# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-182.el10]
changelog:
  - KVM: selftests: Add missing "break" in rseq_test's param parsing (Gavin Shan) [RHEL-130521]
  - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139289] {CVE-2025-40248}
  - dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-138352]
  - net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate (CKI Backport Bot) [RHEL-117719]
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Adrian Moreno) [RHEL-134732]
  - dm: Fix deadlock when reloading a multipath table (Ming Lei) [RHEL-134975]
  - block: Remove queue freezing from several sysfs store callbacks (Ming Lei) [RHEL-134975]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-183.el10]
changelog:
  - block: fix race between wbt_enable_default and IO submission (Ming Lei) [RHEL-128456]
  - block: relax atomic write boundary vs chunk size check (Ming Lei) [RHEL-129479]
  - block: fix stacking of atomic writes when atomics are not supported (Ming Lei) [RHEL-129479]
  - block: update validation of atomic writes boundary for stacked devices (Ming Lei) [RHEL-129479]
  - block: use chunk_sectors when evaluating stacked atomic write limits (Ming Lei) [RHEL-129479]
  - block: sanitize chunk_sectors for atomic write limits (Ming Lei) [RHEL-129479]
  - ilog2: add max_pow_of_two_factor() (Ming Lei) [RHEL-129479]
  - mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134453] {CVE-2025-40258}
  - x86/CPU/AMD: Extend Zen6 model range (Steve Best) [RHEL-128696]
  - pinctrl: PINCTRL_AMDISP should depend on DRM_AMD_ISP (Steve Best) [RHEL-107607]
  - pinctrl: amd: Clear GPIO debounce for suspend (Steve Best) [RHEL-107607]
  - pinctrl: amd: Constify pointers to 'pinctrl_desc' (Steve Best) [RHEL-107607]
  - pinctrl: amd: Fix hibernation support with CONFIG_SUSPEND unset (Steve Best) [RHEL-107607]
  - pinctrl: amd: Fix use of undeclared identifier 'pinctrl_amd_s2idle_dev_ops' (Steve Best) [RHEL-107607]
  - pinctrl: amd: Add an LPS0 check() callback (Steve Best) [RHEL-107607]
  - pinctrl: amd: isp411: Fix IS_ERR() vs NULL check in probe() (Steve Best) [RHEL-107607]
  - pinctrl: amd: isp411: Add amdisp GPIO pinctrl (Steve Best) [RHEL-107607]
  - pinctrl: amd: Take suspend type into consideration which pins are non-wake (Steve Best) [RHEL-107607]
  - pinctrl: amd: Fix two small typos (Steve Best) [RHEL-107607]
  - RDMA/uverbs: Fix umem release in UVERBS_METHOD_CQ_CREATE (Kamal Heib) [RHEL-109943]
  - RDMA/efa: Add CQ with external memory support (Kamal Heib) [RHEL-109943]
  - IB/sa: Fix sa_local_svc_timeout_ms read race (Kamal Heib) [RHEL-109943]
  - RDMA/core: Resolve MAC of next-hop device without ARP support (Kamal Heib) [RHEL-109943]
  - RDMA/cm: Rate limit destroy CM ID timeout error message (Kamal Heib) [RHEL-109943]
  - IB: Extend UVERBS_METHOD_REG_MR to get DMAH (Kamal Heib) [RHEL-109943]
  - RDMA/core: Introduce a DMAH object and its alloc/free APIs (Kamal Heib) [RHEL-109943]
  - IB/core: Add UVERBS_METHOD_REG_MR on the MR object (Kamal Heib) [RHEL-109943]
  - RDMA/core: Add umem "is_contiguous" and "start_dma_addr" helpers (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Add a common way to create CQ with umem (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (Kamal Heib) [RHEL-109943]
  - IB/cm: Use separate agent w/o flow control for REP (Kamal Heib) [RHEL-109943]
  - IB/mad: Add flow control for solicited MADs (Kamal Heib) [RHEL-109943]
  - IB/mad: Add state machine to MAD layer (Kamal Heib) [RHEL-109943]
  - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (Kamal Heib) [RHEL-109943]
  - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-109943]
  - RDMA/ipoib: Use parent rdma device net namespace (Kamal Heib) [RHEL-109943]
  - RDMA/core: Extend RDMA device registration to be net namespace aware (Kamal Heib) [RHEL-109943]
  - RDMA/core: reduce stack using in nldev_stat_get_doit() (Kamal Heib) [RHEL-109943]
  - RDMA/core: Add driver APIs pre_destroy_cq() and post_destroy_cq() (Kamal Heib) [RHEL-109943]
  - IB/iser: Remove unnecessary local variable (Kamal Heib) [RHEL-109943]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-184.el10]
changelog:
  - blk-mq: skip CPU offline notify on unmapped hctx (Ming Lei) [RHEL-140153]
  - mm/rmap: fix soft-dirty and uffd-wp bit loss when remapping zero-filled mTHP subpage to shared zeropage (Aristeu Rozanski) [RHEL-122951]
  - mm/thp: fix MTE tag mismatch when replacing zero-filled subpages (Aristeu Rozanski) [RHEL-122951]
  - io_uring/net: ensure vectored buffer node import is tied to notification (Jeff Moyer) [RHEL-136780]
  - bpf, arm64: Do not audit capability check in do_jit() (CKI Backport Bot) [RHEL-126124]
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area (Luiz Capitulino) [RHEL-122910]
  - netfilter: nf_conncount: update last_gc only when GC has been performed (Florian Westphal) [RHEL-133467]
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-133467]
  - netfilter: nf_nat: remove bogus direction check (Florian Westphal) [RHEL-133467]
  - ipvs: fix ipv4 null-ptr-deref in route error path (Florian Westphal) [RHEL-133467]
  - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH (Florian Westphal) [RHEL-133467]
  - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan (Florian Westphal) [RHEL-133467]
  - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-133467]
  - netfilter: nft_connlimit: fix possible data race on connection count (Florian Westphal) [RHEL-133467]
  - netfilter: nft_ct: enable labels for get case too (Florian Westphal) [RHEL-133467]
  - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-133467]
  - netfilter: nf_conntrack: do not skip entries in /proc/net/nf_conntrack (Florian Westphal) [RHEL-133467]
  - netfilter: nfnetlink: reset nlh pointer during batch replay (Florian Westphal) [RHEL-133467]
  - ipvs: Defer ip_vs_ftp unregister during netns cleanup (Florian Westphal) [RHEL-133467]
  - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable (Florian Westphal) [RHEL-133467]
  - x86/cpu: Add two Intel CPU model numbers (Steve Best) [RHEL-115112]
  - sched/hrtick: Fix hrtick() vs. scheduling context (Phil Auld) [RHEL-124642]
  - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out (Phil Auld) [RHEL-124642]
  - sched: Increase sched_tick_remote timeout (Phil Auld) [RHEL-124642]
  - bpf: Make migrate_disable always inline to avoid partial inlining (Phil Auld) [RHEL-124642]
  - sched/fair: Fix pelt lost idle time detection (Phil Auld) [RHEL-124642]
  - sched/deadline: Stop dl_server before CPU goes offline (Phil Auld) [RHEL-124642]
  - sched: Fix some typos in include/linux/preempt.h (Phil Auld) [RHEL-124642]
  - sched: Make migrate_{en,dis}able() inline (Phil Auld) [RHEL-124642]
  - rcu: Replace preempt.h with sched.h in include/linux/rcupdate.h (Phil Auld) [RHEL-124642]
  - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c (Phil Auld) [RHEL-124642]
  - sched/deadline: Fix dl_server behaviour (Phil Auld) [RHEL-124642]
  - sched/deadline: Fix dl_server getting stuck (Phil Auld) [RHEL-124642]
  - sched: Fix sched_numa_find_nth_cpu() if mask offline (Phil Auld) [RHEL-124642]
  - sched_ext: Add support for cgroup bandwidth control interface (Phil Auld) [RHEL-124642]
  - s390/processor: Use bitop functions for cpu flag helper functions (Phil Auld) [RHEL-124642]
  - s390/asm-offsets: Remove ASM_OFFSETS_C (Phil Auld) [RHEL-124642]
  - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127128]
  - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127128]
  - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127128]
  - redhat/configs: automotive: enable S32G_WDT (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g399a-rdb3: Enable the SWT watchdog (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g3: Add the Software Timer Watchdog (SWT) nodes (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g274-rd2: Enable the SWT watchdog (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g2: Add the Software Timer Watchdog (SWT) nodes (Jared Kangas) [RHEL-131327]
  - watchdog: Add the Watchdog Timer for the NXP S32 platform (Jared Kangas) [RHEL-131327]
  - dt-bindings: watchdog: Add NXP Software Watchdog Timer (Jared Kangas) [RHEL-131327]
  - xfs: rework datasync tracking and execution (Pavel Reichl) [RHEL-126220]
  - xfs: rearrange code in xfs_inode_item_precommit (Pavel Reichl) [RHEL-126220]
  - workqueue: fix texinfodocs warning for WQ_* flags reference (Waiman Long) [RHEL-129577]
  - workqueue: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-129577]
  - workqueue: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-129577]
  - workqueue: replace use of system_unbound_wq with system_dfl_wq (Waiman Long) [RHEL-129577]
  - workqueue: Provide a handshake for canceling BH workers (Waiman Long) [RHEL-129577]
  - workqueue: Remove rcu_read_lock/unlock() in wq_watchdog_timer_fn() (Waiman Long) [RHEL-129577]
  - workqueue: Remove redundant rcu_read_lock/unlock() in workqueue_congested() (Waiman Long) [RHEL-129577]
  - workqueue: Use atomic_try_cmpxchg_relaxed() in tryinc_node_nr_active() (Waiman Long) [RHEL-129577]
  - workqueue: Remove unused work_on_cpu_safe (Waiman Long) [RHEL-129577]
  - workqueue: Add new WQ_PERCPU flag (Waiman Long) [RHEL-129577]
  - workqueue: Add system_percpu_wq and system_dfl_wq (Waiman Long) [RHEL-129577]
  - workqueue: Basic memory allocation profiling support (Waiman Long) [RHEL-129577]
  - workqueue: fix opencoded cpumask_next_and_wrap() in wq_select_unbound_cpu() (Waiman Long) [RHEL-129577]
  - workqueue: Initialize wq_isolated_cpumask in workqueue_init_early() (Waiman Long) [RHEL-129577]
  - workqueue: fix typo in comment (Waiman Long) [RHEL-129577]
  - workqueue: Fix race condition in wq->stats incrementation (Waiman Long) [RHEL-129577]
  - workqueue: Better document teardown for delayed_work (Waiman Long) [RHEL-129577]
  - cpumask: drop cpumask_next_wrap_old() (Waiman Long) [RHEL-129577]
  - PCI: hv: Switch hv_compose_multi_msi_req_get_cpu() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - scsi: lpfc: rework lpfc_next_{online,present}_cpu() (Waiman Long) [RHEL-129577]
  - scsi: lpfc: switch lpfc_irq_rebalance() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - s390: switch stop_machine_yield() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - padata: switch padata_find_next() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - cpumask: use cpumask_next_wrap() where appropriate (Waiman Long) [RHEL-129577]
  - cpumask: re-introduce cpumask_next{,_and}_wrap() (Waiman Long) [RHEL-129577]
  - cpumask: deprecate cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - powerpc/xmon: simplify xmon_batch_next_cpu() (Waiman Long) [RHEL-129577]
  - ibmvnic: simplify ibmvnic_set_queue_affinity() (Waiman Long) [RHEL-129577]
  - virtio_net: simplify virtnet_set_affinity() (Waiman Long) [RHEL-129577]
  - objpool: rework objpool_pop() (Waiman Long) [RHEL-129577]
  - cpumask: add for_each_{possible,online}_cpu_wrap (Waiman Long) [RHEL-129577]
  - workqueue: Log additional details when rejecting work (Waiman Long) [RHEL-129577]
  - workqueue: warn if delayed_work is queued to an offlined cpu. (Waiman Long) [RHEL-129577]
  - workqueue: add printf attribute to __alloc_workqueue() (Waiman Long) [RHEL-129577]
  - workqueue: Reduce expensive locks for unbound workqueue (Waiman Long) [RHEL-129577]
  - workqueue: Adjust WQ_MAX_ACTIVE from 512 to 2048 (Waiman Long) [RHEL-129577]
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128901] {CVE-2025-40141}
  - ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128474] {CVE-2025-40185}
  - redhat/configs: automotive: disable VFIO_PLATFORM (Eric Chanudet) [RHEL-79906]
  - net: renesas: rswitch: add mdio C22 support (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: use generic MPSM operation for mdio C45 (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: align mdio C45 operations with datasheet (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: use FIELD_PREP for remaining MPIC register fields (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: do not write to MPSM register at init time (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: remove speed from gwca structure (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: do not deinit disabled ports (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: rework ts tags management (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix initial MPIC register setting (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: enable only used MFWD features (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: handle stop vs interrupt race (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: avoid use-after-put for a device tree node (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix leaked pointer on error path (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix race window between tx start and complete (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix possible early skb release (Radu Rendec) [RHEL-78089]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-185.el10]
changelog:
  - net: fix memory leak in skb_segment_list for GRO packets (Mohammad Heib) [RHEL-104436]
  - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (Hangbin Liu) [RHEL-133463]
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (Hangbin Liu) [RHEL-133463]
  - selftests: fib_tests: add fib6 from ra to static test (Hangbin Liu) [RHEL-133463]
  - ipv6: clear RA flags when adding a static route (Hangbin Liu) [RHEL-133463]
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Hangbin Liu) [RHEL-133463]
  - Documentation: RCU: Wrap kvm-remote.sh rerun snippet in literal code block (Čestmír Kalina) [RHEL-114406]
  - redhat: config: disable RCU_TORTURE_TEST_{CHK_RDR_STATE,LOG_CPU,LOG_GP} (Čestmír Kalina) [RHEL-114406]
  - refscale: Use kcalloc() instead of kzalloc() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Use kcalloc() instead of kzalloc() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Delay forward-progress testing until boot completes (Čestmír Kalina) [RHEL-114406]
  - torture: Delay CPU-hotplug operations until boot completes (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Delay rcutorture readers and writers until boot completes (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Suppress "Writer stall state" reports during boot (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Fix jitter.sh spin time (Čestmír Kalina) [RHEL-114406]
  - srcu/tiny: Remove preempt_disable/enable() in srcu_gp_start_if_needed() (Čestmír Kalina) [RHEL-114406]
  - Documentation: Fix RCU typos (Čestmír Kalina) [RHEL-114406]
  - rcu: add rcu_read_lock_dont_migrate() (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix racy re-initialization of irq_work causing hangs (Čestmír Kalina) [RHEL-114406]
  - refscale: Check that nreaders and loops multiplication doesn't overflow (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix delayed execution of hurry callbacks (Čestmír Kalina) [RHEL-114406]
  - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make BUSTED scenario check and log readers (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make Trivial RCU ignore onoff_interval and shuffle_interval (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Print number of RCU up/down readers and migrations (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Check for no up/down readers at task level (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Check for ->up_read() without matching ->down_read() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Complain if an ->up_read() is delayed more than 10 seconds (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Pull rcu_torture_updown() loop body into new function (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add tests for SRCU up/down reader primitives (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Print only one rtort_pipe_count splat (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Start rcu_torture_writer() after rcu_torture_reader() (Čestmír Kalina) [RHEL-114406]
  - torture: Make torture.sh --allmodconfig testing fail on warnings (Čestmír Kalina) [RHEL-114406]
  - torture: Add "ERROR" diagnostic for testing kernel-build output (Čestmír Kalina) [RHEL-114406]
  - torture: Make torture.sh tolerate runs having bad kvm.sh arguments (Čestmír Kalina) [RHEL-114406]
  - torture: Add textid.txt file to --do-allmodconfig and --do-rcu-rust runs (Čestmír Kalina) [RHEL-114406]
  - torture: Extract testid.txt generation to separate script (Čestmír Kalina) [RHEL-114406]
  - torture: Suppress "find" diagnostics from torture.sh --do-none run (Čestmír Kalina) [RHEL-114406]
  - torture: Provide EXPERT Kconfig option for arm64 KCSAN torture.sh runs (Čestmír Kalina) [RHEL-114406]
  - torture: Default --no-clocksourcewd on arm64 (Čestmír Kalina) [RHEL-114406]
  - torture: Default --no-rcutasksflavors on arm64 (Čestmír Kalina) [RHEL-114406]
  - torture: Make torture.sh KCSAN runs set CONFIG_RCU_TORTURE_TEST_CHK_RDR_STATE=y (Čestmír Kalina) [RHEL-114406]
  - torture: Permit multiple space characters in kvm.sh --kconfig argument (Čestmír Kalina) [RHEL-114406]
  - torture: Suppress torture.sh "Zero time" messages for disabled tests (Čestmír Kalina) [RHEL-114406]
  - rcu: Document concurrent quiescent state reporting for offline CPUs (Čestmír Kalina) [RHEL-114406]
  - rcu: Document separation of rcu_state and rnp's gp_seq (Čestmír Kalina) [RHEL-114406]
  - rcu: Document GP init vs hotplug-scan ordering requirements (Čestmír Kalina) [RHEL-114406]
  - rcu: Refactor expedited handling check in rcu_read_unlock_special() (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (Čestmír Kalina) [RHEL-114406]
  - Documentation/kernel-parameters: Update rcu_normal_wake_from_gp doc (Čestmír Kalina) [RHEL-114406]
  - rcu: Enable rcu_normal_wake_from_gp on small systems (Čestmír Kalina) [RHEL-114406]
  - rcu: Protect ->defer_qs_iw_pending from data race (Čestmír Kalina) [RHEL-114406]
