# changelog

author: Jan Stancek <jstancek@redhat.com> [6.12.0-37.el10]
changelog:
  - vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data() (Alex Williamson) [RHEL-69747]
  - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (Alex Williamson) [RHEL-69747]
  - i40e: Fix handling changed priv flags (Kamal Heib) [RHEL-69737]
  - RHEL-only: mark ublk as tech preview (Ming Lei) [RHEL-50740]
  - Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()" (Ming Lei) [RHEL-67720]
  - block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (Ming Lei) [RHEL-70861]
  - loop: fix type of block size (Ming Lei) [RHEL-65631]
  - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC (Phil Auld) [RHEL-70901]
  - sched/deadline: Fix warning in migrate_enable for boosted tasks (Phil Auld) [RHEL-70901]
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (Phil Auld) [RHEL-70901]
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (Phil Auld) [RHEL-70901]
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (Phil Auld) [RHEL-70901]
  - sched: fix warning in sched_setaffinity (Phil Auld) [RHEL-70901]
  - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel (Phil Auld) [RHEL-70901]
  - sched/deadline: Fix replenish_dl_new_period dl_server condition (Phil Auld) [RHEL-70901]
  - vfio/mlx5: Align the page tracking max message size with the device capability (CKI Backport Bot) [RHEL-69932]
  - tools/rtla: Improve exception handling in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: Enhance argument parsing in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: Improve code readability in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Do not set params->user_workload with -U (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: fix collision with glibc sched_attr/sched_set_attr (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: drop __NR_sched_getattr (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla: Fix consistency in getopt_long for timerlat_hist (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla: use the definition for stdout fd when calling isatty() (Luis Claudio R. Goncalves) [RHEL-69739]
  - x86/cacheinfo: Delete global num_cache_leaves (David Arcari) [RHEL-22703]
  - cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (David Arcari) [RHEL-22703]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-38.el10]
changelog:
  - virtio_ring: add a func argument 'recycle_done' to virtqueue_reset() (Cindy Lu) [RHEL-56981]
  - virtio_net: ensure netdev_tx_reset_queue is called on tx ring resize (Cindy Lu) [RHEL-56981]
  - virtio_ring: add a func argument 'recycle_done' to virtqueue_resize() (Cindy Lu) [RHEL-56981]
  - virtio_net: correct netdev_tx_reset_queue() invocation point (Cindy Lu) [RHEL-56981]
  - intel_idle: add Granite Rapids Xeon D support (David Arcari) [RHEL-68122]
  - sched/dlserver: Fix dlserver time accounting (Phil Auld) [RHEL-68342]
  - sched/dlserver: Fix dlserver double enqueue (Phil Auld) [RHEL-68342]
  - sched/fair: Fix NEXT_BUDDY (Phil Auld) [RHEL-68342]
  - sched/fair: Fix sched_can_stop_tick() for fair tasks (Phil Auld) [RHEL-68342]
  - sched/eevdf: More PELT vs DELAYED_DEQUEUE (Phil Auld) [RHEL-68342]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-39.el10]
changelog:
  - platform/x86/intel/pmc: Disable C1 auto-demotion during suspend (Steve Best) [RHEL-66570]
  - platform/x86/intel/pmc: Refactor platform resume functions to use cnl_resume() (Steve Best) [RHEL-66570]
  - redhat/configs: Enable CONFIG_NETKIT for RHEL (Toke Høiland-Jørgensen) [RHEL-51429]
  - bnxt_en: Unregister PTP during PCI shutdown and suspend (Michal Schmidt) [RHEL-54644 RHEL-69499]
  - bnxt_en: Refactor bnxt_ptp_init() (Michal Schmidt) [RHEL-54644 RHEL-69499]
  - bnxt_en: Fix receive ring space parameters when XDP is active (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Fix queue start to update vnic RSS table (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Set backplane link modes correctly for ethtool (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Michal Schmidt) [RHEL-54644]
  - bnxt_en: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-54644]
  - bnxt_en: ethtool: Support unset l4proto on ip4/ip6 ntuple rules (Michal Schmidt) [RHEL-54644]
  - bnxt_en: ethtool: Remove ip4/ip6 ntuple support for IPPROTO_RAW (Michal Schmidt) [RHEL-54644]
  - s390/cio: Externalize full CMG characteristics (Mete Durlu) [RHEL-24140]
  - s390/pci: Expose FIDPARM attribute in sysfs (Mete Durlu) [RHEL-71374]
