missing error handling for tx_queue (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Use macro instead of hard coded value (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Support 2G message size (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Support extended stats for Thor2 VF (Sreekanth Reddy) [RHEL-108694]
  - selftests: net: tests for add double tunneling GRO/GSO (Guillaume Nault) [RHEL-145367]
  - geneve: use GRO hint option in the RX path (Guillaume Nault) [RHEL-145367]
  - geneve: extract hint option at GRO stage (Guillaume Nault) [RHEL-145367]
  - geneve: add GRO hint output path (Guillaume Nault) [RHEL-145367]
  - geneve: pass the geneve device ptr to geneve_build_skb() (Guillaume Nault) [RHEL-145367]
  - geneve: constify geneve_hlen() (Guillaume Nault) [RHEL-145367]
  - geneve: add netlink support for GRO hint (Guillaume Nault) [RHEL-145367]
  - vxlan: expose gso partial features for tunnel offload (Guillaume Nault) [RHEL-145367]
  - geneve: expose gso partial features for tunnel offload (Guillaume Nault) [RHEL-145367]
  - net: introduce mangleid_features (Guillaume Nault) [RHEL-145367]
  - geneve, specs: Add port range to rt_link specification (Guillaume Nault) [RHEL-145367]
  - geneve: Allow users to specify source port range (Guillaume Nault) [RHEL-145367]
  - selftests: forwarding: lib: Move require_command to net, generalize (Guillaume Nault) [RHEL-145367]
  - USB: storage: Remove subclass and protocol overrides from Novatek quirk (Desnes Nunes) [RHEL-147788]
  - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer (Desnes Nunes) [RHEL-147788] {CVE-2025-68331}
  - xhci: dbgtty: fix device unregister: fixup (Desnes Nunes) [RHEL-147788]
  - xhci: dbgtty: fix device unregister (Desnes Nunes) [RHEL-147788]
  - usb: storage: sddr55: Reject out-of-bound new_pba (Desnes Nunes) [RHEL-147788] {CVE-2025-40345}
  - USB: serial: option: add support for Rolling RW101R-GL (Desnes Nunes) [RHEL-147788]
  - usb: typec: ucsi: psy: Set max current to zero when disconnected (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: pci: Sort out the Intel device IDs (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: pci: add support for the Intel Nova Lake -S (Desnes Nunes) [RHEL-147788]
  - drivers/usb/dwc3: fix PCI parent check (Desnes Nunes) [RHEL-147788]
  - xhci: sideband: Fix race condition in sideband unregister (Desnes Nunes) [RHEL-147788]
  - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host (Desnes Nunes) [RHEL-147788]
  - xhci: fix stale flag preventig URBs after link state error is cleared (Desnes Nunes) [RHEL-147788]
  - USB: serial: ftdi_sio: add support for u-blox EVK-M101 (Desnes Nunes) [RHEL-147788]
  - usb: cdns3: Fix double resource release in cdns3_pci_probe (Desnes Nunes) [RHEL-147788]
  - usb: gadget: udc: fix use-after-free in usb_gadget_state_work (Desnes Nunes) [RHEL-147788] {CVE-2025-68282}
  - USB: serial: option: add Telit FN920C04 ECM compositions (Desnes Nunes) [RHEL-147788]
  - USB: serial: option: add Quectel RG255C (Desnes Nunes) [RHEL-147788]
  - tcpm: allow looking for role_sw device in the main node (Desnes Nunes) [RHEL-147788]
  - tcpm: switch check for role_sw device with fw_node (Desnes Nunes) [RHEL-147788]
  - usb/core/quirks: Add Huawei ME906S to wakeup quirk (Desnes Nunes) [RHEL-147788]
  - USB: serial: option: add UNISOC UIS7720 (Desnes Nunes) [RHEL-147788]
  - xhci: dbc: enable back DbC in resume if it was enabled before suspend (Desnes Nunes) [RHEL-147788]
  - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event (Desnes Nunes) [RHEL-147788]
  - usb: xhci-pci: Fix USB2-only root hub registration (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: qcom,snps-dwc3: Fix bindings for X1E80100 (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: switch: split out ports definition (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: samsung,usb3-drd-phy: gs101: require Type-C properties (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: samsung,usb3-drd-phy: add blank lines between DT properties (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: Don't call clk_bulk_disable_unprepare() twice (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp (Desnes Nunes) [RHEL-147788]
  - usb: vhci-hcd: Prevent suspending virtually attached devices (Desnes Nunes) [RHEL-147788]
  - USB: serial: option: add SIMCom 8230C compositions (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Fix use-after-free in tb_dp_dprx_work (Desnes Nunes) [RHEL-147788] {CVE-2025-40002}
  - docs: driver-api: fix spelling of "buses". (Desnes Nunes) [RHEL-147788]
  - usb: xhci: align PORTSC trace with one-based port numbering (Desnes Nunes) [RHEL-147788]
  - usb: xhci: correct indentation for PORTSC tracing function (Desnes Nunes) [RHEL-147788]
  - usb: xhci: improve TR Dequeue Pointer mask (Desnes Nunes) [RHEL-147788]
  - usb: xhci-pci: add support for hosts with zero USB3 ports (Desnes Nunes) [RHEL-147788]
  - usb: xhci: Update a comment about Stop Endpoint retries (Desnes Nunes) [RHEL-147788]
  - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" (Desnes Nunes) [RHEL-147788]
  - USB: gadget: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-147788]
  - usb: gadget: Introduce free_usb_request helper (Desnes Nunes) [RHEL-147788]
  - usb: gadget: Store endpoint pointer in usb_request (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-rcar: Add Renesas RZ/G3E USB3 Host driver support (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-plat: Add .post_resume_quirk for struct xhci_plat_priv (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-rcar: Move R-Car reg definitions (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: Document Renesas RZ/G3E USB3HOST (Desnes Nunes) [RHEL-147788]
  - phy: fsl-imx8mq-usb: fix typec orientation switch when built as module (Desnes Nunes) [RHEL-147788]
  - usb: typec: Stub out typec_switch APIs when CONFIG_TYPEC=n (Desnes Nunes) [RHEL-147788]
  - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs (Desnes Nunes) [RHEL-147788]
  - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices (Desnes Nunes) [RHEL-147788]
  - redhat/configs: configs: riscv: Enable dwc3 on riscv for RHEL (Desnes Nunes) [RHEL-147788]
  - redhat/configs: Enable DWC3 Generic Platform Driver on RHEL automotive (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: add generic driver to support flattened (Desnes Nunes) [RHEL-147788]
  - clk: Provide devm_clk_bulk_get_all_enabled() helper (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: dwc3: add support for SpacemiT K1 (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update thunderbolt.h header file (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update xdomain.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update usb4_port.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update usb4.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tunnel.h function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tunnel.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tmu.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Add missing documentation in tb.h (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tb.h function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tb.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update switch.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update retimer.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update property.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update path.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update nvm.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Add missing documentation in nhi_regs.h ring_desc structure (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update nhi.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update lc.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update eeprom.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update domain.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update dma_port.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Add missing documentation in ctl.h tb_cfg_request struct (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update ctl.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update clx.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update cap.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update acpi.c function documentation (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Handle mode transitions for CD321x (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Read data status in probe and cache its value (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Use read_power_status function in probe (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Update partner identity when power status was updated (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Register DisplayPort and Thunderbolt altmodes for cd321x (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Read USB4, Thunderbolt and DisplayPort status for cd321x (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Add cd321x struct with separate size (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Trace data status for CD321x correctly (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Move switch_power_state to tipd_data (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Move initial irq mask to tipd_data (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Clear interrupts first (Desnes Nunes) [RHEL-147788]
  - usb: host: enable USB offload during system sleep (Desnes Nunes) [RHEL-147788]
  - xhci: sideband: add api to trace sideband usage (Desnes Nunes) [RHEL-147788]
  - usb: offload: add apis for offload usage tracking (Desnes Nunes) [RHEL-147788]
  - usb: xhci-plat: separate dev_pm_ops for each pm_event (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: qcom: Implement glue callbacks to facilitate runtime suspend (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: core: Introduce glue callbacks for flattened implementations (Desnes Nunes) [RHEL-147788]
  - usb: host: tegra: Remove manual wake IRQ disposal (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-tegra: Use platform_get_irq_optional() for wake IRQs (Desnes Nunes) [RHEL-147788]
  - usb: xhci: tegra: Support USB wakeup function for Tegra234 (Desnes Nunes) [RHEL-147788]
  - usb: udc: Add trace event for usb_gadget_set_state (Desnes Nunes) [RHEL-147788]
  - usb: dwc2: Add support for 'maximum-speed' property (Desnes Nunes) [RHEL-147788]
  - usb: typec: tcpci: add wakeup support (Desnes Nunes) [RHEL-147788]
  - dt-bindings: extcon: linux,extcon-usb-gpio: GPIO must be provided (Desnes Nunes) [RHEL-147788]
  - redhat/configs: Adding CONFIG_EXTCON_MAX14526 (Desnes Nunes) [RHEL-147788]
  - extcon: max14526: depends on I2C to prevent build warning/errors (Desnes Nunes) [RHEL-147788]
  - extcon: Add basic support for Maxim MAX14526 MUIC (Desnes Nunes) [RHEL-147788]
  - dt-bindings: extcon: Document Maxim MAX14526 MUIC (Desnes Nunes) [RHEL-147788]
  - usb: core: support eUSB2 double bandwidth large isoc URB frames (Desnes Nunes) [RHEL-147788]
  - usb: xhci: Add host support for eUSB2 double isochronous bandwidth devices (Desnes Nunes) [RHEL-147788]
  - usb: core: Introduce usb_endpoint_is_hs_isoc_double() (Desnes Nunes) [RHEL-147788]
  - usb: xhci: Use usb_endpoint_max_periodic_payload() (Desnes Nunes) [RHEL-147788]
  - usb: core: Add a function to get USB version independent periodic payload (Desnes Nunes) [RHEL-147788]
  - usb: core: eUSB2 companion descriptor is for isoc IN endpoints only (Desnes Nunes) [RHEL-147788]
  - usb: core: Parse eUSB2 companion descriptors for high speed devices only (Desnes Nunes) [RHEL-147788]
  - usb: core: Use le16_to_cpu() to read __le16 value in usb_parse_endpoint() (Desnes Nunes) [RHEL-147788]
  - usb: typec: ucsi: Add check for UCSI version (Desnes Nunes) [RHEL-147788]
  - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget (Desnes Nunes) [RHEL-147788] {CVE-2025-40314}
  - usb: host: xhci-tegra: Remove redundant ternary operators (Desnes Nunes) [RHEL-147788]
  - cdnsp: Remove unused tracepoints (Desnes Nunes) [RHEL-147788]
  - cdns3: Remove unused tracepoints (Desnes Nunes) [RHEL-147788]
  - cdns2: Remove unused tracepoints (Desnes Nunes) [RHEL-147788]
  - usb: gadget: configfs: Correctly set use_os_string at bind (Desnes Nunes) [RHEL-147788]
  - tools/usb/usbip: fix spelling mistakes in usbipd.c (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: IXP4xx UDC bindings (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: Refactor dwc3_mode_show (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: Add trace event for dwc3_set_prtcap (Desnes Nunes) [RHEL-147788]
  - usb: storage: realtek_cr: Simplify residue calculation in rts51x_bulk_transport() (Desnes Nunes) [RHEL-147788]
  - usb: misc: Update link to EHSET pdf doc (Desnes Nunes) [RHEL-147788]
  - usb: usblp: Use min_t() to improve usblp_read() (Desnes Nunes) [RHEL-147788]
  - USB: serial: oti6858: remove extranenous ; after comment (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Use string choices helpers (Desnes Nunes) [RHEL-147788]
  - mmc: rtsx_usb_sdmmc: use modern PM macros (Desnes Nunes) [RHEL-147788]
  - mmc: rtsx_usb_sdmmc: Fix uninitialized variable issue (Desnes Nunes) [RHEL-147788]
  - Documentation: driver-api: usb: Limit toctree depth (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: register a typec mux to change the QMPPHY_MODE (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: introduce QMPPHY_MODE (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: store DP phy power state (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: Rename 'mode' to 'phy_mode' (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp: Reference usb-switch.yaml to allow mode-switch (Desnes Nunes) [RHEL-147788]
  - phy: remove unneeded 'fast_io' parameter in regmap_config (Desnes Nunes) [RHEL-147788]
  - misc: rtsx: usb card reader: add OCP support (Desnes Nunes) [RHEL-147788]
  - misc: rtsx: usb: Ensure mmc child device is active when card is present (Desnes Nunes) [RHEL-147788]
  - memstick: Add timeout to prevent indefinite waiting (Desnes Nunes) [RHEL-147788]
  - misc: rtsx_pci: Add separate CD/WP pin polarity reversal support (Desnes Nunes) [RHEL-147788]
  - phy: qcom-qmp-pcie: add dual lane PHY support for SM8750 (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Document the SM8750 QMP PCIe PHY Gen3 x2 (Desnes Nunes) [RHEL-147788]
  - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet (Desnes Nunes) [RHEL-147788]
  - USB: Check no positive return values from pm_runtime_resume_and_get() (Desnes Nunes) [RHEL-147788]
  - usb: typec: ucsi: Add support for READ_POWER_LEVEL command (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Use is_pciehp instead of is_hotplug_bridge (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: Drop duplicate nvidia,tegra20-ehci.txt (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: qcom: Remove extcon functionality from glue layer (Desnes Nunes) [RHEL-147788]
  - USB: lower "Device is not authorized for usage" message to info (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: qcom: Add shutdown handler (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Use Linux Foundation IDs for XDomain discovery (Desnes Nunes) [RHEL-147788]
  - phy: ti: omap-usb2: drop unused module alias (Desnes Nunes) [RHEL-147788]
  - phy: hisilicon: hi6220-usb: drop unused module alias (Desnes Nunes) [RHEL-147788]
  - phy: ti: omap-usb2: enable compile testing (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: fsl,imx8mq-usb: Drop 'db' suffix duplicating dtschema (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Compare HMAC values in constant time (Desnes Nunes) [RHEL-147788]
  - phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure (Desnes Nunes) [RHEL-147788]
  - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157444]
  - ALSA: hda/tas2781: Ignore reset check for SPI device (CKI Backport Bot) [RHEL-148197]
  - platform/x86/intel/hid: Add Nova Lake support (Steve Best) [RHEL-117305]
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908]
  - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367]
  - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800]
  - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714]
  - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714]
  - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521]
  - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521]
  - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691]