  - rcu: Robustify rcu_is_cpu_rrupt_from_idle() (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Warn on QS requested on dying CPU (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Remove needless CPU up quiescent state report (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Remove confusing needless full barrier on task unblock (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Protect against early QS report (Čestmír Kalina) [RHEL-114406]
  - rcu: Move rcu_stall related sysctls into rcu/tree_stall.h (Čestmír Kalina) [RHEL-114406]
  - rcu: Return early if callback is not specified (Čestmír Kalina) [RHEL-114406]
  - kernel/rcu/tree_stall: add /sys/kernel/rcu_stall_count (Čestmír Kalina) [RHEL-114406]
  - kernel/rcu/tree_stall: add /sys/kernel/rcu_stall_count (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Perform more frequent testing of ->gpwrap (Čestmír Kalina) [RHEL-114406]
  - torture: Add testing of RCU's Rust bindings to torture.sh (Čestmír Kalina) [RHEL-114406]
  - torture: Add --do-{,no-}normal to torture.sh (Čestmír Kalina) [RHEL-114406]
  - checkpatch: Deprecate srcu_read_lock_lite() and srcu_read_unlock_lite() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Comment invocations of tick_dep_set_task() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make torture.sh --do-rt use CONFIG_PREEMPT_RT (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Split out beginning and end from rcu_torture_one_read() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make srcu_lockdep.sh check reader-conflict handling (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make srcu_lockdep.sh check kernel Kconfig (Čestmír Kalina) [RHEL-114406]
  - srcu: Use rcu_seq_done_exact() for polling API (Čestmír Kalina) [RHEL-114406]
  - rcu: Comment on the extraneous delta test on rcu_seq_done_exact() (Čestmír Kalina) [RHEL-114406]
  - rcu: Add warning to ensure rcu_seq_done_exact() is working (Čestmír Kalina) [RHEL-114406]
  - rcu: Replace magic number with meaningful constant in rcu_seq_done_exact() (Čestmír Kalina) [RHEL-114406]
  - rcuscale: using kcalloc() to relpace kmalloc() (Čestmír Kalina) [RHEL-114406]
  - doc/RCU/listRCU: refine example code for eliminating stale data (Čestmír Kalina) [RHEL-114406]
  - doc: Update LWN RCU API links in whatisRCU.rst (Čestmír Kalina) [RHEL-114406]
  - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture (Čestmír Kalina) [RHEL-114406]
  - Revert "rcu/nocb: Fix rcuog wake-up from offline softirq" (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove swake_up_one_online() bandaid (Čestmír Kalina) [RHEL-114406]
  - rcu-tasks: Always inline rcu_irq_work_resched() (Čestmír Kalina) [RHEL-114406]
  - srcu: Make FORCE_NEED_SRCU_NMI_SAFE depend on RCU_EXPERT (Čestmír Kalina) [RHEL-114406]
  - types: move struct rcuwait into types.h (Čestmír Kalina) [RHEL-114406]
  - torture: Make SRCU lockdep testing use srcu_read_lock_nmisafe() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add FORCE_NEED_SRCU_NMI_SAFE Kconfig for testing (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Complain when invalid SRCU reader_flavor is specified (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Move RCU_TORTURE_TEST_{CHK_RDR_STATE,LOG_CPU} to bool (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make cur_ops->format_gp_seqs take buffer length (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add ftrace-compatible timestamp to GP# failure/close-call output (Čestmír Kalina) [RHEL-114406]
  - rcu: Trace expedited grace-period numbers in hexadecimal (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Expand failure/close-call grace-period output (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Include grace-period sequence numbers in failure/close-call (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add a test_boost_holdoff module parameter (Čestmír Kalina) [RHEL-114406]
  - torture: Add get_torture_init_jiffies() for test-start time (Čestmír Kalina) [RHEL-114406]
  - srcu: Make SRCU-fast also be NMI-safe (Čestmír Kalina) [RHEL-114406]
  - srcu: Add srcu_down_read_fast() and srcu_up_read_fast() (Čestmír Kalina) [RHEL-114406]
  - srcu: Document that srcu_{read_lock,down_read}() can share srcu_struct (Čestmír Kalina) [RHEL-114406]
  - srcu: Fix srcu_read_unlock_{lite,nmisafe}() kernel-doc (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make scenario SRCU-P use srcu_read_lock_fast() (Čestmír Kalina) [RHEL-114406]
  - refscale: Add srcu_read_lock_fast() support using "srcu-fast" (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add ability to test srcu_read_{,un}lock_fast() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add SRCU-fast readers (Čestmír Kalina) [RHEL-114406]
  - srcu: Move SRCU Tree/Tiny definitions from srcu.h (Čestmír Kalina) [RHEL-114406]
  - srcu: Pull integer-to-pointer conversion into __srcu_ctr_to_ptr() (Čestmír Kalina) [RHEL-114406]
  - srcu: Pull pointer-to-integer conversion into __srcu_ptr_to_ctr() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add SRCU_READ_FLAVOR_SLOWGP to flag need for synchronize_rcu() (Čestmír Kalina) [RHEL-114406]
  - srcu: Rename srcu_check_read_flavor_lite() to srcu_check_read_flavor_force() (Čestmír Kalina) [RHEL-114406]
  - srcu: Force synchronization for srcu_get_delay() (Čestmír Kalina) [RHEL-114406]
  - srcu: Make Tree SRCU updates independent of ->srcu_idx (Čestmír Kalina) [RHEL-114406]
  - srcu: Make SRCU readers use ->srcu_ctrs for counter selection (Čestmír Kalina) [RHEL-114406]
  - srcu: Pull ->srcu_{un,}lock_count into a new srcu_ctr structure (Čestmír Kalina) [RHEL-114406]
  - srcu: Use ->srcu_gp_seq for rcutorture reader batch (Čestmír Kalina) [RHEL-114406]
  - srcu: Define SRCU_READ_FLAVOR_ALL in terms of symbols (Čestmír Kalina) [RHEL-114406]
  - srcu: Make Tiny SRCU able to operate in preemptible kernels (Čestmír Kalina) [RHEL-114406]
  - rcu: Use _full() API to debug synchronize_rcu() (Čestmír Kalina) [RHEL-114406]
  - rcu: Update TREE05.boot to test normal synchronize_rcu() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Allow a negative value for nfakewriters (Čestmír Kalina) [RHEL-114406]
  - context_tracking: Make RCU watch ct_kernel_exit_state() warning (Čestmír Kalina) [RHEL-114406]
  - rcu/nocb: Print segment lengths in show_rcu_nocb_gp_state() (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix get_state_synchronize_rcu_full() GP-start detection (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove READ_ONCE() for rdp->gpwrap access in __note_gp_changes() (Čestmír Kalina) [RHEL-114406]
  - rcu: Split rcu_report_exp_cpu_mult() mask parameter and use for tracing (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make scenario TREE07 build CONFIG_PREEMPT_LAZY=y (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make scenario TREE10 build CONFIG_PREEMPT_LAZY=y (Čestmír Kalina) [RHEL-114406]
  - rcu: limit PREEMPT_RCU configurations (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Update ->extendables check for lazy preemption (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Update rcutorture_one_extend_check() for lazy preemption (Čestmír Kalina) [RHEL-114406]
  - rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y (Čestmír Kalina) [RHEL-114406]
  - rcu: handle unstable rdp in rcu_read_unlock_strict() (Čestmír Kalina) [RHEL-114406]
  - sched: update __cond_resched comment about RCU quiescent states (Čestmír Kalina) [RHEL-114406]
  - rcu: rename PREEMPT_AUTO to PREEMPT_LAZY (Čestmír Kalina) [RHEL-114406]
  - rcu: fix header guard for rcu_all_qs() (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove references to old grace-period-wait primitives (Čestmír Kalina) [RHEL-114406]
  - rcu: Clarify RCU_LAZY and RCU_LAZY_DEFAULT_OFF help text (Čestmír Kalina) [RHEL-114406]
  - rcu: Add CONFIG_RCU_LAZY delays to call_rcu() kernel-doc header (Čestmír Kalina) [RHEL-114406]
  - srcu: Point call_srcu() to call_rcu() for detailed memory ordering (Čestmír Kalina) [RHEL-114406]
  - rcu: Document self-propagating callbacks (Čestmír Kalina) [RHEL-114406]
  - docs: Improve discussion of this_cpu_ptr(), add raw_cpu_ptr() (Čestmír Kalina) [RHEL-114406]
  - doc: Add broken-timing possibility to stallwarn.rst (Čestmír Kalina) [RHEL-114406]
  - slab: don't batch kvfree_rcu() with SLUB_TINY (Čestmír Kalina) [RHEL-114406]
  - rcu, slab: use a regular callback function for kvfree_rcu (Čestmír Kalina) [RHEL-114406]
  - rcu: remove trace_rcu_kvfree_callback (Čestmír Kalina) [RHEL-114406]
  - slab, rcu: move TINY_RCU variant of kvfree_rcu() to SLAB (Čestmír Kalina) [RHEL-114406]
  - mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq (Čestmír Kalina) [RHEL-114406]
  - torture: Make kvm-remote.sh give up on unresponsive system (Čestmír Kalina) [RHEL-114406]
  - refscale: Add test for sched_clock() (Čestmír Kalina) [RHEL-114406]
  - srcu: Remove redundant GP sequence checks in srcu_funnel_gp_start (Čestmír Kalina) [RHEL-114406]
  - srcu: Fix typo s/srcu_check_read_flavor()/__srcu_check_read_flavor()/ (Čestmír Kalina) [RHEL-114406]
  - srcu: Guarantee non-negative return value from srcu_read_lock() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Use symbols for SRCU reader flavors (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add per-reader-segment preemption diagnostics (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Read CPU ID for decoration protected by both reader types (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add preempt_count() to rcutorture_one_extend_check() diagnostics (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add parameters to control polled/conditional wait interval (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add documentation for recent conditional and polled APIs (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Ignore attempts to test preemption and forward progress (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make rcutorture_one_extend() check reader state (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Pretty-print rcutorture reader segments (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add full read-side contexts to "busted" torture type (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Decorate failing reader segments with last CPU ID (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Check preemption for failing reader (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add ->cond_sync_exp_full function to rcu_ops structure (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Use finer-grained timeouts for rcu_torture_writer() polling (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Decorate failing reader segments with CPU ID (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make the TREE03 scenario do preemption (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add random real-time preemption (Čestmír Kalina) [RHEL-114406]
  - torture: Add dowarn argument to torture_sched_setaffinity() (Čestmír Kalina) [RHEL-114406]
  - MAINTAINERS: Update RCU git tree (Čestmír Kalina) [RHEL-114406]
  - rcu: Add lockdep_assert_irqs_disabled() to rcu_exp_need_qs() (Čestmír Kalina) [RHEL-114406]
  - rcu: Add KCSAN exclusive-writer assertions for rdp->cpu_no_qs.b.exp (Čestmír Kalina) [RHEL-114406]
  - rcu: Make preemptible rcu_exp_handler() check idempotency (Čestmír Kalina) [RHEL-114406]
  - rcu: Replace open-coded rcu_exp_need_qs() from rcu_exp_handler() with call (Čestmír Kalina) [RHEL-114406]
  - rcu: Move rcu_report_exp_rdp() setting of ->cpu_no_qs.b.exp under lock (Čestmír Kalina) [RHEL-114406]
  - rcu: Make rcu_report_exp_cpu_mult() caller acquire lock (Čestmír Kalina) [RHEL-114406]
  - rcu: Report callbacks enqueued on offline CPU blind spot (Čestmír Kalina) [RHEL-114406]
  - mm/slab: Move kvfree_rcu() into SLAB (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Adjust a shrinker name (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Adjust names passed into trace functions (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Move some functions under CONFIG_TINY_RCU (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Initialize kvfree_rcu() separately (Čestmír Kalina) [RHEL-114406]
  - rculist: add list_bidir_{del,prev}_rcu() (Čestmír Kalina) [RHEL-114406]
  - rcupdate_trace: Define rcu_tasks_trace lock guard (Čestmír Kalina) [RHEL-114406]
  - srcu: Unconditionally record srcu_read_lock_lite() in ->srcu_reader_flavor (Čestmír Kalina) [RHEL-114406]
  - srcu: Check for srcu_read_lock_lite() across all CPUs (Čestmír Kalina) [RHEL-114406]
  - srcu: Remove smp_mb() from srcu_read_unlock_lite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Improve srcu_read_lock_lite() kernel-doc comment (Čestmír Kalina) [RHEL-114406]
  - refscale: Add srcu_read_lock_lite() support using "srcu-lite" (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add light-weight SRCU scenario (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add srcu_read_lock_lite() support to rcutorture.reader_flavor (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add reader_flavor parameter for SRCU readers (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Expand RCUTORTURE_RDR_MASK_[12] to eight bits (Čestmír Kalina) [RHEL-114406]
  - srcu: Allow inlining of __srcu_read_{,un}lock_lite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add srcu_read_lock_lite() and srcu_read_unlock_lite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Create CPP macros for normal and NMI-safe SRCU readers (Čestmír Kalina) [RHEL-114406]
  - srcu: Improve srcu_read_lock{,_nmisafe}() comments (Čestmír Kalina) [RHEL-114406]
  - srcu: Standardize srcu_data pointers to "sdp" and similar (Čestmír Kalina) [RHEL-114406]
  - srcu: Bit manipulation changes for additional reader flavor (Čestmír Kalina) [RHEL-114406]
  - srcu: Renaming in preparation for additional reader flavor (Čestmír Kalina) [RHEL-114406]
  - srcu: Introduce srcu_gp_is_expedited() helper function (Čestmír Kalina) [RHEL-114406]
  - srcu: Rename srcu_might_be_idle() to srcu_should_expedite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Replace WARN_ON_ONCE() with BUILD_BUG_ON() if possible (Čestmír Kalina) [RHEL-114406]
  - rcu: Finer-grained grace-period-end checks in rcu_dump_cpu_stacks() (Čestmír Kalina) [RHEL-114406]
  - rcu: Stop stall warning from dumping stacks if grace period ends (Čestmír Kalina) [RHEL-114406]
  - rcu: Delete unused rcu_gp_might_be_stalled() function (Čestmír Kalina) [RHEL-114406]
  - rcuscale: Remove redundant WARN_ON_ONCE() splat (Čestmír Kalina) [RHEL-114406]
  - rcuscale: Do a proper cleanup if kfree_scale_init() fails (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Avoid printing cpu=-1 for no-fault RCU boost failure (Čestmír Kalina) [RHEL-114406]
  - rcuscale: Add guest_os_delay module parameter (Čestmír Kalina) [RHEL-114406]
  - refscale: Correct affinity check (Čestmír Kalina) [RHEL-114406]
  - torture: Add --no-affinity parameter to kvm.sh (Čestmír Kalina) [RHEL-114406]
  - rcu/nocb: Fix missed RCU barrier on deoffloading (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove unused declaration rcu_segcblist_offload() (Čestmír Kalina) [RHEL-114406]
  - rcu/srcutiny: don't return before reenabling preemption (Čestmír Kalina) [RHEL-114406]
  - rcu-tasks: Remove open-coded one-byte cmpxchg() emulation (Čestmír Kalina) [RHEL-114406]
  - doc: Remove kernel-parameters.txt entry for rcutorture.read_exit (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Test start-poll primitives with interrupts disabled (Čestmír Kalina) [RHEL-114406]
  - rcu: Permit start_poll_synchronize_rcu*() with interrupts disabled (Čestmír Kalina) [RHEL-114406]
  - rcu: Allow short-circuiting of synchronize_rcu_tasks_rude() (Čestmír Kalina) [RHEL-114406]
  - doc: Add rcuog kthreads to kernel-per-CPU-kthreads.rst (Čestmír Kalina) [RHEL-114406]
  - rcu: Add rcuog kthreads to RCU_NOCB_CPU help text (Čestmír Kalina) [RHEL-114406]
  - rcu: Use the BITS_PER_LONG macro (Čestmír Kalina) [RHEL-114406]
  - rcu: Use bitwise instead of arithmetic operator for flags (Čestmír Kalina) [RHEL-114406]
  - doc: rcu: update printed dynticks counter bits (Čestmír Kalina) [RHEL-114406]
  - ext4: fix potential null deref in ext4_mb_init() (Brian Foster) [RHEL-121233]
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Brian Foster) [RHEL-121233]
  - ext4: fix incorrect function name in comment (Brian Foster) [RHEL-121233]
  - ext4: use kmalloc_array() for array space allocation (Brian Foster) [RHEL-121233]
  - ext4: fix hole length calculation overflow in non-extent inodes (Brian Foster) [RHEL-121233]
  - ext4: don't try to clear the orphan_present feature block device is r/o (Brian Foster) [RHEL-121233]
  - ext4: fix reserved gdt blocks handling in fsmap (Brian Foster) [RHEL-121233]
  - ext4: fix fsmap end of range reporting with bigalloc (Brian Foster) [RHEL-121233]
  - ext4: remove redundant __GFP_NOWARN (Brian Foster) [RHEL-121233]
  - ext4: fix unused variable warning in ext4_init_new_dir (Brian Foster) [RHEL-121233]
  - ext4: remove useless if check (Brian Foster) [RHEL-121233]
  - ext4: check fast symlink for ea_inode correctly (Brian Foster) [RHEL-121233]
  - ext4: preserve SB_I_VERSION on remount (Brian Foster) [RHEL-121233]
  - ext4: show the default enabled i_version option (Brian Foster) [RHEL-121233]
  - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (Brian Foster) [RHEL-121233]
  - ext4: implement linear-like traversal across order xarrays (Brian Foster) [RHEL-121233]
  - ext4: refactor choose group to scan group (Brian Foster) [RHEL-121233]
  - ext4: convert free groups order lists to xarrays (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_mb_scan_group() (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_mb_might_prefetch() (Brian Foster) [RHEL-121233]
  - ext4: factor out __ext4_mb_scan_group() (Brian Foster) [RHEL-121233]
  - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (Brian Foster) [RHEL-121233]
  - ext4: fix zombie groups in average fragment size lists (Brian Foster) [RHEL-121233]
  - ext4: merge freed extent with existing extents before insertion (Brian Foster) [RHEL-121233]
  - ext4: convert sbi->s_mb_free_pending to atomic_t (Brian Foster) [RHEL-121233]