  - perf machine: Initialize machine->env to address a segfault (Michael Petlan) [RHEL-70278]
  - redhat/kernel.spec.template: Require kernel-tools-libs in rtla (Tomas Glozar) [RHEL-70863]
  - rtla/timerlat: Fix histogram ALL for zero samples (Tomas Glozar) [RHEL-72691]
  - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-24143]
  - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-24143]
  - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-24143]
  - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-24143]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-40.el10]
changelog:
  - selftests: netfilter: Stabilize rpath.sh (Phil Sutter) [RHEL-71139]
  - redhat/configs: automotive: disable CONFIG_AIO (Davide Caratti) [RHEL-71905]
  - redhat/configs: enable CONFIG_USB_XHCI_PCI_RENESAS on RHEL (Desnes Nunes) [RHEL-73371]
  - RHEL: Set correct config option for CRYPTO_HMAC_S390 (Mete Durlu) [RHEL-24137]
  - redhat/configs: automotive: disable CONFIG_NET_DROP_MONITOR (Davide Caratti) [RHEL-70868]
  - qed: put cond_resched() in qed_dmae_operation_wait() (CKI Backport Bot) [RHEL-71560]
  - qed: allow the callee of qed_mcp_nvm_read() to sleep (CKI Backport Bot) [RHEL-71560]
  - qed: put cond_resched() in qed_grc_dump_ctx_data() (CKI Backport Bot) [RHEL-71560]
  - qed: make 'ethtool -d' 10 times faster (CKI Backport Bot) [RHEL-71560]
  - x86/sev: Convert shared memory back to private on kexec (Vitaly Kuznetsov) [RHEL-68482]
  - x86/mm: Refactor __set_clr_pte_enc() (Vitaly Kuznetsov) [RHEL-68482]
  - x86/boot: Skip video memory access in the decompressor for SEV-ES/SNP (Vitaly Kuznetsov) [RHEL-68482]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-41.el10]
changelog:
  - netfilter: IDLETIMER: Fix for possible ABBA deadlock (Phil Sutter) [RHEL-70301]
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-73194]
  - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-68691]
  - sched/numa: fix memory leak due to the overwritten vma->numab_state (Phil Auld) [RHEL-67478]
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter) [RHEL-71827]
  - NFSD: Mark exports of NFS as unsupported (Benjamin Coddington) [RHEL-50656]
  - netdev-genl: Hold rcu_read_lock in napi_get (Paolo Abeni) [RHEL-73205]
  - net: avoid potential UAF in default_operstate() (Paolo Abeni) [RHEL-73205] {CVE-2024-56635}
  - net: defer final 'struct net' free in netns dismantle (Paolo Abeni) [RHEL-73205] {CVE-2024-56658}
  - net: restrict SO_REUSEPORT to inet sockets (Paolo Abeni) [RHEL-73205]
  - Revert "rtnetlink: add guard for RTNL" (Paolo Abeni) [RHEL-73205]
  - netlink: fix false positive warning in extack during dumps (Paolo Abeni) [RHEL-73205] {CVE-2024-53212}
  - tcp: check space before adding MPTCP SYN options (Paolo Abeni) [RHEL-73143]
  - net: fix memory leak in tcp_conn_request() (Paolo Abeni) [RHEL-73143]
  - Revert "udp: avoid calling sock_def_readable() if possible" (Paolo Abeni) [RHEL-73132]
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [RHEL-69538]
  - redhat: make kernel-debug-uki-virt installable without kernel-debug-core (Vitaly Kuznetsov) [RHEL-72983]
  - KVM: arm64: Fix S1/S2 combination when FWB==1 and S2 has Device memory type (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add error handling in vgic_its_cache_translation (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: selftests: Add tests for MMIO external abort injection (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: selftests: Convert to kernel's ESR terminology (Shaoqin Huang) [RHEL-68039]
  - tools: arm64: Grab a copy of esr.h from kernel (Shaoqin Huang) [RHEL-68039]
  - KVM: selftests: Don't bother deleting memslots in KVM when freeing VMs (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic: Kill VGIC_MAX_PRIVATE definition (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic: Make vgic_get_irq() more robust (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Pass on SVE mapping failures (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Don't map 'kvm_vgic_global_state' at EL2 with pKVM (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Just advertise SEIS as 0 when emulating ICC_CTLR_EL1 (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Don't retire aborted MMIO instruction (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Get rid of userspace_irqchip_in_use (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Initialize trap register values in hyp in pKVM (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Initialize the hypervisor's VM state at EL2 (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Refactor kvm_vcpu_enable_ptrauth() for hyp use (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Move pkvm_vcpu_init_traps() to init_pkvm_hyp_vcpu() (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Correctly access TCR2_EL1, PIR_EL1, PIRE0_EL1 with VHE (Shaoqin Huang) [RHEL-68039]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-42.el10]