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-216.el10]
changelog:
  - redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
  - net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
  - mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
  - mpls: Protect net->mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
  - mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
  - mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
  - mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
  - mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
  - mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
  - mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
  - mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
  - mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
  - mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
  - mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
  - neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
  - neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
  - sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
  - rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
  - net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
  - net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
  - ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
  - net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
  - net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
  - neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Protect tbl->phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
  - neighbour: Drop read_lock_bh(&tbl->lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Drop read_lock_bh(&tbl->lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
  - neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
  - neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
  - neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
  - neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
  - net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
  - net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
  - net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
  - net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
  - net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
  - ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
  - net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
  - net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
  - ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
  - ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
  - Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
  - Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
  - ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
  - inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
  - ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
  - net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
  - ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
  - ipv6: Protect nh->f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
  - ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
  - ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
  - ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Preallocate rt->fib6_nh->rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
  - ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
  - net: Remove ->exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
  - geneve: Convert geneve_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - bareudp: Convert bareudp_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - bonding: Convert bond_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - bridge: Convert br_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - xfrm: Convert xfrmi_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert tunnel devices' ->exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - vxlan: Convert vxlan_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Convert nexthop_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - net: Add ->exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
  - net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
  - net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
  - net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
  - inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
  - net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
  - net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
  - net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
  - dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
  - net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
  - net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
  - arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
  - ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
  - net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
  - net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
  - net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
  - net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
  - net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
  - dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
  - dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
  - net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
  - net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
  - net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
  - net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
  - net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
  - net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
  - net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
  - net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
  - dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
  - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
  - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
  - can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Move ops->validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
  - net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
  - ipmr: use READ_ONCE() to read net->ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
  - ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table->fib_seq (Antoine Tenart) [RHEL-150155]
  - ipv4: use READ_ONCE()/WRITE_ONCE() on net->ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
  - fib: rules: use READ_ONCE()/WRITE_ONCE() on ops->fib_rules_seq (Antoine Tenart) [RHEL-150155]
  - ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
  - ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
  - ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
  - ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
  - ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
  - ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
  - ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
  - cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
  - cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
  - cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
  - cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
  - cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
  - selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
  - cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
  - cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
  - cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
  - cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
  - cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
  - cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
  - cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
  - Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
  - cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
  - cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
  - cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
  - cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
  - cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
  - cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
  - cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
  - cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
  - cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
  - cpuset: remove unused assignment to trialcs->partition_root_state (Waiman Long) [RHEL-113305]
  - cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
  - cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
  - cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
  - cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
  - cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
  - cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
  - cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
  - cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
  - cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
  - cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
  - cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
  - cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
  - cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
  - cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
  - cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
  - cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
  - cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
  - cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
  - cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
  - cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
  - cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
  - cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
  - docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
  - cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
  - cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
  - selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
  - cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
  - cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
  - cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
  - cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
  - selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
  - Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
  - Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
  - cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
  - llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
  - sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
  - sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
  - cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
  - cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
  - cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
  - cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
  - cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
  - cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
  - cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
  - cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
  - cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
  - cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
  - cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
  - cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
  - cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
  - cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
  - cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
  - cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
  - mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
  - cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
  - cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
  - cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
  - cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
  - mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
  - blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
  - cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
  - cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
  - mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
  - RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
  - cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
  - cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
  - cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
  - cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
  - cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
  - cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
  - firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
  - redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
  - redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
  - redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
  - include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
  - include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
  - arm_scmi: don't mess with ->d_parent->d_name (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
  - firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
  - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
  - redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
  - i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
  - i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
  - i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
  - i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
  - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
  - tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
  - tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
  - tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
  - fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
  - tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
  - function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
  - tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
  - tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
  - x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
  - x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
  - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
  - tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
  - x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
  - tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
  - tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
  - tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
  - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
  - selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
  - tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
  - tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
  - tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
  - fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
  - fgraph: Initialize ftrace_ops->private for function graph ops (Jerome Marchand) [RHEL-151695]
  - ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
  - tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
  - tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
  - selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
  - tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
  - tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
  - ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
  - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
  - ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
  - ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
  - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
  - tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
  - ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
  - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
  - selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
  - selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
  - tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
  - ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
  - Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
  - arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
  - atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
  - tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
  - tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
  - fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
  - tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
  - ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
  - ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
  - ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
  - ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
  - docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
  - tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
  - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
  - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
  - ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
  - ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
  - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
  - md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
  - md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
  - block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
  - block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
  - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
  - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
  - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
  - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
  - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
  - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
  - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
  - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
  - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
  - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
  - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
  - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
  - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
  - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
  - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
  - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
  - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
  - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
  - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
  - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
  - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
  - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
  - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
  - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
  - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
  - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
  - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
  - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
  - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
  - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
  - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
  - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
  - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
  - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
  - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
  - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
  - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
  - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
  - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
  - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
  - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
  - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
  - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
  - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
  - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
  - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-17
changelog:
  - Support storing of __crc_* symbols in sections other than .rodata.
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-19
changelog:
  - Capture local __crc_* symbols for "Provides: kernel()".
  - Add support for XZ compression for the symvers file.
  - Fix "Provides: kernel()" generation when both __kcrctab and __kcrctab_gpl
    are present.
  - Fix regression for "Provides:" generation in cases when modversions are stored
    in a section that is over 64K in size.
  - Speedup and cleanup changes in find-provides.ksyms and find-requires.ksyms.
  - Fix regex usage in kmod.attr. (Denys Vlasenko)
  - Implement modalias "Provides:" grouping. (Denys Vlasenko)
  - Speedup and cleanup changes in modalias.prov and kmod.attr. (Denys Vlasenko)


author: keycloak-httpd-client-install fails to build with Python 3.12 - 1.1.14
changelog:
  - Resolves: rhbz#2155009 - keycloak-httpd-client-install fails to build with
    Python 3.12: ModuleNotFoundError: No module named 'distutils'


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Marek Safarik <msafarik@redhat.com> - 7.12.1-16
changelog:
  - Added manpages for keylime services and the tenant
  - Added support for ECC attestation
  - Fixed man page RST formatting for rst2man compatibility


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 7.9.0-7
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook server
    certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Julien Rische <jrische@redhat.com> - 1.21.3-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145356
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-145358
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145397


author: Mike FABIAN <mfabian@redhat.com> - 0.0.62-1
changelog:
  - Update to 0.0.62
  - Get translation changes from CLDR
  - Add more translations from CLDR
  - Add Norwegian keyboard layout to keyboards.xml
    (Resolves: https://github.com/mike-fabian/langtable/issues/16)
  - Add Hang script to Southern Aymara


author: Mike FABIAN <mfabian@redhat.com> - 0.0.63-1
changelog:
  - Update to 0.0.63
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Japanese: prefer anthy over kkc
    (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
  - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
    (Resolves: https://github.com/mike-fabian/langtable/issues/18)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.64-1
changelog:
  - Update to 0.0.64
  - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
    (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.65-1
changelog:
  - Update to 0.0.65
  - Add wuu, tok, glk, gbm, ssy
  - Remove aa_ER.UTF-8@saaho
  - Add kv_RU.UTF-8, chr_RU.UTF-8
  - Add EU, EZ
  - Improve README and Makefile (Resolves: https://github.com/mike-
    fabian/langtable/issues/19)
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 2.015-16
changelog:
  - Convert to new fonts packaging guidelines
  - Migrate to SPDX license expression
  - Drop very very old obsoletes for google-lato-fonts
  - Add gating CI tests in Fedora


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-20
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113472 - "cannot seek on data source" in TLS lftp sessions


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-3
changelog:
  - Fix creating MD RAID arrays without specifying bitmap localtion
    Resolves: RHEL-31379
  - crypto: Fix double free in bd_crypto_luks_remove_key
    Resolves: RHEL-31489
  - tests: Fix running tests without ntfsprogs
    Resolves: RHEL-32875


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Hans de Goede <hdegoede@redhat.com> - 0.3.1-3
changelog:
  - Add patches to fix pipewire keeping UVC cameras open all the time causing
    significant laptop battery drain:
    https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669


author: Kate Hsuan <hpa@redhat.com> - 0.3.2-2
changelog:
  - Disable lc-compliance
  - Removed the gtest dependency from the libcamera-tools package
  - Resolves: RHEL-73503


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.57.6-2
changelog:
  - Rebase to libguestfs 1.57.6
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.0-1
changelog:
  - Rebase to libguestfs 1.58.0
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-1
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Richard W.M. Jones <rjones@redhat.com> - 10.0-2
changelog:
  - Import package into CentOS Stream 10
  - Remove resolves refs to work around check-gitbz bug (RHELBLD-14966)
  - Add gating tests
  - Set ExclusiveArch/ExcludeArch to the same as for libguestfs