  - ext4: fix typo in CR_GOAL_LEN_SLOW comment (Brian Foster) [RHEL-121233]
  - ext4: get rid of some obsolete EXT4_MB_HINT flags (Brian Foster) [RHEL-121233]
  - ext4: utilize multiple global goals to reduce contention (Brian Foster) [RHEL-121233]
  - ext4: remove unnecessary s_md_lock on update s_mb_last_group (Brian Foster) [RHEL-121233]
  - ext4: remove unnecessary s_mb_last_start (Brian Foster) [RHEL-121233]
  - ext4: separate stream goal hits from s_bal_goals for better tracking (Brian Foster) [RHEL-121233]
  - ext4: add ext4_try_lock_group() to skip busy groups (Brian Foster) [RHEL-121233]
  - ext4: initialize superblock fields in the kballoc-test.c kunit tests (Brian Foster) [RHEL-121233]
  - ext4: refactor the inline directory conversion and new directory codepaths (Brian Foster) [RHEL-121233]
  - ext4: use memcpy() instead of strcpy() (Brian Foster) [RHEL-121233]
  - ext4: replace strcmp with direct comparison for '.' and '..' (Brian Foster) [RHEL-121233]
  - ext4: Make sure BH_New bit is cleared in ->write_end handler (Brian Foster) [RHEL-121233]
  - ext4: fix inode use after free in ext4_end_io_rsv_work() (Brian Foster) [RHEL-121233]
  - ext4: Refactor breaking condition for xattr_find_entry() (Brian Foster) [RHEL-121233]
  - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks() (Brian Foster) [RHEL-121233]
  - ext4: replace ext4_writepage_trans_blocks() (Brian Foster) [RHEL-121233]
  - ext4: reserved credits for one extent during the folio writeback (Brian Foster) [RHEL-121233]
  - ext4: correct the reserved credits for extent conversion (Brian Foster) [RHEL-121233]
  - ext4: enhance tracepoints during the folios writeback (Brian Foster) [RHEL-121233]
  - ext4: restart handle if credits are insufficient during allocating blocks (Brian Foster) [RHEL-121233]
  - ext4: refactor the block allocation process of ext4_page_mkwrite() (Brian Foster) [RHEL-121233]
  - ext4: fix stale data if it bail out of the extents mapping loop (Brian Foster) [RHEL-121233]
  - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (Brian Foster) [RHEL-121233]
  - ext4: process folios writeback in bytes (Brian Foster) [RHEL-121233]
  - ext4: remove unused EXT_STATS macro from ext4_extents.h (Brian Foster) [RHEL-121233]
  - ext4: remove unnecessary duplicate check in ext4_map_blocks() (Brian Foster) [RHEL-121233]
  - ext4: remove duplicate check for EXT4_FC_REPLAY (Brian Foster) [RHEL-121233]
  - ext4: Add a WARN_ON_ONCE for querying LAST_IN_LEAF instead (Brian Foster) [RHEL-121233]
  - ext4: Simplify flags in ext4_map_query_blocks() (Brian Foster) [RHEL-121233]
  - ext4: Rename and document EXT4_EX_FILTER to EXT4_EX_QUERY_FILTER (Brian Foster) [RHEL-121233]
  - ext4: Simplify last in leaf check in ext4_map_query_blocks (Brian Foster) [RHEL-121233]
  - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE (Brian Foster) [RHEL-121233]
  - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc (Brian Foster) [RHEL-121233]
  - ext4: Add multi-fsblock atomic write support with bigalloc (Brian Foster) [RHEL-121233]
  - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS (Brian Foster) [RHEL-121233]
  - ext4: Make ext4_meta_trans_blocks() non-static for later use (Brian Foster) [RHEL-121233]
  - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() (Brian Foster) [RHEL-121233]
  - ext4: Document an edge case for overwrites (Brian Foster) [RHEL-121233]
  - jbd2: remove journal_t argument from jbd2_superblock_csum() (Brian Foster) [RHEL-121233]
  - jbd2: remove journal_t argument from jbd2_chksum() (Brian Foster) [RHEL-121233]
  - ext4: remove sb argument from ext4_superblock_csum() (Brian Foster) [RHEL-121233]
  - ext4: remove sbi argument from ext4_chksum() (Brian Foster) [RHEL-121233]
  - ext4: make online defragmentation support large folios (Brian Foster) [RHEL-121233]
  - ext4: make the writeback path support large folios (Brian Foster) [RHEL-121233]
  - ext4: correct the journal credits calculations of allocating blocks (Brian Foster) [RHEL-121233]
  - ext4/jbd2: convert jbd2_journal_blocks_per_page() to support large folio (Brian Foster) [RHEL-121233]
  - ext4: make __ext4_block_zero_page_range() support large folio (Brian Foster) [RHEL-121233]
  - ext4: make regular file's buffered write path support large folios (Brian Foster) [RHEL-121233]
  - ext4: make ext4_mpage_readpages() support large folios (Brian Foster) [RHEL-121233]
  - ext4: ensure i_size is smaller than maxbytes (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_get_maxbytes() (Brian Foster) [RHEL-121233]
  - ext4: fix incorrect punch max_end (Brian Foster) [RHEL-121233]
  - ext4: fix out of bounds punch offset (Brian Foster) [RHEL-121233]
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Brian Foster) [RHEL-121233]
  - ext4: use writeback_iter in ext4_journalled_submit_inode_data_buffers (Brian Foster) [RHEL-121233]
  - ext4: fix calculation of credits for extent tree modification (Brian Foster) [RHEL-121233]
  - ext4: avoid -Wformat-security warning (Brian Foster) [RHEL-121233]
  - ext4: clairfy the rules for modifying extents (Brian Foster) [RHEL-121233]
  - ext4: check env when mapping and modifying extents (Brian Foster) [RHEL-121233]
  - ext4: introduce ext4_check_map_extents_env() debug helper (Brian Foster) [RHEL-121233]
  - ext4: factor out is_special_ino() (Brian Foster) [RHEL-121233]
  - ext4: prevent stale extent cache entries caused by concurrent get es_cache (Brian Foster) [RHEL-121233]
  - ext4: prevent stale extent cache entries caused by concurrent fiemap (Brian Foster) [RHEL-121233]
  - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-121233]
  - ext4: generalize EXT4_GET_BLOCKS_IO_SUBMIT flag usage (Brian Foster) [RHEL-121233]
  - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-121233]
  - ext4: inline: fix len overflow in ext4_prepare_inline_data (Brian Foster) [RHEL-121233]
  - ext4: hold s_fc_lock while during fast commit (Brian Foster) [RHEL-121233]
  - ext4: convert s_fc_lock to mutex type (Brian Foster) [RHEL-121233]
  - ext4: temporarily elevate commit thread priority (Brian Foster) [RHEL-121233]
  - ext4: update code documentation (Brian Foster) [RHEL-121233]
  - ext4: drop i_fc_updates from inode fc info (Brian Foster) [RHEL-121233]
  - ext4: rework fast commit commit path (Brian Foster) [RHEL-121233]
  - ext4: mark inode dirty before grabbing i_data_sem in ext4_setattr (Brian Foster) [RHEL-121233]
  - ext4: for committing inode, make ext4_fc_track_inode wait (Brian Foster) [RHEL-121233]
  - ext4: convert i_fc_lock to spinlock (Brian Foster) [RHEL-121233]
  - ext4: make block validity check resistent to sb bh corruption (Brian Foster) [RHEL-121233]
  - ext4: avoid -Wflex-array-member-not-at-end warning (Brian Foster) [RHEL-121233]
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption (Brian Foster) [RHEL-121233]
  - ext4: on a remount, only log the ro or r/w state when it has changed (Brian Foster) [RHEL-121233]
  - ext4: correct the error handle in ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: Make sb update interval tunable (Brian Foster) [RHEL-121233]
  - ext4: hash: simplify kzalloc(n * 1, ...) to kzalloc(n, ...) (Brian Foster) [RHEL-121233]
  - jbd2: add a missing data flush during file and fs synchronization (Brian Foster) [RHEL-121233]
  - ext4: clear DISCARD flag if device does not support discard (Brian Foster) [RHEL-121233]
  - jbd2: remove jbd2_journal_unfile_buffer() (Brian Foster) [RHEL-121233]
  - ext4: reorder capability check last (Brian Foster) [RHEL-121233]
  - ext4: update the comment about mb_optimize_scan (Brian Foster) [RHEL-121233]
  - jbd2: fix off-by-one while erasing journal (Brian Foster) [RHEL-121233]
  - ext4: remove references to bh->b_page (Brian Foster) [RHEL-121233]
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr() (Brian Foster) [RHEL-121233]
  - jbd2: remove redundant function jbd2_journal_has_csum_v2or3_feature (Brian Foster) [RHEL-121233]
  - ext4: remove redundant function ext4_has_metadata_csum (Brian Foster) [RHEL-121233]
  - jbd2: do not try to recover wiped journal (Brian Foster) [RHEL-121233]
  - jbd2: remove wrong sb->s_sequence check (Brian Foster) [RHEL-121233]
  - ext4: verify fast symlink length (Brian Foster) [RHEL-121233]
  - ext4: remove unused input "inode" in ext4_find_dest_de (Brian Foster) [RHEL-121233]
  - ext4: remove unneeded forward declaration in namei.c (Brian Foster) [RHEL-121233]
  - ext4: add missing brelse() for bh2 in ext4_dx_add_entry() (Brian Foster) [RHEL-121233]
  - jbd2: Correct stale comment of release_buffer_page (Brian Foster) [RHEL-121233]
  - jbd2: correct stale function name in comment (Brian Foster) [RHEL-121233]
  - jbd2: remove stale comment of update_t_max_wait (Brian Foster) [RHEL-121233]
  - jbd2: remove unused return value of do_readahead (Brian Foster) [RHEL-121233]
  - jbd2: remove unused return value of jbd2_journal_cancel_revoke (Brian Foster) [RHEL-121233]
  - ext4: show 'shutdown' hint when ext4 is forced to shutdown (Brian Foster) [RHEL-121233]
  - ext4: show 'emergency_ro' when EXT4_FLAGS_EMERGENCY_RO is set (Brian Foster) [RHEL-121233]
  - ext4: correct behavior under errors=remount-ro mode (Brian Foster) [RHEL-121233]
  - ext4: add more ext4_emergency_state() checks around sb_rdonly() (Brian Foster) [RHEL-121233]
  - ext4: add ext4_emergency_state() helper function (Brian Foster) [RHEL-121233]
  - ext4: add EXT4_FLAGS_EMERGENCY_RO bit (Brian Foster) [RHEL-121233]
  - ext4: convert EXT4_FLAGS_* defines to enum (Brian Foster) [RHEL-121233]
  - ext4: pack holes in ext4_inode_info (Brian Foster) [RHEL-121233]
  - ext4: remove unused member 'i_unwritten' from 'ext4_inode_info' (Brian Foster) [RHEL-121233]
  - jbd2: drop JBD2_ABORT_ON_SYNCDATA_ERR (Brian Foster) [RHEL-121233]
  - ext4: abort journal on data writeback failure if in data_err=abort mode (Brian Foster) [RHEL-121233]
  - ext4: extract ext4_has_journal_option() from __ext4_fill_super() (Brian Foster) [RHEL-121233]
  - ext4: reject the 'data_err=abort' option in nojournal mode (Brian Foster) [RHEL-121233]
  - ext4: do not convert the unwritten extents if data writeback fails (Brian Foster) [RHEL-121233]
  - ext4: replace opencoded ext4_end_io_end() in ext4_put_io_end() (Brian Foster) [RHEL-121233]
  - ext4: fix potential null dereference in ext4 kunit test (Brian Foster) [RHEL-121233]
  - ext4: Refactor out ext4_try_to_write_inline_data() (Brian Foster) [RHEL-121233]
  - ext4: Replace ext4_da_write_inline_data_begin() with ext4_generic_write_inline_data(). (Brian Foster) [RHEL-121233]
  - ext4: Introduce a new helper function ext4_generic_write_inline_data() (Brian Foster) [RHEL-121233]
  - ext4: Don't set EXT4_STATE_MAY_INLINE_DATA for ea inodes (Brian Foster) [RHEL-121233]
  - ext4: Remove a redundant return statement (Brian Foster) [RHEL-121233]
  - ext4: protect ext4_release_dquot against freezing (Brian Foster) [RHEL-121233]
  - ext4: introduce linear search for dentries (Brian Foster) [RHEL-121233]
  - jbd2: Avoid long replay times due to high number or revoke blocks (Brian Foster) [RHEL-121233]
  - ext4: move out common parts into ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: move out inode_lock into ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_do_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_insert_range() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_collapse_range() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_zero_range() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_punch_hole() (Brian Foster) [RHEL-121233]
  - ext4: don't write back data before punch hole in nojournal mode (Brian Foster) [RHEL-121233]
  - ext4: don't explicit update times in ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: remove writable userspace mappings before truncating page cache (Brian Foster) [RHEL-121233]
  - ext4: remove unneeded forward declaration (Brian Foster) [RHEL-121233]
  - jbd2: remove unused transaction->t_private_list (Brian Foster) [RHEL-121233]
  - ext4: remove unused ext4 journal callback (Brian Foster) [RHEL-121233]
  - ext4 fast_commit: make use of name_snapshot primitives (Brian Foster) [RHEL-121233]
  - ext4: use inode_set_cached_link() (Brian Foster) [RHEL-121233]
  - vfs: support caching symlink lengths in inodes (Brian Foster) [RHEL-121233]
  - jbd2: switch to using the crc32c library (Brian Foster) [RHEL-121233]
  - ext4: switch to using the crc32c library (Brian Foster) [RHEL-121233]
  - sched/fair: Have SD_SERIALIZE affect newidle balancing (Phil Auld) [RHEL-130534]
  - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (Phil Auld) [RHEL-130534]
  - Revert "Drivers: hv: Add CONFIG_HYPERV_VMBUS option" (Anusha Srivatsa) [RHEL-126642]
  - Revert "change the calling conventions for vfs_parse_fs_string()" (Anusha Srivatsa) [RHEL-126642]
  - redhat/configs: Add new configs from DRM 6.18 backport (Anusha Srivatsa) [RHEL-126642]
  - Merge DRM changes from upstream v6.17..v6.18 (Anusha Srivatsa) [RHEL-126642]
  - efi/x86: Memory protection on EfiGcdMemoryTypeMoreReliable (Lenny Szubowicz) [RHEL-124884]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-186.el10]
changelog:
  - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139492] {CVE-2025-68301}
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139467] {CVE-2025-68305}
  - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: use modern PM macros (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: add some simple inline functions for !CONFIG_PM (Jared Kangas) [RHEL-138679]
  - mmc: Remove redundant pm_runtime_mark_last_busy() calls (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Drop the use of sdhci_pltfm_free() (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: Use devm_mmc_alloc_host() helper (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: Return void from sdhci_runtime_suspend|resume_host() (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: optimize clock loopback selection with dummy pad support (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: refactor clock loopback selection logic (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: fix few build warnings (Jared Kangas) [RHEL-138679]
  - mmc: host: sdhci-esdhc-imx: refactor the system PM logic (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: export APIs for sdhci irq wakeup (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: fix defined but not used warnings (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: switch standard tuning to manual tuning (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: verify tuning control status after configuration (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: widen auto-tuning window for manual tuning (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: widen auto-tuning window for standard tuning (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: reset async FIFO before sending manual tuning command (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: explicitly reset tuning circuit via RSTT bit (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: calculate data timeout value based on clock (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Save tuning value when card stays powered in suspend (Jared Kangas) [RHEL-138679]
  - mmc: Use of_property_present() for non-boolean properties (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: enable 'SDHCI_QUIRK_NO_LED' quirk for S32G (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Update esdhc sysctl dtocv bitmask (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Implement emmc hardware reset (Jared Kangas) [RHEL-138679]
  - mmc: host: Fix typos in comments across various files (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED (Jared Kangas) [RHEL-138679]
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136974] {CVE-2025-40294}
  - Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136953] {CVE-2025-40301}
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136839] {CVE-2025-38568}
  - smb: client: fix UBSAN array-index-out-of-bounds in smb2_copychunk_range (Paulo Alcantara) [RHEL-116054]
  - smb3 client: add missing tracepoint for unsupported ioctls (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix refcount leak in smb2_open() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix refcount leak in parse_durable_handle_context() (Paulo Alcantara) [RHEL-116054]
  - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix memory leak in get_file_all_info() (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix memory and information leak in smb3_reconfigure() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix minimum SMB2 PDU size (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix minimum SMB1 PDU size (Paulo Alcantara) [RHEL-116054]
  - ksmbd: rename smb2_get_msg to smb_get_msg (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix to handle removal of rfc1002 header from smb_hdr (Paulo Alcantara) [RHEL-116054]
  - cifs: update internal module version number (Paulo Alcantara) [RHEL-116054]
  - smb: move some SMB1 definitions into common/smb1pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: align durable reconnect v2 context to 8 byte boundary (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix buffer validation by including null terminator size in EA length (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix refcount leak when invalid session is found on session lookup (Paulo Alcantara) [RHEL-116054]
  - ksmbd: remove redundant DACL check in smb_check_perm_dacl (Paulo Alcantara) [RHEL-116054]
  - smb: server: defer the initial recv completion logic to smb_direct_negotiate_recv_work() (Paulo Alcantara) [RHEL-116054]
  - smb: server: initialize recv_io->cqe.done = recv_done just once (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.connect.{lock,work} (Paulo Alcantara) [RHEL-116054]
  - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Paulo Alcantara) [RHEL-116054]
  - redhat/configs: enable CONFIG_RXGK (Paulo Alcantara) [RHEL-116054]
  - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Paulo Alcantara) [RHEL-116054]