changelog:
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long) [RHEL-73195]
  - KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (Vitaly Kuznetsov) [RHEL-71416]
  - redhat/configs: enable ARCH_TEGRA_241_SOC (Mark Salter) [RHEL-67684]
  - x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation (Steve Best) [RHEL-68393]
  - net: sysctl: allow dump_cpumask to handle higher numbers of CPUs (Antoine Tenart) [RHEL-73199]
  - net: sysctl: do not reserve an extra char in dump_cpumask temporary buffer (Antoine Tenart) [RHEL-73199]
  - net: sysctl: remove always-true condition (Antoine Tenart) [RHEL-73199]
  - net: tcp: Add noinline_for_tracing annotation for tcp_drop_reason() (Antoine Tenart) [RHEL-73172]
  - compiler_types: Add noinline_for_tracing annotation (Antoine Tenart) [RHEL-73172]
  - net: vxlan: replace VXLAN_INVALID_HDR with VNI_NOT_FOUND (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in encap_bypass_if_local() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_encap_bypass() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_mdb_xmit() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: add drop reasons support to vxlan_xmit_one() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_xmit() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_set_mac() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_snoop() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_remcsum() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: add skb drop reasons to vxlan_rcv() (Antoine Tenart) [RHEL-73172]
  - net: tunnel: make skb_vlan_inet_prepare() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: tunnel: add pskb_inet_may_pull_reason() helper (Antoine Tenart) [RHEL-73172]
  - net: skb: add pskb_network_may_pull_reason() helper (Antoine Tenart) [RHEL-73172]
  - redhat: Install bpftool into BPF selftests dir (Viktor Malik) [RHEL-73480]
  - redhat: Drop bpftool from kernel spec (Viktor Malik) [RHEL-73480]
  - tools/power turbostat: Add initial support for GraniteRapids-D (Eddie Kovsky) [RHEL-29354]
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Steve Best) [RHEL-73490] {CVE-2024-56739}
  - powerpc/mm/fault: Fix kfence page fault reporting (Mamatha Inamdar) [RHEL-73630]
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (CKI Backport Bot) [RHEL-73198]
  - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features (CKI Backport Bot) [RHEL-73198]
  - net, team, bonding: Add netdev_base_features helper (CKI Backport Bot) [RHEL-73198]
  - bonding: add ESP offload features when slaves support (CKI Backport Bot) [RHEL-73198]
  - Documentation: bonding: add XDP support explanation (CKI Backport Bot) [RHEL-73198]
  - bonding: return detailed error when loading native XDP fails (CKI Backport Bot) [RHEL-73198]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-43.el10]
changelog:
  - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged (CKI Backport Bot) [RHEL-39340]
  - vfio/pci: Fallback huge faults for unaligned pfn (Alex Williamson) [RHEL-72822]
  - iommu/tegra241-cmdqv: do not use smp_processor_id in preemptible context (Luis Claudio R. Goncalves) [RHEL-74342]
  - net: sched: fix ordering of qlen adjustment (CKI Backport Bot) [RHEL-73395] {CVE-2024-53164}
  - net_sched: sch_fq: don't follow the fast path if Tx is behind now (CKI Backport Bot) [RHEL-73395]
  - s390/uvdevice: Support longer secret lists (Mete Durlu) [RHEL-25204]
  - s390/uv: Retrieve UV secrets sysfs support (Mete Durlu) [RHEL-25204]
  - s390/uvdevice: Increase indent in IOCTL definitions (Mete Durlu) [RHEL-25204]
  - s390/uvdevice: Add Retrieve Secret IOCTL (Mete Durlu) [RHEL-25204]
  - s390/uv: Retrieve UV secrets support (Mete Durlu) [RHEL-25204]
  - s390/uv: Use a constant for more-data rc (Mete Durlu) [RHEL-25204]
  - s390/uv: Provide host-key hashes in sysfs (Mete Durlu) [RHEL-47110]
  - s390/uv: Refactor uv-sysfs creation (Mete Durlu) [RHEL-47110]
  - net/l2tp: fix warning in l2tp_exit_net found by syzbot (Guillaume Nault) [RHEL-73846]
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Guillaume Nault) [RHEL-73846]
  - net: Fix netns for ip_tunnel_init_flow() (Guillaume Nault) [RHEL-73846]