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.0-1
changelog:
  - Rebase to 0.12.0
    Resolves: RHEL-133421, RHEL-70825, RHEL-130042
  - Add a Requires for crypto-policies instead of a Recommends
    Resolves: RHEL-139045


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.1-1
changelog:
  - Version 2.11.1 (RHEL-150897)
  - udiskslinuxnvmecontroller: Fix sanitize job start (RHEL-69113)
  - udiskslinuxpartitiontable: Fix missing job completion (RHEL-124987)
  - udiskslinuxdevice: multipath handling fixes (RHEL-128598)
  - lvm2: Prevent a segfault on discarded probe output (RHEL-138293)
  - udisksmodulemanager: Silence console warnings when requested module is not available (RHEL-144145)
  - tests: Make sure to load sr_mod for cdrom tests (RHEL-153132)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-74200, RHEL-80679, RHEL-104216, RHEL-104427, RHEL-113843
      RHEL-118671, RHEL-122751, RHEL-126854, RHEL-126945, RHEL-128105
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-104238)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 11.1.0-1
changelog:
  - Rebased to libvirt-11.1.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7041, RHEL-7042, RHEL-7104, RHEL-7342, RHEL-20294
      RHEL-41264, RHEL-52493, RHEL-58933, RHEL-70656, RHEL-71042
      RHEL-71810, RHEL-72021, RHEL-72052, RHEL-72192, RHEL-72994
      RHEL-79088, RHEL-79460, RHEL-79465, RHEL-79953


author: Jiri Denemark <jdenemar@redhat.com> - 11.2.0-1
changelog:
  - Rebased to libvirt-11.2.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7035, RHEL-24046, RHEL-40077, RHEL-58151, RHEL-68043
      RHEL-71883, RHEL-72994, RHEL-77552, RHEL-80166, RHEL-80533
      RHEL-80688, RHEL-81731, RHEL-81890, RHEL-83148, RHEL-84257
      RHEL-84688
  - cpu_map: Install Ampere-1 ARM CPU models (RHEL-71662)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-6
changelog:
  - add support for dropping root privileges (disabled by default) (RHEL-12183)
  - create linuxptp user and /run/ptp directory


author: Brian C. Lane <bcl@redhat.com> 40.5.1-1
changelog:
  - New lorax documentation - 40.5.1 (bcl@redhat.com)
    Resolves: RHEL-30615
  - Dockerfile.test: Use Fedora 40 for test image (bcl@redhat.com)
  - Change macboot default to false (bcl@redhat.com)
  - Change defaults to Red Hat Enterprise Linux 10 (bcl@redhat.com)
  - runtime-cleanup: wget2-wget has replaced wget (yselkowi@redhat.com)
  - Added example of how to use livemedia-creator in github actions, and still
    build in fedora. (cjshowalter@alaska.edu)
  - Require lorax-templates-rhel when building for ELN, CentOS Stream and RHEL (sgallagh@redhat.com)
  - workflows: Switch to actions/checkout@v4 (bcl@redhat.com)
  - New lorax documentation - 40.5 (bcl@redhat.com)
  - maint: Switch default platform to F40 (bcl@redhat.com)
  - runtime-cleanup: Update to cleanup more (akira@tagoh.org)
  - runtime-install: Update font packages (akira@tagoh.org)
  - mkksiso: Add support for adding an anaconda updates.img (jkonecny@redhat.com)
  - runtime-install: drop kdump-anaconda-addon (awilliam@redhat.com)
  - s390: Escape volid before using it (bcl@redhat.com)
  - aarch64: Escape volid before using it (bcl@redhat.com)
  - runtime-install: drop retired pcmciautils (awilliam@redhat.com)
  - runtime-install: Drop unneeded packages libmlx4, systemd-sysv, and systemd-units (bcl@redhat.com)
  - runtime-install: wget2-wget has replaced wget (awilliam@redhat.com)
  - runtime-cleanup: anaconda's new interface needs stdbuf (kkoukiou@redhat.com)
  - test-in-podman: Fix problem running in github actions (bcl@redhat.com)
  - test: Add pigz to test-packages (bcl@redhat.com)
  - Adjust runtime-postinstall.tmpl for systemd config files move (zbyszek@in.waw.pl)


author: Brian C. Lane <bcl@redhat.com> 40.5.3-1
changelog:
  - tito: Add RHEL tagger with support for rhbz and RHEL (bcl)
    Related: RHEL-31830
  - livemedia-creator: Use /usr/libexec/qemu-kvm on supported arches (bcl)
    Related: RHEL-31830
  - spec: edk2-aarch64 has the UEFI firmware on aarch64 (bcl)
    Related: RHEL-31830
  - Add prefixdevname to Anaconda image (msekleta)
    Related: RHEL-30010
  - spec: exclude the files section for lmc-virt on ppc64le (bcl)
    Resolves: RHEL-31830


author: Brian C. Lane <bcl@redhat.com> 40.5.4-1
changelog:
  - tito: Add tito to container's test-packages (bcl)
    Related: RHEL-31830
  - creator: Fix pylint error in run_creator (bcl)
    Related: RHEL-31830
  - livemedia-creator: Check for BIOS vs. UEFI qemu support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Enable s390x virt support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Make use of virtio devices more generic (bcl)
    Related: RHEL-31830
  - Set requirement on lorax-templates-rhel for prefixdevname change (bcl)
    Related: RHEL-30010


author: Brian C. Lane <bcl@redhat.com> 40.5.5-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-35396
  - docs: Update livemedia-creator documentation for RHEL 10 (bcl)
    Related: RHEL-31853
  - livemedia-creator: The --make-tar option requires tar (bcl)
    Related: RHEL-31853
  - docs: Update example kickstarts for RHEL/CentOS (bcl)
    Resolves: RHEL-31853
  - lorax: Change default rootfs size to 3GiB (bcl)
    Resolves: RHEL-32504


author: Brian C. Lane <bcl@redhat.com> 40.5.6-1
changelog:
  - New lorax documentation - 40.5.6 (bcl)
    Related: RHEL-48606
  - ltmpl: Remove * from docstring (bcl)
    Related: RHEL-48606
  - docs: Update intersphinx and add _static dir (bcl)
    Related: RHEL-48606
  - docs: Document --rootfs-type options (bcl)
    Related: RHEL-48606
  - erofs: Use dedupe and all-fragments options (bcl)
    Related: RHEL-48606
  - imgutils: mkfs.erofs options should come first (bcl)
    Related: RHEL-48606
  - Accept but ignore the old --squashfs-only argument (awilliam)
    Related: RHEL-48606
  - Add compression.erofs section to lorax.conf (bcl)
    Resolves: RHEL-48606
  - Add erofs and erofs-ext4 support to --rootfs-type (bcl)
    Related: RHEL-48606
  - Replace squashfs_only with rootfs_type (bcl)
    Related: RHEL-48606
  - imgutils: Add mkerofs function and test (bcl)
    Related: RHEL-48606
  - runtime-postinstall: Make sure blacklist_exceptions has been removed (jstodola)
    Resolves: RHEL-53721


author: Brian C. Lane <bcl@redhat.com> 40.5.7-1
changelog:
  - templates: Sync template changes from lorax-templates-rhel (bcl)
    Resolves: RHEL-54713
  - tests: Add a test to make sure redhat-release-eula isn't included (bcl)
    Related: RHEL-54381


author: Brian C. Lane <bcl@redhat.com> 40.5.8-1
changelog:
  - tests: Fix mkksiso unit test (bcl)
    Related: RHEL-61778
  - pylint: Print astroid version (bcl)
    Related: RHEL-61778
  - Extend help for --updates and --ks parameters (jkonecny)
    Related: RHEL-61778
  - Fix --updates the updates image wasn't loaded (jkonecny)
    Resolves: RHEL-61778
  - Implement --replace also for S390 (sebastian.stark)
    Related: RHEL-61778
  - mkksiso: option --replace to replace arbitrary text in boot config.  (sebastian.stark)
    Related: RHEL-61778
  - livemedia: Add isomd5sum (bcl)
    Resolves: RHEL-58896


author: Brian C. Lane <bcl@redhat.com> 40.5.9-1
changelog:
  - tests: Swap nomodeset for inst.text in mkksiso test data (bcl)
    Related: RHEL-66603
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: RHEL-66603
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.10-1
changelog:
  - erofs: Change the erofs compression default to zstd (bcl)
    Related: RHEL-48606
  - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl)
    Related: RHEL-66603
  - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl)
    Related: RHEL-66603
  - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.11-1
changelog:
  - erofs: Make smaller lzma erofs images by default (bcl)
    Related: RHEL-48606
  - Revert "erofs: Change the erofs compression default to zstd" (bcl)
    Related: RHEL-48606


author: Brian C. Lane <bcl@redhat.com> 40.5.12-1
changelog:
  - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl)
    Resolves: RHEL-83202
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl)
    Resolves: RHEL-83519


author: Brian C. Lane <bcl@redhat.com> 40.5.14-1
changelog:
  - New lorax documentation - 40.5.14 (bcl)
    Related: RHEL-130954
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-126547
    Resolves: RHEL-130954
  - livemedia.ks: Increase size of root partition in example live kickstart (bcl)
    Resolves: RHEL-142732
  - executils: decoding after deserialization (oleg.sviridov)
    Resolves: RHEL-121650


author: Brian C. Lane <bcl@redhat.com> 40.5.15-1
changelog:
  - executils: Ignore utf-8 decode errors (bcl)
    Resolves: RHEL-121650
  - executils: Remove binary_output flag (bcl)
    Related: RHEL-121650
  - logging: Set encoding=UTF-8 on FileHandler (bcl)
    Related: RHEL-121650
  - executils: Set encoding to UTF-8 for _run_program (bcl)
    Related: RHEL-121650


author: Brian C. Lane <bcl@redhat.com> - 10.0-47
changelog:
  - Makefile: Add PREV support for clog (bcl)
    Related: RHEL-40021
  - git-changelog: Change line length limit to 120 (bcl)
    Related: RHEL-40021
  - README: Update README with note about PREV= (bcl)
    Related: RHEL-40021
  - Remove libvisual from runtime-cleanup as it's being removed from RHEL 10 (tpopela)
    Resolves: RHEL-39949
  - tests: Do not use fedora.repo for the test build (bcl)
    Resolves: RHEL-40021
  - Drop libreport from templates (mkolman)
    Resolves: RHEL-39794


author: Brian C. Lane <bcl@redhat.com> - 10.0-49
changelog:
  - SERIAL: Bump to 48 to match spec change for mass rebuild (bcl)
  - firmware: Exclude installation of audio firmware (bcl)
    Related: RHEL-44311
  - tests: Replace $stream with 10-stream (bcl)
    Related: RHEL-44311
  - runtime-install: Only install qcom-firmware on aarch64 (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to brcmfmac-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to intel-audio-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to dvb-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: qcom firmware is now in the qcom-firmware package (bcl)
    Related: RHEL-44311
  - Drop Tiger VNC from templates (mkolman)
    Resolves: RHEL-38741


author: Brian C. Lane <bcl@redhat.com> - 10.0-50
changelog:
  - runtime-cleanup: Fix gshadow typo (bcl)
    Resolves: RHEL-35396
  - runtime-install: Add redhat-release-eula (bcl)
    Related: RHEL-35396
  - kernel: Keep nvram module (bcl)
    Resolves: RHEL-36443
  - kernel: Keep hid-multitouch module (bcl)
    Resolves: RHEL-49546


author: Brian C. Lane <bcl@redhat.com> - 10.0-53
changelog:
  - runtime-cleanup: fonttosfnt no longer installed (bcl)
    Resolves: RHEL-54717
  - Use the same page args in all the per-arch templates (bcl)
    Resolves: RHEL-54535
  - Remove manual /root/lorax-packages.log creation (bcl)
    Resolves: RHEL-54534
  - Remove libuser.conf (bcl)
    Resolves: RHEL-54533


author: Brian C. Lane <bcl@redhat.com> - 10.0-55
changelog:
  - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl)
    Related: RHEL-67586
  - tests: Fix the repos used for the test (bcl)
    Related: RHEL-67586
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-67586


author: Brian C. Lane <bcl@redhat.com> - 10.1-1
changelog:
  - Bump release version to 10.1 (bcl)
    Related: RHEL-91929
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91929


author: Brian C. Lane <bcl@redhat.com> - 10.1-3
changelog:
  - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk)
    Resolves: RHEL-102872
  - runtime-postinstall: allow pipewire to run as root (awilliam)
    Resolves: RHEL-102419
  - runtime-cleanup: Do not clean up rpm binaries (bcl)
    Resolves: RHEL-101695


author: Brian C. Lane <bcl@redhat.com> - 10.2-1
changelog:
  - Do not remove SELinux from the runtime (ppolawsk)
    Resolves: RHEL-126547
  - Bump release version to 10.2 (bcl)
    Related: RHEL-126547