  - smb/client: remove DeviceType Flags and Device Characteristics definitions (Paulo Alcantara) [RHEL-116054]
  - smb: move File Attributes definitions into common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: update struct duplicate_extents_to_file_ex (Paulo Alcantara) [RHEL-116054]
  - smb: move file_notify_information to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move SMB2 Notify Action Flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move notify completion filter flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb/client: add parentheses to NT error code definitions containing bitwise OR operator (Paulo Alcantara) [RHEL-116054]
  - smb: add documentation references for smb2 change notify definitions (Paulo Alcantara) [RHEL-116054]
  - smb/client: add 4 NT error code definitions (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value (Paulo Alcantara) [RHEL-116054]
  - smb/server: add comment to FileSystemName of FileFsAttributeInformation (Paulo Alcantara) [RHEL-116054]
  - smb/server: remove unused nterr.h (Paulo Alcantara) [RHEL-116054]
  - smb/server: rename include guard in smb_common.h (Paulo Alcantara) [RHEL-116054]
  - smb/client: update some SMB2 status strings (Paulo Alcantara) [RHEL-116054]
  - cifs: Remove dead function prototypes (Paulo Alcantara) [RHEL-116054]
  - smb/client: add two elements to smb2_error_map_table array (Paulo Alcantara) [RHEL-116054]
  - smb: rename to STATUS_SMB_NO_PREAUTH_INTEGRITY_HASH_OVERLAP (Paulo Alcantara) [RHEL-116054]
  - smb/client: remove unused elements from smb2_error_map_table array (Paulo Alcantara) [RHEL-116054]
  - smb/client: reduce loop count in map_smb2_to_linux_error() by half (Paulo Alcantara) [RHEL-116054]
  - smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-116054]
  - smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2 (Paulo Alcantara) [RHEL-116054]
  - cifs: client: allow changing multichannel mount options on remount (Paulo Alcantara) [RHEL-116054]
  - cifs: Do some preparation prior to organising the function declarations (Paulo Alcantara) [RHEL-116054]
  - cifs: Add a tracepoint to log EIO errors (Paulo Alcantara) [RHEL-116054]
  - cifs: Don't need state locking in smb2_get_mid_entry() (Paulo Alcantara) [RHEL-116054]
  - cifs: Remove the server pointer from smb_message (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix specification of function pointers (Paulo Alcantara) [RHEL-116054]
  - cifs: Replace SendReceiveBlockingLock() with SendReceive() plus flags (Paulo Alcantara) [RHEL-116054]
  - cifs: Clean up some places where an extra kvec[] was required for rfc1002 (Paulo Alcantara) [RHEL-116054]
  - cifs: Make smb1's SendReceive() wrap cifs_send_recv() (Paulo Alcantara) [RHEL-116054]
  - cifs: Remove the RFC1002 header from smb_hdr (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1 (Paulo Alcantara) [RHEL-116054]
  - cifs: client: enforce consistent handling of multichannel and max_channels (Paulo Alcantara) [RHEL-116054]
  - cifs: Use netfs_alloc/free_folioq_buffer() (Paulo Alcantara) [RHEL-116054]
  - smb: client: show smb lease key in open_dirs output (Paulo Alcantara) [RHEL-116054]
  - smb: client: show smb lease key in open_files output (Paulo Alcantara) [RHEL-116054]
  - ksmbd: ipc: fix use-after-free in ipc_msg_send_request (Paulo Alcantara) [RHEL-116054]
  - smb: client: relax WARN_ON_ONCE(SMBDIRECT_SOCKET_*) checks in recv_done() and smbd_conn_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: server: relax WARN_ON_ONCE(SMBDIRECT_SOCKET_*) checks in recv_done() and smb_direct_cm_handler() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce SMBDIRECT_DEBUG_ERR_PTR() helper (Paulo Alcantara) [RHEL-116054]
  - ksmbd: vfs: fix race on m_flags in vfs_cache (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Replace strcpy + strcat to improve convert_to_nt_pathname (Paulo Alcantara) [RHEL-116054]
  - smb: move FILE_SYSTEM_ATTRIBUTE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - ksmbd: implement error handling for STATUS_INFO_LENGTH_MISMATCH in smb server (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency (Paulo Alcantara) [RHEL-116054]
  - ksmbd: server: avoid busy polling in accept loop (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_reconn to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: fix some warnings reported by scripts/checkpatch.pl (Paulo Alcantara) [RHEL-116054]
  - smb: do some cleanups (Paulo Alcantara) [RHEL-116054]
  - smb: move FILE_SYSTEM_SIZE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move some duplicate struct definitions to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move list of FileSystemAttributes to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move SMB_NEGOTIATE_REQ to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move some duplicate definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_rsp_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_handle_reconnect_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_req_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move MAX_CIFS_SMALL_BUFFER_SIZE to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix CAP_BULK_TRANSFER value (Paulo Alcantara) [RHEL-116054]
  - ksmbd: skip lock-range check on equal size to avoid size==0 underflow (Paulo Alcantara) [RHEL-116054]
  - smb: move resume_key_ioctl_rsp to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move copychunk definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move smb_sockaddr_in and smb_sockaddr_in6 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move SMB1_PROTO_NUMBER to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: move get_rfc1002_len() to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: move smb_version_values to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: rename common/cifsglob.h to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb/server: update some misguided comment of smb2_0_server_cmds proc (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_oplock_break() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_ioctl() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_query_dir() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_notify() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_read() (Paulo Alcantara) [RHEL-116054]
  - afs: Fix uninit var in afs_alloc_anon_key() (Paulo Alcantara) [RHEL-116054]
  - afs: Fix delayed allocation of a cell's anonymous key (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix memory leak in cifs_construct_tcon() (Paulo Alcantara) [RHEL-116054]
  - cifs: Add the smb3_read_* tracepoints to SMB1 (Paulo Alcantara) [RHEL-116054]
  - cifs: fix memory leak in smb3_fs_context_parse_param error path (Paulo Alcantara) [RHEL-116054]
  - smb: client: introduce close_cached_dir_locked() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_disconnect_rdma_connection() turn CREATED into DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - smb: fix invalid username check in smb3_fs_context_parse_param() (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_disconnect_rdma_connection() turn CREATED into DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - ksmbd: close accepted socket when per-IP limit rejects connection (Paulo Alcantara) [RHEL-116054]
  - smb: server: rdma: avoid unmapping posted recv on accept failure (Paulo Alcantara) [RHEL-116054]
  - cifs: client: fix memory leak in smb3_fs_context_parse_param (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix cifs_pick_channel when channel needs reconnect (Paulo Alcantara) [RHEL-116054]
  - smb: client: validate change notify buffer before copy (Paulo Alcantara) [RHEL-116054]
  - ksmbd: detect RDMA capable netdevs include IPoIB (Paulo Alcantara) [RHEL-116054]
  - ksmbd: detect RDMA capable lower devices when bridge and vlan netdev is used (Paulo Alcantara) [RHEL-116054]
  - smb: client: call smbd_destroy() in the same splace as kernel_sock_shutdown()/sock_release() (Paulo Alcantara) [RHEL-116054]
  - afs: Fix dynamic lookup to fail on cell lookup failure (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_cm_handler() call ib_drain_qp() after smb_direct_disconnect_rdma_work() (Paulo Alcantara) [RHEL-116054]
  - smb: server: call smb_direct_post_recv_credits() when the negotiation is done (Paulo Alcantara) [RHEL-116054]
  - ksmbd: transport_ipc: validate payload size before reading handle (Paulo Alcantara) [RHEL-116054]
  - cifs: fix typo in enable_gcm_256 module parameter (Paulo Alcantara) [RHEL-116054]
  - smb: server: let free_transport() wait for SMBDIRECT_SOCKET_DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-116054]
  - cifs: Call the calc_signature functions directly (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix TCP_Server_Info::credits to be signed (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: simplify sibling_list handling in smb_direct_flush_send_list/send_done (Paulo Alcantara) [RHEL-116054]
  - smb: server: smb_direct_disconnect_rdma_connection() already wakes all waiters on error (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: allocate enough space for RW WRs and ib_drain_qp() (Paulo Alcantara) [RHEL-116054]
  - cifs: Add a couple of missing smb3_rw_credits tracepoints (Paulo Alcantara) [RHEL-116054]
  - smb: client: allocate enough space for MR WRs and ib_drain_qp() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_destroy() wait for SMBDIRECT_SOCKET_DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - smb: move some duplicate definitions to common/cifsglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() keep smbdirect_mr_io memory if registered (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix recursive locking in RPC handle list access (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix possible refcount leak in smb2_sess_setup() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix possible memory leak in smb2_read() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() call ib_dereg_mr() before ib_dma_unmap_sg() (Paulo Alcantara) [RHEL-116054]
  - smb: client: call ib_dma_unmap_sg if mr->sgt.nents is not 0 (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logic in smbd_deregister_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logic in smbd_register_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logic in allocate_mr_list() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() remove locked from the list (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() call list_del(&mr->list) (Paulo Alcantara) [RHEL-116054]
  - smb: client: change smbd_deregister_mr() to return void (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_mr_io.{kref,mutex} and SMBDIRECT_MR_DISABLED (Paulo Alcantara) [RHEL-116054]
  - smb: client: Omit one redundant variable assignment in cifs_xattr_set() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-116054]
  - smb: server: Use common error handling code in smb_direct_rdma_xmit() (Paulo Alcantara) [RHEL-116054]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-116054]
  - cifs: Add comments for DeletePending assignments in open functions (Paulo Alcantara) [RHEL-116054]
  - cifs: Add fallback code path for cifs_mkdir_setinfo() (Paulo Alcantara) [RHEL-116054]
  - cifs: Allow fallback code in smb_set_file_info() also for directories (Paulo Alcantara) [RHEL-116054]
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove redudant assignment in cifs_strict_fsync() (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix race with fallocate(2) and AIO+DIO (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix missing timestamp updates after ftruncate(2) (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix missing timestamp updates with O_TRUNC (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix copy_to_iter return value check (Paulo Alcantara) [RHEL-116054]
  - smb: client: batch SRV_COPYCHUNK entries to cut round trips (Paulo Alcantara) [RHEL-116054]
  - smb: client: Omit an if branch in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Return directly after a failed genlmsg_new() in cifs_swn_send_register_message() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Use common code in cifs_do_create() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Return a status code only as a constant in cifs_spnego_key_instantiate() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Use common code in cifs_lookup() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Reduce the scopes for a few variables in two functions (Paulo Alcantara) [RHEL-116054]
  - cifs: client: force multichannel=off when max_channels=1 (Paulo Alcantara) [RHEL-116054]
  - smb: client: transport: minor indentation style fix (Paulo Alcantara) [RHEL-116054]
  - smb: client: transport: avoid reconnects triggered by pending task work (Paulo Alcantara) [RHEL-116054]
  - ksmbd: increase session and share hash table bits (Paulo Alcantara) [RHEL-116054]
  - ksmbd: replace connection list with hash table (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add an error print when maximum IP connections limit is reached (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add max ip connections parameter (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix error code overwriting in smb2_get_info_filesystem() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: copy overlapped range within the same file (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use sock_create_kern interface to create kernel socket (Paulo Alcantara) [RHEL-116054]
  - ksmbd: make ksmbd thread names distinct by client IP (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix race condition in RPC handle list access (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix crypto buffers in non-linear memory (Paulo Alcantara) [RHEL-116054]
  - smb: client: add tcon information to smb2_reconnect() debug messages (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_flush_send_list() invalidate a remote key first (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of ib_alloc_cq_any() instead of ib_alloc_cq() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make consitent use of spin_lock_irq{save,restore}() in transport_rdma.c (Paulo Alcantara) [RHEL-116054]
  - smb: server: let {free_transport,smb_direct_disconnect_rdma_{work,connection}}() wake up all wait queues (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_disconnect_rdma_connection() disable all work but disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: server: fill in smbdirect_socket.first_error on error (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_disconnect_rdma_connection() set SMBDIRECT_SOCKET_ERROR... (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_send_negotiate_response() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to {enqueue,get_first}_reassembly() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_post_send_data() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to post_sendmsg() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_create_header() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to manage_keep_alive_before_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to manage_credits_prior_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to calc_rw_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to wait_for_rw_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to wait_for_send_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to wait_for_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_post_send() (Paulo Alcantara) [RHEL-116054]
  - smb: server: remove unused struct struct smb_direct_transport argument from smb_direct_send_ctx_init() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_{alloc,free}_sendmsg() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_connect() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_prepare_negotiation() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_accept_client() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_post_recv() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_create_qpair() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_qpair_handler() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_cm_handler() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_init_params() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_get_max_fr_pages() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_{create,destroy}_pools() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to {get_free,put}_recvmsg() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116054]
  - smb: server: implement correct keepalive and timeout handling for smbdirect (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.idle.immediate_work (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket_parameters.negotiate_timeout_msec and change to 5s (Paulo Alcantara) [RHEL-116054]
  - smb: server: fill smbdirect_socket_parameters at the beginning and use the values from there (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass ksmbd_transport to get_smbd_max_read_write_size() (Paulo Alcantara) [RHEL-116054]
  - smb: server: remove useless casts from KSMBD_TRANS/SMBD_TRANS (Paulo Alcantara) [RHEL-116054]
  - smb: server: replace smb_trans_direct_transfort() with SMBD_TRANS() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116054]
  - smb: server: manage recv credits by counting posted recv_io and granted credits (Paulo Alcantara) [RHEL-116054]
  - smb: server: take the recv_credit_target from the negotiate req and always limit the range (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_rw_io (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use smbdirect_socket.rw_io.credits (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_send_batch (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.send_io.pending.{count,zero_wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket_init() (Paulo Alcantara) [RHEL-116054]
  - smb: server: don't wait for info->send_pending == 0 on error (Paulo Alcantara) [RHEL-116054]
  - smb: server: move smb_direct_disconnect_rdma_work() into free_transport() (Paulo Alcantara) [RHEL-116054]