  - futex: fix user access on powerpc (Waiman Long) [RHEL-70187]
  - x86: fix off-by-one in access_ok() (Waiman Long) [RHEL-70187]
  - futex: improve user space accesses (Waiman Long) [RHEL-70187]
  - s390/pci: Add pci_msg debug view to PCI report (Mete Durlu) [RHEL-24144]
  - s390/debug: Add a reverse mode for debug_dump() (Mete Durlu) [RHEL-24144]
  - s390/debug: Add debug_dump() to write debug view to a string buffer (Mete Durlu) [RHEL-24144]
  - s390/debug: Split private data alloc/free out of file operations (Mete Durlu) [RHEL-24144]
  - s390/debug: Simplify and document debug_next_entry() logic (Mete Durlu) [RHEL-24144]
  - s390/pci: Report PCI error recovery results via SCLP (Mete Durlu) [RHEL-24144]
  - s390/debug: Pass in and enforce output buffer size for format handlers (Mete Durlu) [RHEL-24144]
  - s390/sclp: Allow user-space to provide PCI reports for optical modules (Mete Durlu) [RHEL-71264]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-44.el10]
changelog:
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74386]
  - redhat/configs: Disable deprecated CONFIG_LCS option on s390 (Mete Durlu) [RHEL-68296]
  - powerpc/pseries/iommu: Don't unset window if it was never set (Mamatha Inamdar) [RHEL-74222]
  - selftests: net: local_termination: require mausezahn (CKI Backport Bot) [RHEL-74034]
  - selftests: openvswitch: fix tcpdump execution (CKI Backport Bot) [RHEL-74034]
  - selftests: rds: move test.py to TEST_FILES (CKI Backport Bot) [RHEL-74034]
  - selftests: netfilter: Fix missing return values in conntrack_dump_flush (CKI Backport Bot) [RHEL-74034]
  - selftests: net: include lib/sh/*.sh with lib.sh (CKI Backport Bot) [RHEL-74034]
  - selftests: tls: add a selftest for wrapping rec_seq (CKI Backport Bot) [RHEL-74034]
  - selftests: ETS: Use defer for test cleanup (CKI Backport Bot) [RHEL-74034]
  - selftests: TBF: Use defer for test cleanup (CKI Backport Bot) [RHEL-74034]
  - selftests: RED: Use defer for test cleanup (CKI Backport Bot) [RHEL-74034]
  - selftests: forwarding: lib: Allow passing PID to stop_traffic() (CKI Backport Bot) [RHEL-74034]
  - selftests: forwarding: Add a fallback cleanup() (CKI Backport Bot) [RHEL-74034]
  - selftests: net: lib: Introduce deferred commands (CKI Backport Bot) [RHEL-74034]
  - selftests: net: move EXTRA_CLEAN of libynl.a into ynl.mk (CKI Backport Bot) [RHEL-74034]
  - selftests: net: rebuild YNL if dependencies changed (CKI Backport Bot) [RHEL-74034]
  - ipmr: tune the ipmr_can_free_table() checks. (CKI Backport Bot) [RHEL-74037]
  - ipmr: fix build with clang and DEBUG_NET disabled. (CKI Backport Bot) [RHEL-74037]
  - net/ipv6: release expired exception dst cached in socket (CKI Backport Bot) [RHEL-74037]
  - ipv6: avoid possible NULL deref in modify_prefix_route() (CKI Backport Bot) [RHEL-74037]
  - ipmr: fix tables suspicious RCU usage (CKI Backport Bot) [RHEL-74037]
  - ip6mr: fix tables suspicious RCU usage (CKI Backport Bot) [RHEL-74037]
  - ipmr: add debug check for mr table cleanup (CKI Backport Bot) [RHEL-74037]
  - selftests/rtnetlink.sh: add mngtempaddr test (CKI Backport Bot) [RHEL-74037]
  - ipv6: Fix soft lockups in fib6_select_path under high next hop churn (CKI Backport Bot) [RHEL-74037]
  - selftests: net: really check for bg process completion (CKI Backport Bot) [RHEL-74037]
  - ipv6: release nexthop on device removal (CKI Backport Bot) [RHEL-74037]
  - ipv6: switch inet6_acaddr_hash() to less predictable hash (CKI Backport Bot) [RHEL-74037]
  - ipv6: switch inet6_addr_hash() to less predictable hash (CKI Backport Bot) [RHEL-74037]
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (CKI Backport Bot) [RHEL-74024]
  - ptp_pch: Replace deprecated PCI functions (CKI Backport Bot) [RHEL-74024]
  - wireguard: mark as Tech Preview (Hangbin Liu) [RHEL-74327]
  - nbd: fix partial sending (Ming Lei) [RHEL-74229]
  - scsi: lpfc: Fix spelling errors 'asynchronously' (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Copyright updates for 14.4.0.6 patches (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Update lpfc version to 14.4.0.6 (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Modify CGN warning signal calculation based on EDC response (Dick Kennedy) [RHEL-61740]
  - md: reintroduce md-linear (Nigel Croxon) [RHEL-74142]
  - Revert "readahead: properly shorten readahead when falling back to do_page_cache_ra()" (Maxim Levitsky) [RHEL-55724 RHEL-56929] {CVE-2024-57839}
  - i40e: add ability to reset VF for Tx and Rx MDD events (Michal Schmidt) [RHEL-73034]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-45.el10]