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.7-1
changelog:
  - Rebase to 10.11.7
  - Patch 10 removed, the main.ssl_cipher test has been fixed
    and re-enabled by upstream and now passes on all architectures


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57014 - Rebase qemu-ga to 9.1.0
  - RHEL-32297 - guest agent public ssh injection api support for Windows
  - RHEL-36718 - The version of mingw-qemu-ga-win doesn't match inside query and via command 'guest-info'
  - Set version to 109.1.0


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.0.0-1
changelog:
  - RHEL-83547 - Rebase mingw-qemu-ga-win to QEMU 10.0.0 
  - RHEL-96980 - mingw-qga: Drop mingw-pixman build deps
  - RHEL-98947 - [mingw-qemu-ga-win] MSI installer ignore VSS installation result 
  - RHEL-11824 - [QGA] VSS installation retry, if previously VSS service was not un-registered correctly


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.1.0-1
changelog:
  - RHEL-111001 Rebase mingw-qemu-ga-win to QEMU 10.1.0
  - RHEL-107458 [mingw-qemu-ga-win] QAPI error desc does not contain Windows error
  - RHEL-107446 QGA VSS wasn't removed if the QGA installation fail and quit
  - RHEL-107215 Fix don't daemonize before channel is initialized patch for Windows behavior


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.2.1-1
changelog:
  - RHEL-148234 Move CoInitialize/CoInitializeSecurity to main process thread 
  - RHEL-56925 Implement guest-network-get-route for Windows


author: Joe Orton <jorton@redhat.com> - 1.14.2-21
changelog:
  - restore plaintext password storage by default (per upstream)
  - restrict symbols exposed by DSOs built for httpd


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-3
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-5
changelog:
  - Resolves: RHEL-134484 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.1-3
changelog:
  - Resolves: RHEL-33742 - Disable ENGINE support by default
  - disable ENGINE support by default
  - add engine bcond


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-6
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-1417
  - alt-name: Remove alt-names when interface marked as absent. RHEL-126481
  - hsr: Automatically disable IP on hsr port. RHEL-100774
  - hsr: add support for configuring "interlink" property. RHEL-100766
  - Support referring alternative-name as port/parent/next-hop-interface.
    RHEL-126508
  - Support referring interface name using its alternative name. RHEL-126510


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.59-1
changelog:
  - Upgrade to 2.2.59
  - route: add support for lock-mtu option. RHEL-151844
  - iptunnel: introduce support for ipip/sit/ip6ip6/ipip6 tunnels. RHEL-79801
  - nm: Fix error when modify port list of down interface. RHEL-52334


author: Andrei Radchenko <aradchen@redhat.com> - 2023.10-11
changelog:
  - Add test case for symlinked dependencies bug fix
  - added test/symlinked scenario
  - verifies nodejs.req correctly generates requirements for symlinked deps
  - added mock 'external' packages to support this test


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Joseph Marrero <jmarrero@redhat.com> - 2.23.0-6
changelog:
  - Add RPM macros to configure %_passwd_path and %_group_path
  - Fixes user/group lookup for packages with non-root file ownership
  - See: https://github.com/rpm-software-management/rpm/pull/3672


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Jerry James <loganjerry@gmail.com> - 9-1
changelog:
  - Update OCaml native arches for OCaml 5.1
  - Remove the Python file and some macros (now in ocaml-rpm-macros)
  - Add %ocaml_pkg macro for common declarations


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30345]
  - Resolves: [RHEL-30345]
    ([ESXi][RHEL10]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-36292]
  - Resolves: RHEL-36292
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-3
changelog:
  - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732]
  - Resolves: RHEL-40732
    (Drop unneeded gdk-pixbuf-xlib dependency)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.1 [RHEL-45549]
  - Resolves: RHEL-45549
    ([ESXi][RHEL10] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63092]
  - Resolves: RHEL-63092
    ([ESXi][RHEL10] open-vm-tools version 12.5.0 has been released - please rebase)


author: Bo Yang <boyang@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99156]
  - Resolves: RHEL-99156
    ([ESXi][RHEL10] open-vm-tools version 13.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-2
changelog:
  - ovt-Handle-new-cloud-init-error-code-and-status.patch [RHEL-99781]
  - ovt-Address-CVE-2025-41244.patch [RHEL-117382]
  - Resolves: RHEL-99781
    (Cloud-init receives TERM signal from PID 1 in the middle of running user data [rhel-10])
  - Resolves: RHEL-117382
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.2])


author: Bo Yang <boyang@redhat.com> - 13.0.5-1
changelog:
  - Rebase to 13.0.5 [RHEL-118504]
  - Resolves: RHEL-118504
    ([ESXi][RHEL10] open-vm-tools version 13.0.5 has been released - please rebase)


author: Bo Yang <boyang@redhat.com> - 13.0.10-1
changelog:
  - Rebase to 13.0.10 [RHEL-144577]
  - Resolves: RHEL-144577
    ([ESXi][RHEL10] open-vm-tools version 13.0.10 has been released - please rebase)


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Matthew Burket <mburket@redhat.com> - 1:1.4.3-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133978)
  - Add the ability to show rule details in output (RHEL-104651)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-21
changelog:
  - Implement obtaining Kerberos tickets on behalf of user on SSH authentication
    Resolves: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
changelog:
  - Remove recommendation of p11-kit
    Resolves: RHEL-139070
  - Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
    in sshd_config should count when defined multiple times
    Resolves: RHEL-150365
  - Fix mistracking of MaxStartups process exits in some situations
    Resolves: RHEL-121768
  - Fix GSSAPI authentication indicator issues found by AI
    Resolves: RHEL-154309
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155813


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
changelog:
  - Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
    Resolves: RHEL-88565
  - Fix duplicate audit log entry when destroying ed25519 private keys
    Resolves: RHEL-46782
  - Fix typo in GSSAPIProxyS4U2Services
    Related: RHEL-92932


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80811
    Resolves: RHEL-57022
    Resolves: RHEL-24098
    Resolves: RHEL-24097
    Resolves: RHEL-86865


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-122599
    Resolves: RHEL-141987
    Resolves: RHEL-142009
    Resolves: RHEL-142022
    Resolves: RHEL-142026
    Resolves: RHEL-142030
    Resolves: RHEL-142034
    Resolves: RHEL-142038
    Resolves: RHEL-142042
    Resolves: RHEL-142046
    Resolves: RHEL-142050
    Resolves: RHEL-142054


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337
    Resolves: RHEL-78346


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-78944


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Fix reversion of previous dependency updates post golang update
    Resolves: RHEL-79109


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify pre-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-76915


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-84025


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Update addresses CVE-2025-29786
    Resolves: RHEL-84153


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-84160


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-9
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85035


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90009


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0 Add systemd-journal group to Requires Bump go-
    tpm-keyfiles Resolves: RHEL-119363


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.5.3-2
changelog:
  - We run tests with specially crafted OpenSSL configuration, not the system one
    Resolves: RHEL-25983


author: Lukas Tyrychtr <ltyrycht@redhat.com> - 46.1-2
changelog:
  - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Chris Lumens <clumens@redhat.com> - 3.0.1-4
changelog:
  - Fix promoting instances of a cloned resource
  - Handle large timeouts correctly in crm_resource --wait
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-120932
  - Resolves: RHEL-86148
  - Resolves: RHEL-114895


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-8
changelog:
  - Make sure redhat-package-notes spec is skipped if _package_note_flags is
    undefined (rbhz#2184553)


author: Sudip Shil <sshil@redhat.com> - 6.0-7
changelog:
  - Convert to new fonts packaging guidelines and SPDX license
  - Update the fonts package
  - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.018-1
changelog:
  - Update to 0.018
    - Fix version requirement for CPAN::Meta::Prereqs
    - Move issue tracker to GitHub


author: Paul Howarth <paul@city-fan.org> - 2.143-1
changelog:
  - Update to 2.143 (rhbz#2216187)
    - Fix regression with implicit minimum value and multiple requirements (GH#38)
  - Don't package perlcritic.rc


author: Paul Howarth <paul@city-fan.org> - 2.142-1
changelog:
  - Update to 2.142
    - confess() replaced with croak(): fewer stack traces
    - Broke the version range handling into the Range class
    - Note: this version now requires perl v5.10 rather than v5.6
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.114-1
changelog:
  - Update to 0.114
    - Data::OptList now requires perl v5.12.0
    - Tests no longer add "-T" to shebang, so do not invoke taint mode


author: Packit <hello@packit.dev> - 6.93-1
changelog:
  - Release: v6.93 (Sullivan Beck)
  - Checkpoint: v6.93 (Sullivan Beck)
  - Remove Travis (Sullivan Beck)
  - Initial checkin of next release cycle: 6.93 (Sullivan Beck)


author: Paul Howarth <paul@city-fan.org> - 1.006000-1
changelog:
  - Update to 1.006000
    - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var
      module
    - Refactored the Perl 5.37.2+ lexical exporter support


author: Paul Howarth <paul@city-fan.org> - 1.006001-1
changelog:
  - Update to 1.006001
    Documentation
    - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual
    Packaging
    - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl


author: Paul Howarth <paul@city-fan.org> - 1.006002-1
changelog:
  - Update to 1.006002
    Documentation
    - Link to Exporter::Almighty in pod
    - Update copyright dates
    Packaging
    - Set homepage in metadata to https://exportertiny.github.io


author: Michal Josef Špaček <mspacek@redhat.com> - 6.01-34
changelog:
  - Package tests
  - Patch for remove warning in test
  - Simplify build and install phases
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 2.205-1
changelog:
  - Update to 2.205
    - Add perl 5.38 to CI matrix
    - Add on workflow_dispatch
    - Add some OO examples


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 4.09-1
changelog:
  - Update to 4.09
    - Updated backportPP with JSON::PP 4.11
    - Fix a test to pass under perl with core bool support


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 2:0.42.34-1
changelog:
  - 0.4234 bump
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Michal Josef Špaček <mspacek@redhat.com> - 6.0.1-42
changelog:
  - Add patch to add tests for other USM scenarios
  - Add patch to rewrite from Digest::SHA1 to Digest::SHA
  - Add patch to rewrite usage of HMAC with same dependencies
  - Add patch to split test files for better readability
  - Improve patch for switch from Socket6 to Socket
  - Package tests
  - Rename patch to better name with source dist version