  - smb: server: only turn into SMBDIRECT_SOCKET_CONNECTED when negotiation is done (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116054]
  - smb: server: queue post_recv_credits_work in put_recvmsg() and avoid count_avail_recvmsg (Paulo Alcantara) [RHEL-116054]
  - smb: server: add a pr_info() when the server starts running (Paulo Alcantara) [RHEL-116054]
  - smb: server: make only use of wake_up[_all]() in transport_rdma.c (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_send_io (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket->recv_io.expected (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect.h (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: server: fix IRD/ORD negotiation with the client (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_post_send_iter() call ib_dma_map_single() for the header first (Paulo Alcantara) [RHEL-116054]
  - smb: client: defer calling ib_alloc_pd() after we are connected (Paulo Alcantara) [RHEL-116054]
  - smb: client: allocate smbdirect workqueue at the beginning of _smbd_get_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make consitent use of spin_lock_irq{save,restore}() in smbdirect.c (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_{destroy,disconnect_rdma_{work,connection}}() wake up all wait queues (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_disconnect_rdma_connection() disable all work but disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: fill in smbdirect_socket.first_error on error (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_disconnect_rdma_connection() set SMBDIRECT_SOCKET_ERROR... (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused struct smbdirect_socket argument of smbd_iter_to_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to get_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_negotiate() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_negotiate_req() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_ia_open() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_create_id() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_qp_async_error_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_conn_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_full_iter() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_empty() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_iter() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to manage_keep_alive_before_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to manage_credits_prior_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_recv() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_mr_list() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {enqueue,_get_first}_reassembly() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_caches_and_workqueue() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_receive_buffers() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {get,put}_receive_buffer() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.mr_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: add and use smbd_get_parameters() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116054]
  - smb: client: move rdma_readwrite_threshold from smbd_connection to TCP_Server_Info (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused smbd_connection.count_reassembly_queue (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused smbd_connection->protocol (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix smbdirect keep alive handling to match the documentation (Paulo Alcantara) [RHEL-116054]
  - smb: client: send empty packets via send_immediate_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116054]
  - smb: client: fill smbdirect_socket_parameters at the beginning and use the values from there (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove useless smbd_connection.send_immediate (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116054]
  - smb: client: count the number of posted recv_io messages in order to calculated credits (Paulo Alcantara) [RHEL-116054]
  - smb: client: limit the range of info->receive_credit_target (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove info->wait_receive_queues handling in smbd_destroy() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of ib_wc_status_msg() and skip IB_WC_WR_FLUSH_ERR logging (Paulo Alcantara) [RHEL-116054]
  - smb: client: queue post_recv_credits_work also if the peer raises the credit target (Paulo Alcantara) [RHEL-116054]
  - smb: client: make sure smbd_disconnect_rdma_work() doesn't run after smbd_destroy() took over (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_init() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make only use of wake_up[_all]() in smbdirect.c (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116054]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_RESOLVE_{ADDR,ROUTE}_RUNNING for completion (Paulo Alcantara) [RHEL-116054]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_NEGOTIATE_RUNNING for completion (Paulo Alcantara) [RHEL-116054]
  - smb: client: adjust smbdirect related output of cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.first_error (Paulo Alcantara) [RHEL-116054]
  - smb: client/smbdirect: introduce SMBDIRECT_SOCKET_ERROR (Paulo Alcantara) [RHEL-116054]
  - smb: client/smbdirect: replace SMBDIRECT_SOCKET_CONNECTING with more detailed states (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix sending the iwrap custom IRD/ORD negotiation messages (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: let smbdirect_socket_init() initialize all [delayed_]work_structs as disabled (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.mr_io.* (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_rw_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.rw_io.credits (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_send_batch (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_init() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_status_string() (Paulo Alcantara) [RHEL-116054]
  - include/linux/fs.h: add inode_lock_killable() (Paulo Alcantara) [RHEL-116054]
  - netfs: fix reference leak (Paulo Alcantara) [RHEL-116054]
  - afs: Fix potential null pointer dereference in afs_put_server (Paulo Alcantara) [RHEL-116054]
  - smb: server: use disable_work_sync in transport_rdma.c (Paulo Alcantara) [RHEL-116054]
  - smb: server: don't use delayed_work for post_recv_credits_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) (Paulo Alcantara) [RHEL-116054]
  - smb: client: use disable[_delayed]_work_sync in smbdirect.c (Paulo Alcantara) [RHEL-116054]
  - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-116054]
  - netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-116054]
  - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size (Paulo Alcantara) [RHEL-116054]
  - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_writev() respect SMB_DIRECT_MAX_SEND_SGES (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix untrusted unsigned subtract (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix unhandled errors in rxgk_verify_packet_integrity() (Paulo Alcantara) [RHEL-116054]
  - cifs: prevent NULL pointer dereference in UTF16 conversion (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix spellings in comments (Paulo Alcantara) [RHEL-116054]
  - ksmbd: allow a filename to contain colons on SMB3.1.1 posix extensions (Paulo Alcantara) [RHEL-116054]
  - smb3 client: fix return code mapping of remap_file_range (Paulo Alcantara) [RHEL-116054]
  - iov_iter: iterate_folioq: fix handling of offset >= folio size (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix refcount leak causing resource not released (Paulo Alcantara) [RHEL-116054]
  - ksmbd: extend the connection limiting mechanism to support IPv6 (Paulo Alcantara) [RHEL-116054]
  - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-116054]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-116054]
  - smb: client: don't wait for info->send_pending == 0 on error (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-116054]
  - smb3: fix for slab out of bounds on mount to ksmbd (Paulo Alcantara) [RHEL-116054]
  - cifs: avoid extra calls to strlen() in cifs_get_spnego_key() (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix collect_sample() to handle any iterator type (Paulo Alcantara) [RHEL-116054]
  - smb: server: Fix extension string in ksmbd_extract_shortname() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: limit repeated connections from clients with the same IP (Paulo Alcantara) [RHEL-116054]
  - smb: client: only use a single wait_queue to monitor smbdirect connection status (Paulo Alcantara) [RHEL-116054]
  - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logging in smbd_conn_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: client: return an error if rdma_connect does not return within 5 seconds (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: add smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of struct smbdirect_send_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_send_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: add SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused enum smbd_connection_status (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smb: smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket->recv_io.expected (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.expected (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused smbd_connection->fragment_reassembly_remaining (Paulo Alcantara) [RHEL-116054]
  - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (Paulo Alcantara) [RHEL-116054]
  - smb: client: let recv_done() cleanup before notifying the callers. (Paulo Alcantara) [RHEL-116054]
  - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove separate empty_packet_queue (Paulo Alcantara) [RHEL-116054]
  - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (Paulo Alcantara) [RHEL-116054]
  - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (Paulo Alcantara) [RHEL-116054]
  - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Paulo Alcantara) [RHEL-116054]
  - smb: server: remove separate empty_recvmsg_queue (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix corrupted mtime and ctime in smb2_open (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix Preauh_HashValue race condition (Paulo Alcantara) [RHEL-116054]
  - ksmbd: check return value of xa_store() in krb5_authenticate (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix null pointer dereference error in generate_encryptionkey (Paulo Alcantara) [RHEL-116054]
  - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix to use conn aborts for conn-wide failures (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix transmission of an abort in response to an abort (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix notification vs call-release vs recvmsg (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix recv-recv race of completed call (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix irq-disabled in local_bh_enable() (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix oops due to non-existence of prealloc backlog struct (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix bug due to prealloc collision (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix over large frame size warning (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix potential use-after-free in oplock/lease break ack (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of rdma_destroy_qp() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: handle set/get info file for streamed file (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix null pointer dereference in destroy_previous_session (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add free_transport ops in ksmbd connection (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix return from none_validate_challenge() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension (Paulo Alcantara) [RHEL-116054]
  - ksmbd: provide zero as a unique ID to the Mac client (Paulo Alcantara) [RHEL-116054]
  - ksmbd: remove unnecessary softdep on crc32 (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use SHA-256 library API instead of crypto_shash API (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Fix change to use SG miter to use offset (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Fix some reference count leaks (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Remove deadcode (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Set error code in rxgk_yfs_decode_ticket() (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxperf: Add test RxGK server keys (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Add more CHALLENGE/RESPONSE packet tracing (Paulo Alcantara) [RHEL-116054]
  - afs: Use rxgk RESPONSE to pass token for callback channel (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Display security params in the afs_cb_call tracepoint (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Allow the app to store private data on peer structs (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Implement connection rekeying (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Implement the yfs-rxgk security class (GSSAPI) (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Provide infrastructure and key derivation (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Add YFS RxGK (GSSAPI) security class (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Add the security index for yfs-rxgk (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Allow CHALLENGEs to the passed to the app for a RESPONSE (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Remove some socket lock acquire/release annotations (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Pull out certain app callback funcs into an ops table (Paulo Alcantara) [RHEL-116054]
  - rxrpc: kdoc: Update function descriptions and add link from rxrpc.rst (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use list_first_entry_or_null for opinfo_get_list() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix rename failure (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix stream write failure (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix UAF in __close_file_table_ids (Paulo Alcantara) [RHEL-116054]
  - ksmbd: prevent out-of-bounds stream writes by validating *pos (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix memory leak in parse_lease_state() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: prevent rename with empty string (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in session logoff (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in kerberos authentication (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open (Paulo Alcantara) [RHEL-116054]
  - smb: server: smb2pdu: check return value of xa_store() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Prevent integer overflow in calculation of deadtime (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix the warning from __kernel_write_iter (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in __smb2_lease_break_noti() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix dangling pointer in krb_authenticate (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix null pointer dereference in alloc_preauth_hash() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: validate zero num_subauth before sub_auth is accessed (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix overflow in dacloffset bounds check (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix session use-after-free in multichannel connection (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix r_count dec/increment mismatch (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix multichannel connection failure (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use ib_device_get_netdev() instead of calling ops.get_netdev (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use aead_request_free to match aead_request_alloc (Paulo Alcantara) [RHEL-116054]
  - Revert "ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev()" (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add bounds check for create lease context (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add bounds check for durable handle context (Paulo Alcantara) [RHEL-116054]
  - ksmbd: make SMB_SERVER_KERBEROS5 enable by default (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Use str_read_write() and str_true_false() helpers (Paulo Alcantara) [RHEL-116054]
  - crypto: krb5 - Use SG miter instead of doing it by hand (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement crypto self-testing (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the AES enctypes from rfc8009 (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the AES enctypes from rfc3962 (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Provide RFC3961 setkey packaging functions (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Provide infrastructure and key derivation (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add an API to perform requests (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add an API to alloc and prepare a crypto object (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add an API to query the layout of the crypto section (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement Kerberos crypto core (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add some constants out of sunrpc headers (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Test manager data (Paulo Alcantara) [RHEL-116054]
  - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Paulo Alcantara) [RHEL-116054]