changelog:
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CKI Backport Bot) [RHEL-73620]
  - netfilter: nf_tables: imbalance in flowtable binding (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_inner: incorrect percpu area handling under softirq (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level (CKI Backport Bot) [RHEL-73620]
  - netfilter: x_tables: fix LED ID check in led_tg_check() (CKI Backport Bot) [RHEL-73620]
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CKI Backport Bot) [RHEL-73620]
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (CKI Backport Bot) [RHEL-73620]
  - netfilter: bpf: Pass string literal as format argument of request_module() (CKI Backport Bot) [RHEL-73620]
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (CKI Backport Bot) [RHEL-73620]
  - netfilter: nf_tables: must hold rcu read lock while iterating expression type list (CKI Backport Bot) [RHEL-73620]
  - mptcp: fix TCP options overflow. (CKI Backport Bot) [RHEL-73495]
  - mptcp: sysctl: sched: avoid using current->nsproxy (CKI Backport Bot) [RHEL-73495]
  - mptcp: sysctl: blackhole timeout: avoid using current->nsproxy (CKI Backport Bot) [RHEL-73495]
  - KVM: s390: add gen17 facilities to CPU model (Mete Durlu) [RHEL-24195]
  - KVM: s390: add msa11 to cpu model (Mete Durlu) [RHEL-24195]
  - KVM: s390: add concurrent-function facility to cpu model (Mete Durlu) [RHEL-24195]
  - redhat/configs: Re-enable full ZRAM configuration and all backends (Neal Gompa) [RHEL-72036]
  - wireguard: device: support big tcp GSO (CKI Backport Bot) [RHEL-74019]
  - wireguard: selftests: load nf_conntrack if not present (CKI Backport Bot) [RHEL-74019]
  - wireguard: allowedips: remove redundant selftest call (CKI Backport Bot) [RHEL-74019]
  - wireguard: device: omit unnecessary memset of netdev private data (CKI Backport Bot) [RHEL-74019]
  - bpf: Do not alloc arena on unsupported arches (Viktor Malik) [RHEL-68958]
  - powerpc/pseries/eeh: Fix get PE state translation (Mamatha Inamdar) [RHEL-74254]
  - MAINTAINERS: Make Kristen Accardi the IAA crypto driver maintainer (Vladis Dronov) [RHEL-58597]
  - crypto: iaa - Remove potential infinite loop in check_completion() (Vladis Dronov) [RHEL-58597]
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Mete Durlu) [RHEL-74467]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-46.el10]
changelog:
  - redhat: hsr: Mark as tech preview (Felix Maurer) [RHEL-74748]
  - xfs: Mark all experimental code as tech preview (Bill O'Donnell) [RHEL-64936]
  - redhat: create 'debug' addon for UKI (Li Tian) [RHEL-70836]
  - mptcp: disable by default (Davide Caratti) [RHEL-74247]
  - initramfs: avoid filename buffer overrun (Rafael Aquini) [RHEL-73366] {CVE-2024-53142}
  - redhat/configs: set new PKEY_UV option on s390 (Mete Durlu) [RHEL-24135]
  - s390/crypto: Add hardware acceleration for full AES-XTS mode (Mete Durlu) [RHEL-24136]
  - s390/crypto: Postpone the key split to key conversion (Mete Durlu) [RHEL-24136]
  - s390/crypto: Introduce function for tokenize clearkeys (Mete Durlu) [RHEL-24136]
  - s390/crypto: Generalize parameters for key conversion (Mete Durlu) [RHEL-24136]
  - s390/crypto: Use module-local structures for protected keys (Mete Durlu) [RHEL-24136]
  - s390/crypto: Convert to reverse x-mas tree, rename ret to rc (Mete Durlu) [RHEL-24136]
  - s390/pkey: Tolerate larger key blobs (Mete Durlu) [RHEL-24136]
  - s390/pkey: Add new pkey handler module pkey-uv (Mete Durlu) [RHEL-24135]
  - s390/pkey: Build module name array selectively based on kernel config options (Mete Durlu) [RHEL-24135]
  - s390/pkey: Fix checkpatch findings in pkey header file (Mete Durlu) [RHEL-24135]
  - s390/pkey: Rework pkey verify for protected keys (Mete Durlu) [RHEL-24135]
  - s390/pkey: Simplify protected key length calculation code (Mete Durlu) [RHEL-24135]
  - s390/zcrypt: Cleanup include zcrypt_api.h (Mete Durlu) [RHEL-24135]
  - ipvs: speed up reads from ip_vs_conn proc file (Florian Westphal) [RHEL-68933]
  - PCI: Batch BAR sizing operations (Myron Stowe) [RHEL-76026]
  - xfrm: mark packet offload as tech preview (Sabrina Dubroca) [RHEL-75472]
  - mm/kmemleak: fix sleeping function called from invalid context at print message (CKI Backport Bot) [RHEL-74104] {CVE-2024-57885}
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (CKI Backport Bot) [RHEL-74099] {CVE-2024-57884}
  - bnxt_en: Fix DIM shutdown (Michal Schmidt) [RHEL-73718]