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Michal Josef Špaček <mspacek@redhat.com> - 2.014-9
changelog:
  - Fix running of tests in perl-Net-Server-tests subpackage
    Resolves: RHEL-65278
  - Sync OpenSSL Engine patch with upstream


author: Paul Howarth <paul@city-fan.org> - 0.104003-1
changelog:
  - Update to 0.104003 (rhbz#2208530)
    - Add Artistic 1.0 Perl license and make Perl license use it
    - Remove extra "59" from LGPL-2.1
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.104004-1
changelog:
  - Update to 0.104004 (rhbz#2209461)
    - Rename Perl Artistic License to avoid confusion in detecting license


author: Paul Howarth <paul@city-fan.org> - 0.991-1
changelog:
  - Update to 0.991
    - Make the requirement for perl v5.12.0 explicit; previously, it was only
      implicit because of prerequisites


author: Paul Howarth <paul@city-fan.org> - 0.929-1
changelog:
  - Update to 0.929 (rhbz#2157199)
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Use %license
  - Fix permissions verbosely
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 3:1.302196-1
changelog:
  - Update to 1.302196
    - Raise error on missing Hub ID, which should never happen (GH#882)
    - Fix handling of VSTRING and LVALUE refs in is_deeply() (GH#918)
    - Merge several documentation fixes (GH#910, GH#911, GH#912)


author: Paul Howarth <paul@city-fan.org> - 3:1.302197-1
changelog:
  - Update to 1.302197
    - Add ability to attach timestamps to trace objects via API or environment
      variable


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2255994)
    - Update docs to recommend YAML::PP
  - Package description updated as per upstream documentation


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 1:1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80610


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-138726


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Brian C. Lane <bcl@redhat.com> - 3.52.4-1
changelog:
  - timezone: Remove the --isUtc, --nontp, and --ntpserver arguments (bcl)
    Related: RHEL-34009
  - packages: Remove the old camel case arguments on RHEL10 (bcl)
    Resolves: RHEL-34009
  - nvdimm: Remove support for the nvdimm command on RHEL10 (bcl)
    Related: RHEL-34009


author: Brian C. Lane <bcl@redhat.com> - 3.52.6-1
changelog:
  - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl)
    Related: RHEL-61426
  - workflow: Use python 3.12.7 for testing (bcl)
    Related: RHEL-61426
  - options: adjust to behavior change in upstream _parse_optional (awilliam)
    Resolves: RHEL-61426


author: Brian C. Lane <bcl@redhat.com> - 3.52.7-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61435


author: Brian C. Lane <bcl@redhat.com> - 3.52.8-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61435
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76502


author: Brian C. Lane <bcl@redhat.com> - 3.52.9-1
changelog:
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-80086
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-80086


author: Brian C. Lane <bcl@redhat.com> - 3.52.10-1
changelog:
  - pylint: Ignore files in .git (bcl)
    Related: RHEL-96217
  - Add support for RDP (jkonecny)
    Resolves: RHEL-96217


author: Brian C. Lane <bcl@redhat.com> - 3.52.11-1
changelog:
  - Add support for new bootc kickstart command (ppolawsk)
    Resolves: RHEL-132612
    Related: RHEL-58215


author: Brian C. Lane <bcl@redhat.com> - 3.52.12-1
changelog:
  - rhsm: Add Flatpak registry option for RHEL10 (bciconel)
    Resolves: RHEL-132652
    Related: RHEL-132663


author: Brian C. Lane <bcl@redhat.com> - 3.52.2-1
changelog:
  - Switch DEFAULT_VERSION to RHEL10 (bcl)
    Resolves: RHEL-30566
  - Add a DEFAULT_VERSION variable to version.py (bcl)
  - Deprecate network team options on RHEL 10 (rvykydal)


author: Brian C. Lane <bcl@redhat.com> - 3.52.3-1
changelog:
  - btrfs: Remove support for the btrfs command on RHEL10 (bcl)
    Resolves: RHEL-34009
  - Deprecate modularity on RHEL 10 (marusak.matej)
    Resolves: RHEL-34829


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Miro Hrončok <mhroncok@redhat.com> - 3.12-11
changelog:
  - %python_extras_subpkg: Add -v option to specify the required version(-release)
  - This is useful when the extras are built from a different specfile (e.g. in EPEL for a RHEL base package)
  - Resolves: RHEL-117448


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-10
changelog:
  - Don't assume %_smp_mflags only ever contains -jX, use -j%_smp_build_ncpus directly
  - Fixes: rhbz#2179149


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Vendula Poncova <vponcova@redhat.com> - 1.7-1
changelog:
  - CI: Use dnf instead of yum to install CentOS packages (vponcova)
  - Documentation: Improve the installation instruction (vponcova)
  - Remove untracked files from the git repository interactively (vponcova)
  - UnixFD: Document the support for Unix file descriptors (vponcova)
  - Documentation: Clean up examples in the documentation (vponcova)
  - Documentation: Simplify the README.md file (vponcova)
  - Documentation: Fix bullet point lists (vponcova)
  - Documentation: Simplify the hostname example (vponcova)
  - CI: Run tests for all supported Python version (vponcova)
  - UnixFD: Handle DBus signals with Unix file descriptors (vponcova)
  - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova)
  - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova)
  - UnixFD: Process results of client calls in the low-level library (vponcova)
  - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova)
  - CI: Always pull the latest container image (vponcova)
  - CI: Disable the unhashable-member warning (vponcova)
  - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova)
  - UnixFD: Move the unit tests to a new file (vponcova)
  - UnixFD: Manage the testing bus on set up and tear down (vponcova)
  - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova)
  - UnixFD: Create a new testing DBus interface (vponcova)
  - UnixFD: Fix the indentation in unit tests (vponcova)
  - Add unit tests for variants with variant types (vponcova)
  - Simplify the code for replacing values of the UnixFD type (vponcova)
  - Add classes for unpacking and unwrapping a variant (vponcova)
  - Don't use pylint from pip on Fedora Rawhide (vponcova)
  - UnixFD: Rename a parameter to server_arguments (vponcova)
  - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova)
  - Raise TimeoutError if a DBus call times out (vponcova)
  - Fix pylint tests in CentOS Stream 8 (vponcova)
  - Fix the ENV instruction in Dockerfiles (vponcova)
  - Fix pylint issues (vponcova)
  - run forked tests using subprocess, instead of multiprocessing (wdouglass)
  - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass)
  - Add test case for method call only returning fd (jlyda)
  - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda)
  - fix some lint discovered errors (wdouglass)
  - seperate unixfd functionality, to better support systems that don't have them (wdouglass)
  - Remove note in documentation about unsupported Unix file descriptors (wdouglass)
  - Add a test for UnixFD transfer (wdouglass)
  - Allow UnixFDs to be replaced and passed into Gio (wdouglass)
  - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo)
  - Extend the .coveragerc file (vponcova)
  - Disable builds for Fedora ELN on commits (vponcova)
  - Test Debian with Travis (vponcova)
  - Test Ubuntu with Travis (vponcova)
  - Test CentOS Stream 9 with Travis (vponcova)
  - Use CentOS Stream 8 for testing (vponcova)
  - add remove dbus object function on bus and update tests (matthewcaswell)
  - properly measure coverage across multiprocess test cases (wdouglass)
  - Move handle typing tests into a new class (and a new file) (wdouglass)
  - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass)
  - Add functions for generating/consuming fdlists with variants (wdouglass)
  - Provide a language argument for the code blocks (seahawk1986)
  - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass)
  - Allow to run tests in a container (vponcova)
  - Add C0209 to the ignore list for pylint (tjoslin)
  - Use the latest distro in Travis CI (vponcova)
  - Always update the container (vponcova)
  - Document limitations of the DBus specification generator (vponcova)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Evan Goode <egoode@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 (RHEL-38831)
  - Added pre-transaction plugin
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
    (RHEL-35577)


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: RHEL-113652
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: RHEL-113656


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Martin Kolman <mkolman@redhat.com> - 0.51-1
changelog:
  - SPDX compatible License: line (mkolman)
  - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com)
  - Improve formatting and data in setup.py (vslavik)


author: John Eckersberg <jeckersb@redhat.com> - 0.10.1-1
changelog:
  - New upstream release 0.10.1 (rhbz#2256342)
  - Remove patch for Python 3.13 compatibility (merged upstream in 0.10.0)
  - Add new depencency on furo
  - Include missing THANKS file (https://github.com/netaddr/netaddr/pull/345)


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Jindrich Novy <jnovy@redhat.com> - 3:5.0.0-1
changelog:
  - python-podman-5.0.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.0.0
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 3:5.2.0-1
changelog:
  - python-podman-5.2.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.2.0
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 3:5.3.0-1
changelog:
  - python-podman-5.3.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.3.0
  - Resolves: RHEL-69004


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <mhroncok@redhat.com> - 14-3
changelog:
  - Avoid needless pkg_resources import in pythonbundles.py
  - Ignore environment markers in pythonbundles.py


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Jiri Konecny <jkonecny@redhat.com> - 1.9.0-5
changelog:
  - Migrate to SPDX license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#Detailed_Description


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Python Maint <python-maint@redhat.com> - 1.1.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haïkel Guémar <hguemar@fedoraproject.org>
        Iryna Shcherbina <ishcherb@redhat.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumír Balhar <lbalhar@redhat.com>
        Michal Schorm <mschorm@redhat.com>
        Miro Hrončok <mhroncok@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-29
changelog:
  - Initial package
  Fedora contributions by:
      Dennis Gilmore <dennis@ausil.us>
      Bill Nottingham <notting@fedoraproject.org>
      Charalampos Stratakis <cstratak@redhat.com>
      Christian Heimes <cheimes@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jesse Keating <jkeating@fedoraproject.org>
      Miro Hrončok <miro@hroncok.cz>
      Orion Poplawski <orion@cora.nwra.com>
      Patrik Kopkan <pkopkan@redhat.com>
      Rob Crittenden <rcritten@redhat.com>
      Robert Kuska <rkuska@redhat.com>
      Slavek Kabrda <bkabrda@redhat.com>
      Stephen Gallagher <sgallagh@redhat.com>
      Thomas Spura <tomspur@fedoraproject.org>
      Tom Callaway <spot@fedoraproject.org>
      Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11^20251221git9d7c400-1
changelog:
  - Update to the latest and last upstream commit
  - The project won't have any new releases
  - Use modern pyproject macros
  Related: RHEL-120807


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37
  - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as a provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as an OpenSSL provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladislav Dronov <vdronov@redhat.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0 @ 686d209b (RHEL-91079)
  - Add autoconf-archive as a dependency
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code
  - Add sysusers.d config file to allow rpm to create users/groups automatically