  - ksmbd: prevent connection release during oplock break notification (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_free_work_struct (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix bug on trap in smb2_lock (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in smb2_lock (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix type confusion via race condition when using ipc_msg_send_request (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix out-of-bounds in parse_sec_desc() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix integer overflows on 32 bit systems (Paulo Alcantara) [RHEL-116054]
  - ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Remove unused functions (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Remove unneeded if check in ksmbd_rdma_capable_netdev() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix a missing return value check bug (Paulo Alcantara) [RHEL-116054]
  - ksmbd: conn lock to serialize smb2 negotiate (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix broken transfers when exceeding max simultaneous operations (Paulo Alcantara) [RHEL-116054]
  - ksmbd: count all requests in req_running counter (Paulo Alcantara) [RHEL-116054]
  - ksmbd: set ATTR_CTIME flags when setting mtime (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix racy issue from session lookup and expire (Paulo Alcantara) [RHEL-116054]
  - ksmbd: retry iterate_dir in smb2_query_dir (Paulo Alcantara) [RHEL-116054]
  - ksmbd: align aux_payload_buf to avoid OOB reads in cryptographic operations (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Paulo Alcantara) [RHEL-116054]
  - smb: server: Fix building with GCC 15 (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in SMB request handling (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add debug print for pending request during server shutdown (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add netdev-up/down event debug print (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add debug prints to know what smb2 requests were received (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add debug print for rdma capable (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use msleep instaed of schedule_timeout_interruptible() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use __GFP_RETRY_MAYFAIL (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix malformed unsupported smb1 negotiate response (Paulo Alcantara) [RHEL-116054]
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136261] {CVE-2025-40318}
  - platform/x86: intel-uncore-freq: Add additional client processors (Steve Best) [RHEL-129946]
  - genirq/manage: Reduce priority of forced secondary interrupt handler (Crystal Wood) [RHEL-102562]
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (Steve Best) [RHEL-129704]
  - selftests: net-drv: stats: sanity check FEC histogram (Mohammad Heib) [RHEL-123858]
  - ethtool: add FEC bins histogram report (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove duplicated mm.o from Makefile (Mohammad Heib) [RHEL-123858]
  - net: ethtool: tsconfig: set command must provide a reply (Mohammad Heib) [RHEL-123858]
  - net: virtio_net: add get_rxrings ethtool callback for RX ring queries (Mohammad Heib) [RHEL-123858]
  - net: ethtool: use the new helper in rss_set_prep_indir() (Mohammad Heib) [RHEL-123858]
  - net: ethtool: update set_rxfh_indir to use ethtool_get_rx_ring_count helper (Mohammad Heib) [RHEL-123858]
  - net: ethtool: update set_rxfh to use ethtool_get_rx_ring_count helper (Mohammad Heib) [RHEL-123858]
  - net: ethtool: add get_rx_ring_count callback to optimize RX ring queries (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove the duplicated handling from ethtool_get_rxrings (Mohammad Heib) [RHEL-123858]
  - net: ethtool: add support for ETHTOOL_GRXRINGS ioctl (Mohammad Heib) [RHEL-123858]
  - net: ethtool: pass the num of RX rings directly to ethtool_copy_validate_indir (Mohammad Heib) [RHEL-123858]
  - net: ethtool: handle EOPNOTSUPP from ethtool get_ts_info() method (Mohammad Heib) [RHEL-123858]
  - net: ethtool: fix wrong type used in struct kernel_ethtool_ts_info (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: add test for RSS on flow label (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: add rss_api to the Makefile (Mohammad Heib) [RHEL-123858]
  - net: ethtool: support including Flow Label in the flow hash for RSS (Mohammad Heib) [RHEL-123858]
  - netlink: specs: ethtool: fix module EEPROM input/output arguments (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: context create and delete tests (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support removing contexts via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support creating contexts via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: move ethtool_rxfh_ctx_alloc() to common code (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: factor out populating response from context (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: factor out allocating memory for response (Mohammad Heib) [RHEL-123858]
  - ethtool: rejig the RSS notification machinery for more types (Mohammad Heib) [RHEL-123858]
  - ethtool: assert that drivers with sym hash are consistent for RSS contexts (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: test input-xfrm and hash fields (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting flow hashing fields (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting input-xfrm via Netlink (Mohammad Heib) [RHEL-123858]
  - netlink: specs: define input-xfrm enum in the spec (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: test setting hashing key via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting hkey via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting hfunc via Netlink (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: test setting indirection table via Netlink (Mohammad Heib) [RHEL-123858]
  - tools: ynl: support packing binary arrays of scalars (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: factor out checking min queue count (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: initial RSS_SET (indirection table handling) (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: test RSS header field configuration (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: report which fields are configured for hashing (Mohammad Heib) [RHEL-123858]
  - ethtool: mark ETHER_FLOW as usable for Rx hash (Mohammad Heib) [RHEL-123858]
  - tools: ynl: decode enums in auto-ints (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: make sure dump takes the rss lock (Mohammad Heib) [RHEL-123858]
  - net: ethtool: reduce indent for _rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove the compat code for _rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - eth: mlx5: migrate to the *_rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - eth: ice: drop the dead code related to rss_contexts (Mohammad Heib) [RHEL-123858]
  - eth: otx2: migrate to the *_rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - net: ethtool: fix leaking netdev ref if ethnl_default_parse() failed (Mohammad Heib) [RHEL-123858]
  - net: ethtool: move get_rxfh callback under the rss_lock (Mohammad Heib) [RHEL-123858]
  - net: ethtool: move rxfh_fields callbacks under the rss_lock (Mohammad Heib) [RHEL-123858]
  - net: ethtool: take rss_lock for all rxfh changes (Mohammad Heib) [RHEL-123858]
  - net: ethtool: avoid OOB accesses in PAUSE_SET (Mohammad Heib) [RHEL-123858]
  - netlink: specs: ethtool: replace underscores with dashes in names (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: test RSS Netlink notifications (Mohammad Heib) [RHEL-123858]
  - doc: ethtool: mark ETHTOOL_GRXFHINDIR as reimplemented (Mohammad Heib) [RHEL-123858]
  - net: ethtool: rss: add notifications (Mohammad Heib) [RHEL-123858]
  - net: ethtool: copy req_info from SET to NTF (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove the data argument from ethtool_notify() (Mohammad Heib) [RHEL-123858]
  - net: ethtool: call .parse_request for SET handlers (Mohammad Heib) [RHEL-123858]
  - net: ethtool: dynamically allocate full req size req (Mohammad Heib) [RHEL-123858]
  - netlink: specs: add the multicast group name to spec (Mohammad Heib) [RHEL-123858]
  - eth: Update rmon hist range (Mohammad Heib) [RHEL-123858]
  - net: Add support for providing the PTP hardware source in tsinfo (Mohammad Heib) [RHEL-123858]
  - net: ethtool: netlink: Use netdev_hold for dumpit() operations (Mohammad Heib) [RHEL-123858]
  - net: ethtool: phy: Convert the PHY_GET command to generic phy dump (Mohammad Heib) [RHEL-123858]
  - net: ethtool: Introduce per-PHY DUMP operations (Mohammad Heib) [RHEL-123858]
  - net: ethtool: Adjust exactly ETH_GSTRING_LEN-long stats to use memcpy (Mohammad Heib) [RHEL-123858]
  - net: freescale: use ethtool string helpers (Mohammad Heib) [RHEL-123858]
  - compiler_types: Introduce __nonstring_array (Mohammad Heib) [RHEL-123858]
  - net: ethtool: fix get_ts_stats() documentation (Mohammad Heib) [RHEL-123858]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-187.el10]
changelog:
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout (Michal Rábek) [RHEL-140732]
  - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-111046]
  - thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95660]
  - ipv4: start using dst_dev_rcu() (Hangbin Liu) [RHEL-128993]
  - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (Hangbin Liu) [RHEL-128993]
  - tcp_metrics: use dst_dev_net_rcu() (Hangbin Liu) [RHEL-128993]
  - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129089] {CVE-2025-40170}
  - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128993] {CVE-2025-40158}
  - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129028] {CVE-2025-40135}
  - ipv6: start using dst_dev_rcu() (Hangbin Liu) [RHEL-128993]
  - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128993]
  - ipv6: mcast: Add ip6_mc_find_idev() helper (Hangbin Liu) [RHEL-128993]
  - net: ipv4: guard ip_mr_output() with rcu (Hangbin Liu) [RHEL-128993]
  - net: ipv4: Add ip_mr_output() (Hangbin Liu) [RHEL-128993]
  - net: ipv4: ipmr: Split ipmr_queue_xmit() in two (Hangbin Liu) [RHEL-128993]
  - net: ipv4: ipmr: ipmr_queue_xmit(): Drop local variable `dev' (Hangbin Liu) [RHEL-128993]
  - RDMA/irdma: avoid invalid read in irdma_net_event (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix irdma_alloc_ucontext_resp padding (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix SRQ shadow area address initialization (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove doorbell elision logic (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Do not set IBK_LOCAL_DMA_LKEY for GEN3+ (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add missing mutex destroy (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix SIGBUS in AEQ destroy (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add a missing kfree of struct irdma_pci_f for GEN2 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix data race in irdma_free_pble (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix data race in irdma_sc_ccq_arm (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove redundant NULL check of udata in irdma_create_user_ah() (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove unused CQ registry (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Take a lock before moving SRQ tail in poll_cq (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: CQ size and shadow update changes for GEN3 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Silently consume unsignaled completions (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Initialize cqp_cmds_info to prevent resource leaks (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Enforce local fence for LOCAL_INV WRs (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix vf_id size to u16 to avoid overflow (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Set irdma_cq cq_num field during CQ create (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix SD index calculation (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove unused struct irdma_cq fields (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix positive vs negative error codes in irdma_post_send() (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Update Kconfig (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Extend CQE Error and Flush Handling for GEN3 Devices (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add Atomic Operations support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Restrict Memory Window and CQE Timestamping to GEN3 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add SRQ support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Support 64-byte CQEs and GEN3 CQE opcode decoding (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add support for V2 HMC resource management scheme (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Extend QP context programming for GEN3 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 virtual QP1 support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Introduce GEN3 vPort driver support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 HW statistics support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 support for AEQ and CEQ (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 CQP support with deferred completions (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Discover and set up GEN3 hardware register layout (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 core driver support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Refactor GEN2 auxiliary driver (Kamal Heib) [RHEL-99206]
  - ice, irdma: fix an off by one in error handling code (Kamal Heib) [RHEL-99206]
  - irdma: free iwdev->rf after removing MSI-X (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Switch to using the crc32c library (Kamal Heib) [RHEL-99206]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-188.el10]
changelog:
  - arm64: dts: freescale: Add GMAC Ethernet for S32G2 EVB and RDB2 and S32G3 RDB3 (CKI Backport Bot) [RHEL-141789]
  - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() (Jared Kangas) [RHEL-136697]
  - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc (Jared Kangas) [RHEL-136697]
  - pinctrl: s32: add missing pins definitions (Jared Kangas) [RHEL-136697]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-189.el10]
changelog:
  - selftests/mm: skip hugepage-mremap test if userfaultfd unavailable (Chunyu Hu) [RHEL-112331]
  - selftests/mm: skip thuge-gen test if system is not setup properly (Chunyu Hu) [RHEL-112331]
  - selftests/mm: use generic read_sysfs in thuge-gen test (Chunyu Hu) [RHEL-112331]
  - selftests/mm: extract read_sysfs and write_sysfs into vm_util (Chunyu Hu) [RHEL-112331]
  - selftests/mm: deduplicate default page size test results in thuge-gen (Chunyu Hu) [RHEL-112331]
  - selftests/mm: fix thuge-gen test name uniqueness (Chunyu Hu) [RHEL-112331]
  - selftests/mm: fix child process exit codes in ksm_functional_tests (Chunyu Hu) [RHEL-112331]
  - selftest/mm: fix ksm_funtional_test failures (Chunyu Hu) [RHEL-112331]
  - selftests/mm: add support to test 4PB VA on PPC64 (Chunyu Hu) [RHEL-112331]
  - mm/selftests: fix incorrect pointer being passed to mark_range() (Chunyu Hu) [RHEL-112331]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-190.el10]
changelog:
  - nvme: fix PCIe subsystem reset controller state transition (John Meneghini) [RHEL-137767]
  - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (John Meneghini) [RHEL-137767]
  - powerpc/eeh: Make EEH driver device hotplug safe (John Meneghini) [RHEL-137767] {CVE-2025-38576}
  - sched: Fix build for modules using set_tsk_need_resched() (Phil Auld) [RHEL-134848]
  - sched: Export hidden tracepoints to modules (Phil Auld) [RHEL-134848]
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132906] {CVE-2023-53034}
  - tick/sched: Limit non-timekeeper CPUs calling jiffies update (CKI Backport Bot) [RHEL-132754]
  - redhat: enable TDX host config (Paolo Bonzini) [RHEL-115483]
  - KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115483]
  - x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115483]
  - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115483]
  - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115483]
  - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115483]
  - x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115483]
  - x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-115483]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-191.el10]
changelog:
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-88203]
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138039] {CVE-2025-38349}
  - blk-mq: Abort suspend when wakeup events are pending (Ming Lei) [RHEL-137853]
  - fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137103] {CVE-2025-40271}
  - net: netdevsim: fix inconsistent carrier state after link/unlink (Xin Long) [RHEL-130765]
  - selftests: Add napi threaded busy poll test in `busy_poller` (Xin Long) [RHEL-130765]
  - net: Extend NAPI threaded polling to allow kthread based busy polling (Xin Long) [RHEL-130765]
  - netdevsim: set the carrier when the device goes up (Xin Long) [RHEL-130765]
  - net: Use NAPI_* in test_bit when stopping napi kthread (Xin Long) [RHEL-130765]
  - docs: remove obsolete description about threaded NAPI (Xin Long) [RHEL-130765]
  - net: prevent deadlocks when enabling NAPIs with mixed kthread config (Xin Long) [RHEL-130765]
  - selftests: drv-net: don't assume device has only 2 queues (Xin Long) [RHEL-130765]
  - selftests: drv-net: test the napi init state (Xin Long) [RHEL-130765]
  - net: update NAPI threaded config even for disabled NAPIs (Xin Long) [RHEL-130765]
  - net: Update threaded state in napi config in netif_set_threaded (Xin Long) [RHEL-130765]
  - net: define an enum for the napi threaded state (Xin Long) [RHEL-130765]
  - net: Use netif_threaded_enable instead of netif_set_threaded in drivers (Xin Long) [RHEL-130765]
  - net: Create separate gro_flush_normal function (Xin Long) [RHEL-130765]
  - net: s/dev_set_threaded/netif_set_threaded/ (Xin Long) [RHEL-130765]