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Michal Schmidt) [RHEL-73718]
  - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michal Schmidt) [RHEL-73718]
  - bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (Michal Schmidt) [RHEL-73718]
  - selftests: drv-net: rss_ctx: Add test for ntuple rule (Michal Schmidt) [RHEL-73718]
  - bnxt_en: ethtool: Supply ntuple rss context action (Michal Schmidt) [RHEL-73718]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-47.el10]
changelog:
  - ipvlan: Support bonding events (Hangbin Liu) [RHEL-73828]
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CKI Backport Bot) [RHEL-74443] {CVE-2024-57929}
  - redhat/kernel.spec: work around find-debuginfo aborting cross builds (Jan Stancek) [RHEL-76454]
  - crypto: aes-gcm-p10 - Use the correct bit to test for P10 (Mamatha Inamdar) [RHEL-62818]
  - crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMDand re-enable CRYPTO_AES_GCM_P10 (Mamatha Inamdar) [RHEL-62818]
  - crypto: powerpc/p10-aes-gcm - Register modules as SIMD (Mamatha Inamdar) [RHEL-62818]
  - crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (Mamatha Inamdar) [RHEL-62818]
  - ASoC: Intel: soc-acpi: arl: Add match entries for new cs42l43 laptops (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: soc-acpi: arl: Correct naming of a cs35l56 address struct (Jaroslav Kysela) [RHEL-73890]
  - ALSA: seq: oss: Fix races at processing SysEx messages (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57893}
  - ALSA hda/realtek: Add quirk for Framework F111:000C (Jaroslav Kysela) [RHEL-73890]
  - ALSA: seq: Check UMP support for midi_version change (Jaroslav Kysela) [RHEL-73890]
  - Revert "ALSA: ump: Don't enumeration invalid groups for legacy rawmidi" (Jaroslav Kysela) [RHEL-73890]
  - ASoC: audio-graph-card: Call of_node_put() on correct node (Jaroslav Kysela) [RHEL-73890]
  - sound: usb: format: don't warn that raw DSD is unsupported (Jaroslav Kysela) [RHEL-73890]
  - sound: usb: enable DSD output for ddHiFi TC44C (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda: cs35l56: Remove calls to cs35l56_force_sync_asp1_registers_from_cache() (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: US16x08: Initialize array before use (Jaroslav Kysela) [RHEL-73890]
  - ALSA: sh: Fix wrong argument order for copy_from_iter() (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Shut up truncated string warning (Jaroslav Kysela) [RHEL-73890]
  - ALSA: sh: Use standard helper for buffer accesses (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Update legacy substream names upon FB info update (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Indicate the inactive group in legacy substream names (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Don't open legacy substream for an inactive group (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21Q6 and 21Q7 (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21QA and 21QB (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: ps: Fix for enabling DMIC on acp63 platform via _DSD entry (Jaroslav Kysela) [RHEL-73890]
  - ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57805}
  - ALSA: memalloc: prefer dma_mapping_error() over explicit address checking (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57800}
  - firmware: arm_scmi: Fix i.MX build dependency (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57880}
  - ASoC: fsl_spdif: change IFACE_PCM to IFACE_MIXER (Jaroslav Kysela) [RHEL-73890]
  - ASoC: fsl_xcvr: change IFACE_PCM to IFACE_MIXER (Jaroslav Kysela) [RHEL-73890]
  - ASoC: tas2781: Fix calibration issue in stress test (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: Fix the wrong return value (Jaroslav Kysela) [RHEL-73890]
  - ALSA: control: Avoid WARN() for symlink errors (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56657}
  - ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly" (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda: Fix build error without CONFIG_SND_DEBUG (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: avs: Fix return status of avs_pcm_hw_constraints_init() (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: fix internal mic on Redmi G 2022 (Jaroslav Kysela) [RHEL-73890]
  - ASoC: hdmi-codec: reorder channel allocation list (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Make mic volume workarounds globally applicable (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: soc-acpi-intel-arl-match: Add rt722 and rt1320 support (Jaroslav Kysela) [RHEL-73890]