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba (RHEL-73092, RHEL-50462)
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-2
changelog:
  - kvm-e1000e-Prevent-crash-from-legacy-interrupt-firing-af.patch [RHEL-112882]
  - Resolves: RHEL-112882
    ([DEV Task]: Assertion `core->delayed_causes == 0' failed with e1000e NIC)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-3
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-119368]
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-116443]
  - kvm-target-i386-add-compatibility-property-for-arch_capa.patch [RHEL-120253]
  - kvm-target-i386-add-compatibility-property-for-pdcm-feat.patch [RHEL-120253]
  - Resolves: RHEL-119368
    ([rhel10] Backport "arm/kvm: report registers we failed to set")
  - Resolves: RHEL-116443
    (qemu crash after hot-unplug disk from the multifunction enabled bus,crash point PCIDevice *vf = dev->exp.sriov_pf.vf[i])
  - Resolves: RHEL-120253
    (Backport fixes for PDCM and ARCH_CAPABILITIES migration incompatibility)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-4
changelog:
  - kvm-qapi-machine-s390x-add-QAPI-event-SCLP_CPI_INFO_AVAI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-tests-functional-add-tests-for-SCLP-event-CPI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-redhat-Add-new-rhel9.8.0-and-rhel10.2.0-machine-type.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-vfio-rename-field-to-num_initial_regions.patch [RHEL-118810]
  - kvm-vfio-only-check-region-info-cache-for-initial-region.patch [RHEL-118810]
  - kvm-arm-create-new-rhel-10.2-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-arm-create-new-rhel-9.8-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-10.2-specific-pc-q35-machine-typ.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-9.8-specific-pc-q35-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-rh-enable-CONFIG_USB_STORAGE_BOT.patch [RHEL-101929]
  - Resolves: RHEL-104009
    ([IBM 10.2 FEAT] KVM: Enhance machine type definition to include CPI and PCI passthru capabilities (qemu))
  - Resolves: RHEL-105823
    (Add new -rhel10.2.0 machine type to qemu-kvm [s390x])
  - Resolves: RHEL-73008
    ([IBM 10.2 FEAT] KVM: Implement Control Program Identification (qemu))
  - Resolves: RHEL-118810
    ([RHEL 10.2] Windows 11 VM fails to boot up with ramfb='on' with QEMU 10.1)
  - Resolves: RHEL-105826
    (Add new -rhel10.2.0 machine type to qemu-kvm [aarch64])
  - Resolves: RHEL-105828
    (Add new -rhel10.2.0 machine type to qemu-kvm [x86_64])
  - Resolves: RHEL-101929
    (enable 'usb-bot' device for proper support of USB CD-ROM drives via libvirt  )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-5
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120116]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120116]
  - kvm-vfio-Disable-VFIO-migration-with-MultiFD-support.patch [RHEL-126573]
  - kvm-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-from-10..patch [RHEL-67323]
  - kvm-hw-arm-smmu-common-Check-SMMU-has-PCIe-Root-Complex-.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Re-arrange-SMMUv3-IORT-build.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Update-IORT-for-multiple-smmu.patch [RHEL-73800]
  - kvm-hw-arm-virt-Factor-out-common-SMMUV3-dt-bindings-cod.patch [RHEL-73800]
  - kvm-hw-arm-virt-Add-an-SMMU_IO_LEN-macro.patch [RHEL-73800]
  - kvm-hw-pci-Introduce-pci_setup_iommu_per_bus-for-per-bus.patch [RHEL-73800]
  - kvm-hw-arm-virt-Allow-user-creatable-SMMUv3-dev-instanti.patch [RHEL-73800]
  - kvm-qemu-options.hx-Document-the-arm-smmuv3-device.patch [RHEL-73800]
  - kvm-bios-tables-test-Allow-for-smmuv3-test-data.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Add-tests-for-legacy-smmuv3-a.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Update-tables-for-smmuv3-test.patch [RHEL-73800]
  - kvm-qtest-Do-not-run-bios-tables-test-on-aarch64.patch []
  - Resolves: RHEL-120116
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-10.2])
  - Resolves: RHEL-126573
    (VFIO migration using multifd should be disabled by default)
  - Resolves: RHEL-67323
    ([aarch64] Support ACPI based PCI hotplug on ARM)
  - Resolves: RHEL-73800
    (NVIDIA:Grace-Hopper:Backport support for user-creatable nested SMMUv3 - RHEL 10.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-6
changelog:
  - kvm-ram-block-attributes-fix-interaction-with-hugetlb-me.patch [RHEL-126708]
  - kvm-ram-block-attributes-Unify-the-retrieval-of-the-bloc.patch [RHEL-126708]
  - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-128085]
  - kvm-Fix-the-typo-of-vfio-pci-device-s-enable-migration-o.patch [RHEL-130704]
  - Resolves: RHEL-126708
    ([RHEL 10]snp guest fail to boot with hugepage)
  - Resolves: RHEL-128085
    (VM crashes during boot when virtio device is attached through vfio_ccw)
  - Resolves: RHEL-130704
    ([rhel10] Fix the typo under vfio-pci device's enable-migration option )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-7
changelog:
  - kvm-pcie_sriov-Fix-broken-MMIO-accesses-from-SR-IOV-VFs.patch [RHEL-120115]
  - kvm-arm-fix-oob-access-in-compat-handling.patch [RHEL-130478]
  - Resolves: RHEL-120115
    (The vf nic created using the IGB emulated nic can not obtain ip address )
  - Resolves: RHEL-130478
    (Migration from RHEL 10.2 to RHEL 10.1 with virt-rhel10.0.0 machine type fails on Grace)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-8
changelog:
  - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540]
  - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543]
  - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212]
  - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212]
  - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212]
  - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212]
  - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212]
  - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212]
  - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212]
  - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212]
  - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212]
  - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212]
  - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212]
  - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212]
  - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212]
  - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212]
  - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212]
  - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212]
  - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212]
  - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212]
  - Resolves: RHEL-129540
    (Assertion failure on drain with iothread and I/O load)
  - Resolves: RHEL-121543
    (The VM hit io error when do S3-PR integration on the pass-through  failover multipath device)
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-9
changelog:
  - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212]
  - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003]
  - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003]
  - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003]
  - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003]
  - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853]
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)
  - Resolves: RHEL-110003
    (Expose block limits of block nodes in QMP and qemu-img)
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-10
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142]
  - Resolves: RHEL-108142
    (QEMU crashes when stopping source VM during live migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-11
changelog:
  - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-126707]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028]
  - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853]
  - Resolves: RHEL-126707
    ([qemu, rhel-10] increase default TSEG size)
  - Resolves: RHEL-139028
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2])
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-12
changelog:
  - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118]
  - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118]
  - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118]
  - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118]
  - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118]
  - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785]
  - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785]
  - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785]
  - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785]
  - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785]
  - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785]
  - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785]
  - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785]
  - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785]
  - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785]
  - kvm-net-implement-tunnel-probing.patch [RHEL-143785]
  - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785]
  - Resolves: RHEL-79118
    ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10])
  - Resolves: RHEL-143785
    (backport support for GSO over UDP tunnel offload)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425]
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749]
  - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584]
  - Resolves: RHEL-147425
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-132749
    (Migrate SCSI PR state and preempt reservation upon live migration)
  - Resolves: RHEL-134989
    (Hotplugged interface device can not be shown in the guest)
  - Resolves: RHEL-146584
    ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-14
changelog:
  - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
  - Resolves: RHEL-153058
    (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
  - Resolves: RHEL-144004
    ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-9
changelog:
  - kvm-Declare-rtl8139-as-deprecated.patch [RHEL-45624]
  - Resolves: RHEL-45624
    (Deprecate rtl8139 NIC in QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-10
changelog:
  - kvm-Enable-uefi-variable-service-for-edk2.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-11
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-105440]
  - Resolves: RHEL-105440
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-12
changelog:
  - kvm-RHEL-Pack-uefi-vars-module.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: John Kacur <jkacur@redhat.com> - 2.6-5
changelog:
  - Added the following upstream patches
    rt-tests-Fix-warnings.patch
    rt-tests-cyclictest-Remove-histogram-totals.patch
    rt-tests-cyclictest-Replace-histogram-code-with-libr.patch
    rt-tests-cyclicdeadline-Add-histogram-support.patch
    rt-tests-cyclics-Fix-json-segfault-when-not-using-hi.patch
    rt-tests-cyclicdeadline-Print-the-histogram-regardle.patch
    rt-tests-cyclicdeadline-Remove-dead-verbose-code-in-.patch
    rt-tests-oslat-should-use-MHz-not-Mhz.patch
    rt-tests-oslat-convert-to-nanoseconds-correctly.patch
  - Added gating.yaml
  - Added tests dir
  Resolves: RHEL-30184


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Tyonnchie Berry <tyberry@redhat.com> - 2.8-5
changelog:
  - Added patch Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch sched_attr-Do-not-define-for-glibc-2.41.patch
  Resolves: RHEL-88470


author: Tyonnchie Berry <tyberry@redhat.com> - 2.9-1
changelog:
  - Rebased to latest upstream version
  - Dropped previously applied patches
  - Cleaned up spec file
  Resolves: RHEL-86705


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-8
changelog:
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!) chronologically
    from the latest:
    - Resolve libs for executable links in COPY_AS_IS, PR 3073
    - Skip invalid disk drives when saving layout PR 3047
    - Do not delete NetBackup logs in case of errors and save
      /usr/openv/netbackup/logs to the restored system after a successful recovery
    - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen
      with NetBackup 10.2.0.1
    - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-10
changelog:
  - skip btrfs subvolumes when detecting ESP partitions
  - fix booting on UEFI systems with multiple CDROM devices
  - fix copying of console kernel cmdline parameters
  - Use git to apply patches in %prep
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!):
    - Backport PR 3250 to fix useless warning that libsystemd-core requires
      additional libraries and ReaR recovery system needs additional libraries
    - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs://
      BACKUP/OUTPUT_URL
  - fix backup of btrfs subvolumes


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-11
changelog:
  - Generate /etc/rear/os.conf during build again, it is better than generating it
    in %post, but do not mark it as config file to allow it to be updated during
    package upgrade and avoid containing an old OS version information


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-3
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-5
changelog:
  - fix support for PowerNV machines without PPC PReP partitions (RHEL-134218)
  - fix duplicate execution of automated recovery (RHEL-110659)
  - fix sorting of stage scripts (RHEL-132181)
  - add support for dbus-broker (RHEL-134213)


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Tomas Popela <tpopela@redhat,com> - 0.1-4
changelog:
  - Migrate to the new flatpak preinstall config format
  - Add collection id to rhel registry config file and reference it from
    preinstall config files
  - Use org.mozilla.Firefox (and not firefox) which is in RHEL


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 284-1
changelog:
  - Use --config=xxx for clang configs instead of two separate arguments to work
    around a bug in meson
  - Add clang link config file


author: Michal Domonkos <mdomonko@redhat.com> - 290-1
changelog:
  - Use upstream versions of find-provides/requires (RHEL-39760)
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-84703)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: pkoprda <pkoprda@redhat.com> - 1.0.0-2
changelog:
  - rhc-playbook-verifier-v1.0.0-2
  - Removes rhc-playbook-signer subpackage from .spec file
  - Resolves: RHEL-115794


author: Rich Megginson <rmeggins@redhat.com> - 1.110.0-0.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - Resolves: RHEL-46227 : ha_cluster - export CIB properties configuration
  - Resolves: RHEL-110865 : network - Ansible RHEL network system role fails cannot find route table main
  - Resolves: RHEL-123026 : network - Skip the loopback profile when deleting all profiles except the ones explicitly included
  - Resolves: RHEL-123016 : sshd - fix: include external config files first so they can override all options
  - Resolves: RHEL-66738 : storage - add support for disk partitioning
  - Resolves: RHEL-115033 : storage - Storage role crashes on systems without /etc/fstab
  - support podman, timesync in container builds


author: Rich Megginson <rmeggins@redhat.com> - 1.110.1-0.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - fixes ansible-test and ansible-lint issues in firewall


author: Rich Megginson <rmeggins@redhat.com> - 1.110.1-1.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - fixes ansible-test issue with firewall


author: Rich Megginson <rmeggins@redhat.com> - 1.111.0-0.1
changelog:
  - Resolves: RHEL-46226 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
  - Resolves: RHEL-128428 : nbde_client - Error in using the RHEL system role for nbde client [rhel-10]
  - Resolves: RHEL-104931 : snapshot - add support for bootable snapsets
  - new role hpc
  - minor firewall update