  - Add support to set NAPI threaded for individual NAPI (Xin Long) [RHEL-130765]
  - net: stop napi kthreads when THREADED napi is disabled (Xin Long) [RHEL-130765]
  - net: gro: expose GRO init/cleanup to use outside of NAPI (Xin Long) [RHEL-130765]
  - net: gro: decouple GRO from the NAPI layer (Xin Long) [RHEL-130765]
  - netdevsim: support NAPI config (Xin Long) [RHEL-130765]
  - selftests: net: cleanup busy_poller.c (Xin Long) [RHEL-130765]
  - bus: mhi: host: pci_generic: Set DMA mask for VFs (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Reset QDU100 while the MHI driver is removed (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Add SRIOV support (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Read SUBSYSTEM_VENDOR_ID for VF's to check status (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: Add support for separate controller configurations for VF and PF (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: ep: Fix chained transfer handling in read path (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: Notify EE change via uevent (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Add support for all Foxconn T99W696 SKU variants (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - net: mana: Handle hardware recovery events when probing the device (Maxim Levitsky) [RHEL-131892]
  - net: mana: Drop TX skb on post_work_request failure and unmap resources (Maxim Levitsky) [RHEL-131892]
  - net: mana: Handle SKB if TX SGEs exceed hardware limit (Maxim Levitsky) [RHEL-131892]
  - net: mana: Add standard counter rx_missed_errors (Maxim Levitsky) [RHEL-131892]
  - net: mana: Move hardware counter stats from per-port to per-VF context (Maxim Levitsky) [RHEL-131892]
  - net: mana: Fix incorrect speed reported by debugfs (Maxim Levitsky) [RHEL-131892]
  - net: mana: Support HW link state events (Maxim Levitsky) [RHEL-131892]
  - RDMA/mana_ib: Extend modify QP (Maxim Levitsky) [RHEL-131892]
  - net: mana: Reduce waiting time if HWC not responding (Maxim Levitsky) [RHEL-131892]
  - net: mana: Remove redundant netdev_lock_ops_to_full() calls (Maxim Levitsky) [RHEL-131892]
  - net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Maxim Levitsky) [RHEL-131892]
  - RDMA/mana_ib: Drain send wrs of GSI QP (Maxim Levitsky) [RHEL-131892]
  - net: hv_netvsc: fix loss of early receive events from host during channel open. (Maxim Levitsky) [RHEL-131892]
  - net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Maxim Levitsky) [RHEL-131892]
  - net: mana: Add speed support in mana_get_link_ksettings (Maxim Levitsky) [RHEL-131892]
  - net: mana: Add support for net_shaper_ops (Maxim Levitsky) [RHEL-131892]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129117] {CVE-2025-40154}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-192.el10]
changelog:
  - ima: Access decompressed kernel module to verify appended signature (Coiby Xu) [RHEL-104353]
  - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (John Meneghini) [RHEL-96459]
  - qede: convert to use ndo_hwtstamp callbacks (John Meneghini) [RHEL-96459]
  - bnx2x: convert to use ndo_hwtstamp callbacks (John Meneghini) [RHEL-96459]
  - net: qed: Remove redundant NULL checks after list_first_entry() (John Meneghini) [RHEL-96459]
  - qed: Don't collect too many protection override GRC elements (John Meneghini) [RHEL-96459]
  - net: qed: reduce stack usage for TLV processing (John Meneghini) [RHEL-96459]
  - net: qede: Initialize qede_ll_ops with designated initializer (John Meneghini) [RHEL-96459]
  - scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops (John Meneghini) [RHEL-96459]
  - qed: Remove unused qed_db_recovery_dp (John Meneghini) [RHEL-96459]
  - qed: Remove unused qed_print_mcp_trace_* (John Meneghini) [RHEL-96459]
  - qed: Remove unused qed_ptt_invalidate (John Meneghini) [RHEL-96459]
  - qed: Remove unused qed_calc_*_ctx_validation functions (John Meneghini) [RHEL-96459]
  - qed: Remove unused qed_memset_*ctx functions (John Meneghini) [RHEL-96459]
  - net: bnx2x: use ethtool string helpers (John Meneghini) [RHEL-96459]
  - net: tls: Cancel RX async resync request on rcd_delta overflow (CKI Backport Bot) [RHEL-133478]
  - net: tls: Change async resync helpers argument (CKI Backport Bot) [RHEL-133478]
  - selftests: tls: add test for short splice due to full skmsg (CKI Backport Bot) [RHEL-133478]
  - selftests: net: tls: add tests for cmsg vs MSG_MORE (CKI Backport Bot) [RHEL-133478]
  - tls: don't rely on tx_work during send() (CKI Backport Bot) [RHEL-133478]
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-133478]
  - tls: always set record_type in tls_process_cmsg (CKI Backport Bot) [RHEL-133478]
  - tls: wait for async encrypt in case of error during latter iterations of sendmsg (CKI Backport Bot) [RHEL-133478]
  - tls: trim encrypted message to match the plaintext on short splice (CKI Backport Bot) [RHEL-133478]
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137688] {CVE-2025-40304}
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136947] {CVE-2025-40322}
  - wifi: rtw88: limit indirect IO under powered off for RTL8822CS (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: Fix firmware version handling (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Move mt76_abort_scan out of mt76_reset_device() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: hw_scan: Don't let the operating channel be last (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: always take beacon ies in link grading (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm: fix beacon template/fixed rate (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: fix aux ROC time event iterator usage (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211_hwsim: Fix possible NULL dereference (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: skip rate verification for not captured PSDUs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: reject address change while connecting (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - Revert "wifi: ath12k: Fix missing station power save configuration" (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: use wiphy_hrtimer_work for ml_reconf_work (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: use wiphy_hrtimer_work for ttlm_work (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: add an hrtimer based delayed work item (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: fix key tailroom accounting leak (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Jose Ignacio Tornos Martinez) [RHEL-132586] {CVE-2025-40321}
  - wifi: mac80211: reset FILS discovery and unsol probe resp intervals (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: free skb during idr cleanup callback (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath10k: Fix memory leak on unsupported WMI command (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: enforce CPU endian format for all QMI data (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Use 1KB Cache Flush Command for QoS TID Descriptors (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Fix flush cache failure during RX queue update (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Add Retry Mechanism for REO RX Queue Update Failures (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Refactor REO command to use ath12k_dp_rx_tid_rxq (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Refactor RX TID buffer cleanup into helper function (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Refactor RX TID deletion handling into helper function (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: remove IEEE80211_CHAN_{1,2,4,8,16}MHZ flags (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: fix Rx packet handling when pubsta information is not available (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: remove ieee80211_s1g_channel_width (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: correctly initialise S1G chandef for STA (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: correctly implement and validate S1G chandef (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: remove tx_handlers_drop debugfs stats (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Remove redundant rcu_read_lock/unlock() in spin_lock (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211_hwsim: Add simulation support for NAN device (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Extend support for changing NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Export an API to check if NAN is started (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Get the correct interface for non-netdev skb status (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Track NAN interface start/stop (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Accept management frames on NAN interface (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Support Tx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Store the NAN cluster ID (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Support Tx/Rx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Advertise supported NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: Add more NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Add cluster joined notification APIs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: Add NAN Discovery Window (DW) notification (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: Add more configuration options for NAN commands (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Extend beacon miss handling for MLO non-AP STA (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Add support to handle reason inactivity STA kickout event for QCN9274/IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: enhance the WMI_PEER_STA_KICKOUT event with reasons and RSSI reporting (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: report station mode per-chain signal strength (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath10k: Fix connection after GTK rekeying (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath10k: avoid unnecessary wait for service ready message (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() (Jose Ignacio Tornos Martinez) [RHEL-132586] {CVE-2025-39991}
  - wifi: ath: Use of_reserved_mem_region_to_resource() for "memory-region" (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath10k: remove gpio number assignment (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath11k: Remove redundant semicolon (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: fix wrong logging ID used for CE (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath11k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Add fallback for invalid channel number in PHY metadata (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: fix the fetching of combined rssi (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: fix HAL_PHYRX_COMMON_USER_INFO handling in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: fix signal in radiotap for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Add support to set per-radio RTS threshold (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: wow: enable TKIP related feature (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8922a: add TAS feature support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: open C2H event waiting window first before sending H2C command (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: renew a completion for each H2C command waiting C2H event (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852b: enable beacon tracking support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: debug: support SER L0 simulation (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: phy: initialize AFE by firmware element table (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: obtain RX path from ppdu status IE00 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: disable RTW89_PHYSTS_IE09_FTR_0 for ppdu status (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: use ieee80211_tx_info::driver_data to store driver TX info (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: chan: allow callers to check if a link has no managed chanctx (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: abort scan/roc on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: improve phy reset on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: fill User Priority in skb->priority for rx packets (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: set VTA in txwi (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: remove the mem_total field of STA_REC_BF command (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: disable promiscuous mode by default (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: use altx queue for offchannel tx on connac+ (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: fix updating beacon protection with beacons enabled (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: fix key add/remove imbalance (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: delete vif keys when requested (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: fix setting beacon protection keys (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: decrease timeout for commonly issued MCU commands (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: improve hardware restart reliability (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: remove redundant per-phy mac80211 calls during restart (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt76_eeprom_override to int (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: support writing MAC TXD for AddBA Request (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7925: refine the txpower initialization flow (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7915: fix mt7981 pre-calibration (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Convert mt76_wed_rro_ind to LE (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Add SW path for HW-RRO v3.1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Add mt76_dma_get_rxdmad_c_buf utility routione (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Decouple RRO logic from WED support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Add rx_queue_init callback (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Introduce RRO MSDU callbacks (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Enable WED for MT7992 chipset (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Fix tx-queues initialization for second phy on mt7996 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Introduce the capability to reset MT7992 WED device (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Enable HW RRO for MT7992 chipset (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Initial DMA configuration for MT7992 WED support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Do not always enable NAPIs for WED RRO queues (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Differentiate between RRO data and RRO MSDU queues (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Remove q->ndesc check in mt76_dma_rx_fill() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Add reset_idx to reset_q mt76_queue_ops signature. (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Enable MLO support for client interfaces (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Set EML capabilities for AP interface (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Export MLO AP capabilities to mac80211 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Temporarily disable EPCS (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Implement MLD address translation for EAPOL (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Add all active links to poll list in mt7996_mac_tx_free() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Fix mt7996_reverse_frag0_hdr_trans for MLO (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Use proper link info in mt7996_mcu_add_group (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7925: add pci restore for hibernate (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links() (Jose Ignacio Tornos Martinez) [RHEL-132586] {CVE-2025-40066}