  - ASoC: sdw_utils: Add quirk to exclude amplifier function (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Add quirks for some new Lenovo laptops (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Add quirk for cs42l43 system using host DMICs (Jaroslav Kysela) [RHEL-73890]
  - ASoC: sdw_utils: Add a quirk to allow the cs42l43 mic DAI to be ignored (Jaroslav Kysela) [RHEL-73890]
  - ASoC: sdw_utils: Add support for exclusion DAI quirks (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Use codec SSID matching for Lenovo devices (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/conexant: Use the new codec SSID matching (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda: Use own quirk lookup helper (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_rt5682: Add HDMI-In capture with rt5682 support for MTL. (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: add mixer mapping for Corsair HS80 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Add extra PID for RME Digiface USB (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-73890]
  - ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec (Jaroslav Kysela) [RHEL-73890]
  - ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() (Jaroslav Kysela) [RHEL-73890]
  - ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Notify xrun for low-latency mode (Jaroslav Kysela) [RHEL-73890]
  - ALSA: seq: ump: Fix seq port updates per FB info notify (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Apply quirk for Medion E15433 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Update ALC225 depop procedure (Jaroslav Kysela) [RHEL-73890]
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53180}
  - ALSA: ump: Fix evaluation of MIDI 1.0 FB info (Jaroslav Kysela) [RHEL-73890]
  - ALSA: rawmidi: Fix kvfree() call in spinlock (Jaroslav Kysela) [RHEL-73890]
  - ASoC: da7213: Populate max_register to regmap_config (Jaroslav Kysela) [RHEL-73890]
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53150}
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53197}
  - ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56685}
  - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (Jaroslav Kysela) [RHEL-73890]
  - ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc() (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56696}
  - ASoC: imx-audmix: Add NULL check in imx_audmix_probe (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53199}
  - ALSA: hda/realtek: Update ALC256 depop procedure (Jaroslav Kysela) [RHEL-73890]
  - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53239}
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56531}
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56532}
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56533}
  - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: acp: fix for cpu dai index logic (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: acp: fix for inconsistent indenting (Jaroslav Kysela) [RHEL-73890]
  - ASoC: fsl-asoc-card: Add missing handling of {hp,mic}-dt-gpios (Jaroslav Kysela) [RHEL-73890]
  - ASoC: fsl_micfil: fix regmap_write_bits usage (Jaroslav Kysela) [RHEL-73890]
  - RDMA/bnxt_re: Fix error recovery sequence (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Disable use of reserved wqes (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix the check for 9060 condition (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Avoid initializing the software queue for user queues (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix max SGEs for the Work Request (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Remove always true dattr validity check (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Correct the sequence of device suspend (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Mohammad Heib) [RHEL-22876]
  - CI: Enable pipelines for rt-64k variant (Juri Lelli) [RHEL-70288]
  - redhat: Add kernel-rt-64k variant (Juri Lelli) [RHEL-70288]


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Jakub Martisko <jamartis@redhat.com> - 4.9-5
changelog:
  - lib/dfa.c: Increase the maximum size of the transitions table
  - After changes introduced between sed 4.2 and 4.4, some regexps
    started to hit the table size limits. This lead to repeated deletion
    and rebuilding of the table, leading to massive performance drops.
    While the core issue is still present, this change should at least
    help by moving the threshold of the regexp complexity that triggers the 
    table rebuilds.