author: Rich Megginson <rmeggins@redhat.com> - 1.111.0-0.2
changelog:
  - Resolves: RHEL-46226 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
  - revert to community.general 11.4.1 - we cannot use 12.* anymore as they have dropped support for py27 and py36


author: Rich Megginson <rmeggins@redhat.com> - 1.112.0-0.1
changelog:
  - Resolves: RHEL-127971 : sshd - feat: Add new configuration option CanonicalMatchUser on RHEL/CentOS


author: Rich Megginson <rmeggins@redhat.com> - 1.113.0-0.1
changelog:
  - Resolves: RHEL-127971 : sshd - feat: Add new configuration option CanonicalMatchUser on RHEL/CentOS
  - fix ansible-test issues in ha_cluster, sshd
  - rebase all roles to version which has community.general 11.x support (no code changes, only meta)


author: Rich Megginson <rmeggins@redhat.com> - 1.114.0-0.1
changelog:
  - Resolves: RHEL-129309 : aide - cannot manage rhel9.7/10.1 or earlier - unexpected character - line database=file
  - Resolves: RHEL-136597 : ha_cluster - feat: add support for fencing-watchdog-timeout
  - remove hpc role


author: Rich Megginson <rmeggins@redhat.com> - 1.118.0-0.1
changelog:
  - Resolves: RHEL-122052 : Templates in some role license files
  - Resolves: RHEL-120413 : ha_cluster - ha_cluster role does not work in container builds
  - Resolves: RHEL-136607 : metrics - [RFE] configure TLS certificates in grafana using the metrics system role
  - Resolves: RHEL-138277 : ssh - feat: Add new configuration option VersionAddendum
  - Resolves: RHEL-144495 : sshd - feat: New OpenSSH configuration option GSSAPIDelegateCredentials
  - Resolves: RHEL-137261 : storage - in _get_device_id IndexError: list index out of range
  - All roles support INJECT_FACTS_AS_VARS=false
  - metrics - test: do not restore service if final state not-found
  - sshd - feat: Add systemd ephemeral authorized_keys to the instantiated service file on Fedora
  - storage - fix: add vdo package for Fedora OSTree


author: Rich Megginson <rmeggins@redhat.com> - 1.118.0-0.2
changelog:
  - Resolves: RHEL-122052 : Templates in some role license files
  - Fix ansible-test issue with community.general.ini_file module 11.4.4 in documentation string


author: Rich Megginson <rmeggins@redhat.com> - 1.119.0-0.1
changelog:
  - Resolves: RHEL-144914 : postgresql - add PostgreSQL 18
  - fix upstream shellcheck issue in nbde_client role


author: Rich Megginson <rmeggins@redhat.com> - 1.119.1-0.0.1
changelog:
  - Resolves: RHEL-144914 : postgresql - add PostgreSQL 18 - fixes test issue
  - Resolves: RHEL-135522 : snapshot - Snapshot role ignores snapshot_lvm_bootable: true setting when creating a snapset
  - Resolves: RHEL-123523 : storage -  ZeroDivisionError when creating LVM volume without size specification


author: Rich Megginson <rmeggins@redhat.com> - 1.120.1-0.1
changelog:
  - Resolves: RHEL-145214 : selinux - Missing proto 'sctp' and 'dccp'
  - Resolves: RHEL-145219 : vpn - [ERROR]: Task failed: object of type 'dict' has no attribute '1.1.1.1'


author: Rich Megginson <rmeggins@redhat.com> - 1.120.2-0.1
changelog:
  - Resolves: RHEL-145214 : selinux - Missing proto 'sctp' and 'dccp'
  - timesync - fix: use ansible_facts timesync_ntp_provider_current


author: Rich Megginson <rmeggins@redhat.com> - 1.120.3-0.1
changelog:
  - Resolves: RHEL-150780 : firewall - fix: el7 interface functionality requires NetworkManager
  - Resolves: RHEL-145247 : selinux - [v 1.10.4] Prepare module installation -> "Template error: object of type 'dict' has no attribute 'path'"
  - ha_cluster - fix: ostree - add dnf/dnf5 package, add firewall packages
  - metrics - test: ostree - add package pcp-pmda-apache, role certificate
  - systemd - test: ostree requires cronie package for testing


author: Rich Megginson <rmeggins@redhat.com> - 1.120.4-0.1
changelog:
  - Resolves: RHEL-150780 : firewall - fix: el7 interface functionality requires NetworkManager
  - firewall - test: ensure interface chosen is managed by NetworkManager


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100438)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744)
  - zipl: makedumpfile is required for ngdump support (RHEL-114661)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109214)
  - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100438)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829)
  - Secure Execution: Add tool to verify host-key documents (RHEL-136795)
  - Resolves: RHEL-100438 RHEL-71829 RHEL-136795


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-36
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-113741
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-114454
  - Add support for Image Mode
    Resolves: RHEL-114454


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Jan Černý <jcerny@redhat.com> - 0.1.68-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.68 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.68


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.69 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.69


author: Matthew Burket <mburket@redhat.com> - 0.1.70-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.70 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.70


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.71-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.71 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.71


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.72-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.72 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.72


author: Matthew Burket <mburket@redhat.com>
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.74 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.77-2
changelog:
  - fix incorrect applicability of Grub2 UEFI specific rules
  - replace grub-mkconfig with grub2-mkconfig in rule descriptions


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.80-1
changelog:
  - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300)
  - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647)
  - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549)
  - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722)
  - Corrected version in the description of CIS profiles (RHEL-143955)
  - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059)


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-6
changelog:
  - seabios-pciinit-don-t-misalign-large-BARs.patch [RHEL-67847]
  - Resolves: RHEL-67847
    (amdgpu failed to initialize when multiple AMD MI210 GPUs assigned and firmware is seabios [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-7
changelog:
  - seabios-Remove-iasl-from-BuildRequires.patch [RHEL-68975]
  - Resolves: RHEL-68975
    (remove iasl build dependency)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-8
changelog:
  - seabios-update-release-date.patch [RHEL-126466]
  - Resolves: RHEL-126466
    (SeaBIOS date is "stuck" at 2014 even for recent releases)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.17.0-1
changelog:
  - Rebase to seabios 1.17.0
  - Resolves: RHEL-127509
    (rebase seabios to upstream release 1.17.0)
  - Resolves: RHEL-64639
    ([RHEL-10] Grub graphics modules crash VM when there's no graphics)


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.8-1
changelog:
  - Reapply "Add insights_core interfaces"
  Resolves: RHEL-112368
  - Reapply "Add policy for insights-core"
  Resolves: RHEL-112368


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.9-1
changelog:
  - Allow systemd-oomd watch tmpfs dirs
  Resolves: RHEL-106998
  - Allow systemd-oomd watch dbus pid sock files
  Resolves: RHEL-106998
  - Allow userdomain to connect to systemd-oomd over a unix socket
  Resolves: RHEL-106998
  - Allow 'oomctl dump' to interact with systemd-oomd
  Resolves: RHEL-106998
  - Basic functionality for systemd-oomd
  Resolves: RHEL-106998
  - Basic enablement for systemd-oomd
  Resolves: RHEL-106998
  - Remove permissive domains
  Resolves: RHEL-107038
  - Allow iptables manage its private fifo_files in /tmp
  Resolves: RHEL-83775
  - Allow ras-mc-ctl write to sysfs files
  Resolves: RHEL-86926
  - Allow nfs generator create and use netlink sockets
  Resolves: RHEL-111556
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.10-1
changelog:
  - Allow sshd-auth read generic proc files
  Resolves: RHEL-107732
  - Allow sshd-auth read and write user domain ptys
  Resolves: RHEL-107732
  - Allow sshd-session get attributes of sshd vsock socket
  Resolves: RHEL-107732
  - Adjust guest and xguest users policy for sshd-session
  Resolves: RHEL-107732
  - Update files_search_base_file_types()
  Resolves: RHEL-107732
  - Allow sshd-session read cockpit pid files
  Resolves: RHEL-107732
  - Add default contexts for sshd-seesion
  Resolves: RHEL-107732
  - Define types for new openssh executables
  Resolves: RHEL-107732
  - Allow ras-mc-ctl get attributes of the kmod executable
  Resolves: RHEL-102535
  - Define file equivalency for /var/opt
  Resolves: RHEL-116512
  - Update specfile triggers for DSP modules
  Resolves: RHEL-116044


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.11-1
changelog:
  - Allow iotop stream connect to systemd-userdbd
  Resolves: RHEL-105481
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-107589
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-124855
  - Allow nfsidmapd search virt lib directories
  Resolves: RHEL-68722
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.12-1
changelog:
  - Update kernel_secretmem_use()
  Resolves: RHEL-116154
  - Allow system_mail_t read apache system content conditionally
  Resolves: RHEL-114970
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-119619
  - Update specfile trigger for smartmontools
  Resolves: RHEL-113167


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.13-1
changelog:
  - Add the rpm_signal() interface
  Related: RHEL-107589
  - Allow tuned_t use its private tmpfs files
  Related: RHEL-107589
  - Allow samba-bgqd send to smbd over a unix datagram socket
  Resolves: RHEL-93731
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041
  - Confine redfish_finder - host api discovery service
  Resolves: RHEL-50299
  - Update policy for dhcpc_hook_t
  Resolves: RHEL-113937
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  Resolves: RHEL-113937
  - Allow systemd to map files under /sys
  Resolves: RHEL-132638


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.14-1
changelog:
  - Update ktls policy
  Resolves: RHEL-123737
  - Update policy for redfish-finder
  Resolves: RHEL-50299
  - Allow sshd-session read, write, and map ica tmpfs files
  Resolves: RHEL-138247
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  Resolves: RHEL-127721
  - Allow stalld map sysfs files
  Resolves: RHEL-135512
  - Allow aide get attributes of a filesystem with extended attributes
  Resolves: RHEL-121479
  - Label miscellaneous /dev/papr-* devices
  Resolves: RHEL-129839
  - Allow KDE Plasma Login Manager to function as a display manager
  Resolves: RHEL-135676
  - Update specfile trigger for openwsmand
  Resolves: RHEL-133024


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.15-1
changelog:
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-77047
  - Allow stap server read virtual memory sysctls
  Resolves: RHEL-114104
  - Allow sshd-session inherit limits from its parent process
  Resolves: RHEL-136673
  - Allow sshd noatsecure on sshd-session execution
  Resolves: RHEL-138247
  - Allow sshd-net read and write to sshd vsock socket
  Related: RHEL-138247


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.16-1
changelog:
  - Allow sshd-session inherit limits from its parent sshd process
  Resolves: RHEL-136673
  - Revert "Allow sshd-session inherit limits from its parent process"
  Resolves: RHEL-136673
  - Allow tlshd write generic certificates
  Resolves: RHEL-123737
  - Allow systemd-hostnamed to create its Varlink socket
  Resolves: RHEL-139385
  - Update gpg_role() interface with unix_stream_socket permissions
  Resolves: RHEL-128555
  - Label /etc/aliases.cdb with etc_aliases_t
  Resolves: RHEL-109976
  - Add aliases.lmdb to mta_filetrans_named_content()
  Resolves: RHEL-140884
  - Update policy for bootupd
  Resolves: RHEL-141391


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.17-1
changelog:
  - Allow rhsmcertd read anaconda run files
  Resolves: RHEL-141391
  - Allow mdadm to use CAP_BPF during RAID monitoring
  Resolves: RHEL-135765
  - Allow mdadm the CAP_SYS_PTRACE capability
  Resolves: RHEL-135765
  - Allow staff and sysadm execute iotop using sudo
  Resolves: RHEL-134940
  - Allow kernel_t to read/write all domains' pipes
  Resolves: RHEL-124442
  - Allow nfsd_t domain setuid and setgid capability for rpc.mountd
  Resolves: RHEL-148107