  - Resolves: RHEL-144027


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-11
changelog:
  - passwd.c: lock, open, close and unlock passwd database
    Resolves: RHEL-151055
    Resolves: RHEL-150955


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-22
changelog:
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
  - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
  - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
  - hwdb: update rules (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - Add Razer Cobra mouse to hwdb (RHEL-72702)
  - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
  - hwdb: sort SDR devices by vendor name (RHEL-72702)
  - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
  - hwdb: run "update-hwdb" (RHEL-72702)
  - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
  - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
  - hwdb: add Airspy devices (RHEL-72702)
  - hwdb: add more devices (RHEL-72702)
  - hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
  - hwdb: add missing Ettus Research B200 rule (RHEL-72702)
  - hwdb: add LimeSDR XTRX devices (RHEL-72702)
  - hwdb: add HydraSDR RFOne (RHEL-72702)
  - hwdb: add SDRplay devices (RHEL-72702)
  - hwdb: update (RHEL-72702)
  - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
  - Add Nulea M501 trackball to hwdb (RHEL-72702)
  - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
  - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
  - remove bonus line (RHEL-72702)
  - hwdb: drop trailing whitespace (RHEL-72702)
  - remove Nulea M501 usb entry from hwdb (RHEL-72702)
  - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702)
  - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702)
  - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702)
  - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702)
  - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702)
  - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702)
  - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702)
  - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702)
  - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702)
  - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702)
  - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702)
  - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702)
  - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702)
  - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702)
  - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702)
  - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702)
  - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702)
  - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702)
  - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702)
  - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702)
  - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702)
  - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702)
  - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702)
  - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702)
  - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard   device as set 1 (appears as raw set 2) or as set 2 (appears as   translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for   posterity. (RHEL-72702)
  - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702)
  - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702)
  - hwdb: keyboard: uppercase apple id (RHEL-72702)
  - integritysetup: Add support for hmac-sha512 (RHEL-27852)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852)
  - core: increment start limit counter only when we can start the unit (RHEL-115032)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032)
  - test: extend start limit interval (RHEL-115032)
  - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029)
  - man: fix typo (RHEL-143029)
  - test: fix test with -Dnetworkd=false (RHEL-143029)
  - ci: run apt-get update before running mkosi (RHEL-115001)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-23
changelog:
  - test-journal-dump: dump the headers of journal files (RHEL-106795)
  - journal: store counts, not byte sizes, in table size constants (RHEL-106795)
  - journal: treble field hash table size (RHEL-106795)
  - nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
  - user-classification: add new "foreign" UID range (RHEL-143036)
  - userdb: synthesize stub user records for the foreign UID (RHEL-143036)
  - dissect: add new --shift command (RHEL-143036)
  - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
  - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
  - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
  - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
  - sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
  - user-record: add helper for dispatching a disposition mask (RHEL-143036)
  - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036)
  - user-record: add some helpers for working with UserDBMatch (RHEL-143036)
  - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
  - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
  - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
  - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
  - update TODO (RHEL-143036)
  - JSON User/Group records: Add properties for UUIDs (RHEL-143036)
  - userdb: add support for printing the UUID from user and group records (RHEL-143036)
  - userdb: add support for looking up users or groups by uuid. (RHEL-143036)
  - userdbctl: add --uuid filtering option (RHEL-143036)
  - userdbctl: add missing --uuid= to --help text (RHEL-143036)
  - userdb: fix typo (RHEL-143036)
  - man/userdbctl: fixup version info (RHEL-143036)
  - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
  - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
  - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
  - logind: support deserializing session leader through pidfdid (RHEL-53112)
  - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
  - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
  - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219)
  - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-8
changelog:
  - Backport upstream changes to jailify extraction directory
    Includes related gnulib changes to add openat2
    Fixes CVE-2025-45582


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-10
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)
  - upstream fix for savannah bug 64581, commit 51142180
    (crash with TAR_OPTIONS)
  - Backport fix for regression in the --no-overwrite-dir option
    Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
    in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-11
changelog:
  - Add upstream patch to improve error message for --one-top-level
    with absolute path (unsupported as a result of CVE-2025-45582 fix)


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 6.0-67
changelog:
  - zipinfo: remove the extra %c that caused invalid reads
  - zipinfo: fix the whitespaces in the output
  - Zipbombs: Port Another patch, orinally made by Mark Adler
  - https://github.com/madler/unzip/commit/af0d07f95809653b669d88aa0f424c6d5aa48ba0
    Resolves: RHEL-59972
    Resolves: RHEL-6286


author: - Chung Chung <cchung@redhat.com> - 8.3.2.1-1
changelog:
  - Add vdocalculatesize utility.
  - Improve handling of corrupt index metadata.
  - Resolves: RHEL-129392


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fixc causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fix causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-1
changelog:
  - Update to version 2.11 (RHEL-59010)
  - backport fix for known regression on brcmfmac (rhbz#2302577)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-4
changelog:
  - Use pkcs11 provider to resolve PKCS11 URIs (RHEL-86951)
  - De-clutter syslog from CTRL-EVENT-SIGNAL-CHANGE messages (RHEL-71344)


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