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.18-1
changelog:
  - Allow NetworkManager list bpf directories
  Resolves: RHEL-142171
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  Resolves: RHEL-114886
  - Allow pkcsslotd read files in /proc and /sys
  Resolves: RHEL-130812
  - Allow pkcsslotd map its private tmpfs files
  Resolves: RHEL-130812
  - Allow tlshd communication to unconfined_t over a tcp socket
  Resolves: RHEL-125106
  - Label /run/insights-client.ppid with insights_client_run_t
  Resolves: RHEL-146687
  - Allow NM nvme dispatcher script start systemd services
  Resolves: RHEL-140760
  - Allow tlshd write generic certificate dirs
  Resolves: RHEL-127023
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  Resolves: RHEL-121479
  - Allow plasma login manager stop login services
  Resolves: RHEL-140911
  - Rebuild selinux policy after installation of the extra package
  Resolves: RHEL-135875
  Resolves: RHEL-143926
  - Move triggerin scriptlets to the parent packages
  Resolves: RHEL-141813
  - Rebuild policy before running {binsbin|varrun}-convert.sh
  Resolves: RHEL-141813


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.19-1
changelog:
  - Label the greetd login manager framework as a display manager
  Resolves: RHEL-147638
  - Allow sysadm user connect to lvm over a unix stream socket
  Resolves: RHEL-153729
  - Allow virtqemud map vhost net device
  Resolves: RHEL-141541
  - Allow virtqemud_t send kill signal to svirt_tcg_t
  Resolves: RHEL-69913
  - Allow virtqemud_t get priority of a svirt_t process
  Resolves: RHEL-69920
  - Dontaudit tlshd write generic certificate dirs
  Resolves: RHEL-152619
  - Allow redis_t to create netlink_rdma_socket
  Resolves: RHEL-154814
  - Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
  Resolves: RHEL-140212


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - new upstream release
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-2
changelog:
  - use %configure RPM macro instead of bare ./configure to inject
    RPM hardening flags (stack protector, FORTIFY_SOURCE)
  - use %make_build and %make_install RPM macros
  - Resolves: RHEL-152227


author: Kalev Lember <klember@redhat.com> - 45.0-2
changelog:
  - Package review fixes (rhbz#2241553)
  - Add SourceLicense tag to distinguish between the license of the app
    itself and its crate deps
  - Slightly change virtual provides for bundled aperture crate to better
    match other rust packages


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-9
changelog:
  - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-10
changelog:
  - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0
  - Drop upstreamed patches


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Make queue_track the default backend
  - Remove LTO build flags
  - Remove the -m64 build flag
  Resolves: RHEL-105604 RHEL-114506


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Leo Sandoval <lsandova@redhat.com> - 6.04-0.32
changelog:
  - Bump version and include previous resolves ticket number on commit message
  - Resolves: #RHEL-51170


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-22
changelog:
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
  - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
  - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
  - hwdb: update rules (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - Add Razer Cobra mouse to hwdb (RHEL-72702)
  - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
  - hwdb: sort SDR devices by vendor name (RHEL-72702)
  - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
  - hwdb: run "update-hwdb" (RHEL-72702)
  - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
  - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
  - hwdb: add Airspy devices (RHEL-72702)
  - hwdb: add more devices (RHEL-72702)
  - hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
  - hwdb: add missing Ettus Research B200 rule (RHEL-72702)
  - hwdb: add LimeSDR XTRX devices (RHEL-72702)
  - hwdb: add HydraSDR RFOne (RHEL-72702)
  - hwdb: add SDRplay devices (RHEL-72702)
  - hwdb: update (RHEL-72702)
  - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
  - Add Nulea M501 trackball to hwdb (RHEL-72702)
  - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
  - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
  - remove bonus line (RHEL-72702)
  - hwdb: drop trailing whitespace (RHEL-72702)
  - remove Nulea M501 usb entry from hwdb (RHEL-72702)
  - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702)
  - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702)
  - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702)
  - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702)
  - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702)
  - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702)
  - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702)
  - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702)
  - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702)
  - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702)
  - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702)
  - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702)
  - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702)
  - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702)
  - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702)
  - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702)
  - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702)
  - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702)
  - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702)
  - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702)
  - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702)
  - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702)
  - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702)
  - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702)
  - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard   device as set 1 (appears as raw set 2) or as set 2 (appears as   translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for   posterity. (RHEL-72702)
  - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702)
  - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702)
  - hwdb: keyboard: uppercase apple id (RHEL-72702)
  - integritysetup: Add support for hmac-sha512 (RHEL-27852)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852)
  - core: increment start limit counter only when we can start the unit (RHEL-115032)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032)
  - test: extend start limit interval (RHEL-115032)
  - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029)
  - man: fix typo (RHEL-143029)
  - test: fix test with -Dnetworkd=false (RHEL-143029)
  - ci: run apt-get update before running mkosi (RHEL-115001)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-23
changelog:
  - test-journal-dump: dump the headers of journal files (RHEL-106795)
  - journal: store counts, not byte sizes, in table size constants (RHEL-106795)
  - journal: treble field hash table size (RHEL-106795)
  - nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
  - user-classification: add new "foreign" UID range (RHEL-143036)
  - userdb: synthesize stub user records for the foreign UID (RHEL-143036)
  - dissect: add new --shift command (RHEL-143036)
  - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
  - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
  - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
  - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
  - sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
  - user-record: add helper for dispatching a disposition mask (RHEL-143036)
  - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036)
  - user-record: add some helpers for working with UserDBMatch (RHEL-143036)
  - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
  - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
  - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
  - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
  - update TODO (RHEL-143036)
  - JSON User/Group records: Add properties for UUIDs (RHEL-143036)
  - userdb: add support for printing the UUID from user and group records (RHEL-143036)
  - userdb: add support for looking up users or groups by uuid. (RHEL-143036)
  - userdbctl: add --uuid filtering option (RHEL-143036)
  - userdbctl: add missing --uuid= to --help text (RHEL-143036)
  - userdb: fix typo (RHEL-143036)
  - man/userdbctl: fixup version info (RHEL-143036)
  - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
  - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
  - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
  - logind: support deserializing session leader through pidfdid (RHEL-53112)
  - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
  - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
  - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219)
  - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Kate Hsuan <hpa@redhat.com> - 2.5.10-1
changelog:
  - Update to the upstream version 2.5.10
  - Update to 2.5.10 the commits 3144beaf22c4a (Update Panther Lake sysfs
    paths) be2049afdee80 (Add Panther Lake to the supported list)
    03b4a139388f6 (Check for target code ITMT3) were included in the 2.5.10
    release.
  - Include commits c921e802f6e49 (Compile issue on i586 for time_t print)
    352125763b8f9 (itmt3 support) to enable itmt3 support.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-2
changelog:
  - Resolves: RHEL-50166 - Rebase tomcat to version 9.0.87
  - Resolves: RHEL-12274 - Use src.zip file as a Source0 instead of tar.gz
  - Resolves: RHEL-51277 - Prune changelog to remove non-relevant history
  - Resolves: RHEL-52906 - tomcat: Switch to using Java 21 as the default JDK
  - Resolves: RHEL-55194 - Fix changelog version
  - Resolves: RHEL-46156
    tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-1
changelog:
  - Rebase tomcat to 10.1.36
  - Resolves: RHEL-82925
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)
  - Resolves: RHEL-87272
    tomcat: DoS in examples web application (CVE-2024-54677)
  - Resolves: RHEL-87273
    tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316)
  - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-2
changelog:
  - Resolves: RHEL-108900
    tomcat: Apache  FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108902
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108904
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108908
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-3
changelog:
  - Resolves: RHEL-102184
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
  - Resolves: RHEL-108906
    tomcat: Denial of service (CVE-2025-52520)


author: Pietro Meloni - 1:10.1.36-4
changelog:
  - Resolves: RHEL-124493
    tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
  - Resolves: RHEL-132560
    tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
  - Resolves: RHEL-132526
    tomcat: Denial of service (CVE-2025-61795)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-2
changelog:
  - Initial commit on c10s
    Resolves: RHEL-69841
  - tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-5
changelog:
  - Resolves: RHEL-82927
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-5.el10_0.1
changelog:
  - Resolves: RHEL-91750
    tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)
  - Resolves: RHEL-94960
    tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-7
changelog:
  - Resolves: RHEL-108485
    tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108493
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108501
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108509
    tomcat: Denial of service (CVE-2025-52434)
  - Resolves: RHEL-108522
    tomcat: Denial of service (CVE-2025-52520)
  - Resolves: RHEL-108517
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-8
changelog:
  - Resolves: RHEL-102186
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)


author: Pietro Meloni <pmeloni@redhat.com> - 1:9.0.87-9
changelog:
  - Resolves: RHEL-124496
    tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
  - Resolves: RHEL-132559
    tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.110-1
changelog:
  - Resolves: RHEL-148687
    Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-7
changelog:
  - Unbreak Podman's downstream Fedora CI
  - Update the BuildRequires on golang to reflect reality
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-8
changelog:
  - Unbreak Podman's downstream Fedora CI (part 2)
  - Backport some new upstream tests
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Tomas Popela <tpopela@redhat.com> - 3.7.4-1
changelog:
  - Update to 3.7.4 and sync the macro naming with Fedora
    Resolves: RHEL-71387
  - Drop references to non-existent tracker-extract-3.service
    Resolves: RHEL-70242


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94809
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
    - functions: make calc_isolated_cores return CPU ranges
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: disable appropriate P-State drivers
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    - gui: fix the profile deleter script


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.27.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-123608
    - cpu-partitioning: autodetect dracut hook directory, systemd workaround
      resolves: RHEL-40619
    - openshift: optimize TCP settings for high throughput and low latency
    - profiles: Set boost=1 in *-performance profiles
    - sap-hana: force latency to 70 us, not to C-states
      resolves: RHEL-142285
    - man: fixed instance_acquire_devices example in tuned-adm man
      resolves: RHEL-90575
    - spec: use correct python interpreter for documentation installation
    - sysctl: add reapply_sysctl_exclude option
    - ppd: ask tuned recommend for base profile


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2023d-2
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <pats@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84740)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Patsy Griffin <patsy@redhat.com> - 2026a-1
changelog:
  - Update to tzdata-2026a (RHEL-154023)
    - Correct the transition times for Moldova.
    - The POSIXRULES option is now obsolete.


author: Benson Muite <benson_muite@emailplus.org> - 1.13.1-3
changelog:
  - Fix type declaration error
  - Fix to enable use of GCC 13
  - Use SPDX license identifier
  - Fix build requires #RBZ2166925


author: Vit Mojzis <vmojzis@redhat.com> - 0.2.7-5
changelog:
  - Show diff when checking formatting
  - Fix several lint findings
  - Fix generating policy for Crio mounts


author: Jens Petersen <petersen@redhat.com> - 15.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode15.0.0/ (#2126234)
  - http://blog.unicode.org/2022/09/announcing-unicode-standard-version-150.html


author: Jens Petersen <petersen@redhat.com> - 15.1.0-0.1
changelog:
  - update to draft 15.1.0: https://unicode.org/versions/Unicode15.1.0/
  - do not add copyright.html file from website
  - add missing Unicode-TOU license tag


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - selinux: comply with with the "Unify bin and sbin" change
    Resolves: RHEL-113206
  - Restore permissions of the log directory
    Resolves: RHEL-92260


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later
  - Clarify License of valgrind-scripts.


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-4
changelog:
  - Add VALGRIND_3_26_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
    - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
    - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
    - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
    - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
    - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch
    - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
    - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