  - wifi: mt76: mt7996: Use proper link_id in link_sta_rc_update callback (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Remove dead code in mt76_scan_work (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Use deflink for AMPDU rx reordering (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7921: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: fix potential memory leak in mt76_wmac_probe() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7925: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Set proper link destination address in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Set def_wcid pointer in mt7996_mac_sta_init_link() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Fix mt7996_mcu_bss_mld_tlv routine (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Fix mt7996_mcu_sta_ba wcid configuration (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Overwrite unspecified link_id in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mwifiex: fix endianness handling in mwifiex_send_rgpower_table (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Remove the redundant wiphy_dev (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: fix incorrect comment (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: update the time stamps in hidden ssid (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Fix HE capabilities element check (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: add tx_handlers_drop statistics to ethtool (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: CHANNEL_SURVEY_NOTIF is always supported (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: remove support of iwl_esr_mode_notif version 1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: remove support from of sta cmd version 1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: remove support of roc cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: remove support of mac cmd ver 2 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: don't consider phy cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: implement wowlan status notification API update (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: fw: Add ASUS to PPAG and TAS list (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: add kunit tests for nvm parse (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: api: add a flag to iwl_link_ctx_modify_flags (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: pcie: move ltr_enabled to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: pcie: move pm_support to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: rename iwl_finish_nic_init (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: replace SUPPRESS_CMD_ERROR_ONCE status bit with a boolean (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: add STATUS_FW_ERROR API (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: Add USB ID 2001:3327 for D-Link AX18U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: Add USB ID 2001:332a for D-Link AX9U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtl8xxxu: expose efuse via debugfs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: Fix dentry reference leak in iwl_mld_add_link_debugfs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mei: Remove unused flexible-array member in struct iwl_sap_hdr (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: Remove redundant header files (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: Remove duplicated include in trans.c (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mwifiex: fix double free in mwifiex_send_rgpower_table() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Fix 6 GHz Band capabilities element advertisement in lower bands (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: reduce the scope of rts_threshold (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: reduce the scope of link_id (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: brcmfmac: support AP isolation to restrict reachability between stations (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: strict checking attributes for NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: drivers: indicate support for attributes in NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: allow drivers to support subset of NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: Add EHT fixed Tx rate support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: kunit: add kunit tests for S1G PVB decoding (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: support parsing S1G TIM PVB (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: support block bitmap S1G TIM encoding (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW) (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mwifiex: send world regulatory domain to driver (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mwifiex: add rgpower table loading support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: brcmfmac: avoid assignment in if/else-if conditions in NVRAM load path (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: count reg connection element in the size (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Remove unused tracepoints (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852bt: Remove redundant off_reverse variables (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: use int type to store negative error codes (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: add getting function of DMA channel v1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: abstract getting function of DMA channel (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: add RPP parser v1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: abstract RPP parser (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: add group BD address design (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: define TX/RX buffer descriptor pool (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: add struct rtw89_{tx,rx}_rings to put related fields (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: use RDU status of R_BE_PCIE_DMA_IMR_0_V1 instead for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: prepare interrupt related registers and functions for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: move chip ISR definition out from chip generation (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtl8xxxu: Remove TL-WN722N V2 (0x2357: 0x010c) from untested devices (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: don't support WH a step (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: remove a TODO (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: carefully select the PNVM source (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: make iwl_mld_rm_vif void (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: pcie: remember when interrupts are disabled (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: support TLC command version 5 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: gen1_2: move gen specific code to a function (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: gen1_2: rename iwl_trans_pcie_op_mode_enter (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: really remove hw_wfpm_id (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: remove unneeded jacket indication (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: don't publish TWT capabilities (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: trans: move dev_cmd_pool to trans specific (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: remove .pnvm files from module info (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: acpi: make iwl_guid static (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: uefi: remove runtime check of constant values (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: refactor iwl_pnvm_get_from_fs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: iwl-config: include module.h (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: don't modify trans state where not needed (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: simplify iwl_trans_pcie_d3_resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: trans: remove STATUS_SUSPENDED (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: trans: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: remove dump file name extension support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: add a new FW file numbering scheme (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: add few missing hcmd/notif names (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: Add debug log for second link (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: simplify iwl_poll_prph_bit return value (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: pcie: relocate finish_nic_init logic to gen1_2 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: trigger mlo scan only when not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: don't check the cipher on resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: don't validate keys state on resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: rename iwl_mld_set_key_rx_seq (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: refactor iwl_mld_add_all_rekeys (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: don't consider old versions of PPAG (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: make ppag versioning clear (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - Reapply "wifi: iwlwifi: remove support of several iwl_ppag_table_cmd versions" (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: bump MIN API in HR/GF/BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm: remove a function declaration (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld/mvm: set beacon protection capability in wowlan config (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm/mld: correctly retrieve the keyidx from the beacon (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: track BIGTK per link (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: support MLO rekey on resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm: remove MLO code (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw88: Use led->brightness_set_blocking for PCI too (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: coex: Limit Wi-Fi scan slot cost to avoid A2DP glitch (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852c: update firmware crash trigger type for newer firmware (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852a: report average RSSI to avoid unnecessary scanning (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852a: report per-channel noise level by get_survey ops (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852bt: Simplify unnecessary if-else conditions in _dpk_onoff() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: fix group frames loss when connected to non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852c: check LPS H2C command complete by C2H reg instead of done ack (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8851b: rfk: update TX wideband IQK (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8851b: rfk: update IQK TIA setting (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: wow: remove notify during WoWLAN net-detect (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: debug: add beacon_info debugfs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: introduce beacon tracking to improve connection stability (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - net: mediatek: wed: Introduce MT7992 WED support to MT7988 SoC (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852bt: Use standard helper for string choice (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: add dummy C2H handlers for BCN resend and update done (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: print just once for unknown C2H events (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw88: Lock rtwdev->mutex before setting the LED (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw88: sdio: use indirect IO for device registers before power-on (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - net: convert to nla_get_*_default() [wireless] (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - perf tools: Fix build error on generated/fs_at_flags_array.c (Anubhav Shelat) [RHEL-127734]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-193.el10]
changelog:
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Xin Long) [RHEL-118173]
  - scsi: qla2xxx: Update version to 10.02.10.100-k (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Query FW again before proceeding with login (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Validate sp before freeing associated memory (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Free sp in error path to fix system crash (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Delay module unload while fabric scan in progress (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Allow recovery for tape devices (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Add bsg interface to support firmware img validation (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Validate MCU signature before executing MBC 03h (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Add support for 64G SFP speed (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Add Speed in SFP print information (Nilesh Javali) [RHEL-136529]
  - x86/sev/docs: Document the SNP Reverse Map Table (RMP) (John Allen) [RHEL-69735]
  - x86/sev: Add full support for a segmented RMP table (John Allen) [RHEL-69735]
  - x86/sev: Treat the contiguous RMP table as a single RMP segment (John Allen) [RHEL-69735]
  - x86/sev: Map only the RMP table entries instead of the full RMP range (John Allen) [RHEL-69735]
  - x86/sev: Move the SNP probe routine out of the way (John Allen) [RHEL-69735]
  - x86/sev: Require the RMPREAD instruction after Zen4 (John Allen) [RHEL-69735]
  - x86/sev: Add support for the RMPREAD instruction (John Allen) [RHEL-69735]
  - x86/sev: Prepare for using the RMPREAD instruction to access the RMP (John Allen) [RHEL-69735]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-194.el10]
changelog:
  - redhat: exclude DERIVATE_BUILD and DERIVATE_VERSION from self-test/data (Jan Stancek)
  - mm/page_alloc: change all pageblocks migrate type on coalescing (Audra Mitchell) [RHEL-115319] {CVE-2025-71134}
  - printk: Use console_is_usable on console_unblank (Derek Barbosa) [RHEL-141497]
  - printk: Avoid irq_work for printk_deferred() on suspend (Derek Barbosa) [RHEL-141497]
  - printk: Avoid scheduling irq_work on suspend (Derek Barbosa) [RHEL-141497]
  - printk: Allow printk_trigger_flush() to flush all types (Derek Barbosa) [RHEL-141497]
  - printk: nbcon: Allow reacquire during panic (Derek Barbosa) [RHEL-141497]
  - exec: Make sure task->comm is always NUL-terminated (Luiz Capitulino) [RHEL-137410]
  - powercap: intel_rapl: Add support for Wildcat Lake platform (Steve Best) [RHEL-95624]
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (Steve Best) [RHEL-129400]
  - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() (Steve Best) [RHEL-129400]
  - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode (Steve Best) [RHEL-129400]
  - x86/resctrl: Refactor resctrl_arch_rmid_read() (Steve Best) [RHEL-129400]
  - efi: stmm: Drop unneeded null pointer check (Lenny Szubowicz) [RHEL-129401]
  - efi: stmm: Drop unused EFI error from setup_mm_hdr arguments (Lenny Szubowicz) [RHEL-129401]
  - efi: stmm: Do not return EFI_OUT_OF_RESOURCES on internal errors (Lenny Szubowicz) [RHEL-129401]
  - efi: stmm: Fix incorrect buffer allocation method (Lenny Szubowicz) [RHEL-129401]
  - efistub: Lower default log level (Lenny Szubowicz) [RHEL-129401]
  - x86/sev: Let sev_es_efi_map_ghcbs() map the CA pages too (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: use 'targets' instead of extra-y in Makefile (Lenny Szubowicz) [RHEL-129401]
  - include: pe.h: Fix PE definitions (Lenny Szubowicz) [RHEL-129401]
  - efi/efi_test: Fix missing pending status update in getwakeuptime (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Describe missing 'out' parameter in efi_load_initrd (Lenny Szubowicz) [RHEL-129401]
  - efi: Improve logging around memmap init (Lenny Szubowicz) [RHEL-129401]
  - efi: Export symbol efi_mem_desc_lookup (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Move the EFI mixed mode startup code back under arch/x86, into startup/ (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Move the 5-level paging trampoline into /startup (Lenny Szubowicz) [RHEL-129401]
  - x86/boot/compressed: Merge the local pgtable.h include into <asm/boot.h> (Lenny Szubowicz) [RHEL-129401]
  - x86/boot/sev: Support memory acceptance in the EFI stub under SVSM (Lenny Szubowicz) [RHEL-129401]
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance (Lenny Szubowicz) [RHEL-129401]
  - efi/cper, cxl: Remove cper_cxl.h (Lenny Szubowicz) [RHEL-129401]
  - efi/cper, cxl: Make definitions and structures global (Lenny Szubowicz) [RHEL-129401]
  - efi/cper, cxl: Prefix protocol error struct and function names with cxl_ (Lenny Szubowicz) [RHEL-129401]
  - efi: rci2: mark bin_attribute as __ro_after_init (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Avoid legacy decompressor zlib/zstd wrappers (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Avoid CopyMem/SetMem EFI services after ExitBootServices (Lenny Szubowicz) [RHEL-129401]
  - efi: efibc: change kmalloc(size * count, ...) to kmalloc_array() (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Move mixed mode startup code into libstub (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Simplify and document thunking logic (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Remove dependency on legacy startup_32 code (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Set up 1:1 mapping of lower 4GiB in the stub (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Factor out and clean up long mode entry (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Check CPU compatibility without relying on verify_cpu() (Lenny Szubowicz) [RHEL-129401]
  - x86/efistub: Merge PE and handover entrypoints (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Move the LA57 trampoline to separate source file (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Work around broken busybox 'truncate' tool (Lenny Szubowicz) [RHEL-129401]
  - x86 boot build: make git ignore stale 'tools' directory (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Add back some padding for the CRC-32 checksum (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Drop CRC-32 checksum and the build tool that generates it (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Avoid physical address 0x0 when doing random allocation (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Sanitize boot params before parsing command line (Lenny Szubowicz) [RHEL-129401]
  - efi/mokvar-table: Avoid repeated map/unmap of the same page (Lenny Szubowicz) [RHEL-129401]
  - efi: Don't map the entire mokvar table to determine its size (Lenny Szubowicz) [RHEL-129401]
  - efi/cper: Fix cper_arm_ctx_info alignment (Lenny Szubowicz) [RHEL-129401]
  - efi/cper: Fix cper_ia_proc_ctx alignment (Lenny Szubowicz) [RHEL-129401]
  - efi: Use BIT_ULL() constants for memory attributes (Lenny Szubowicz) [RHEL-129401]
  - efi: Avoid cold plugged memory for placing the kernel (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15 (Lenny Szubowicz) [RHEL-129401]
  - x86/efi: skip memattr table on kexec boot (Lenny Szubowicz) [RHEL-129401]
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15 (Lenny Szubowicz) [RHEL-129401]
  - efi: sysfb_efi: fix W=1 warnings when EFI is not set (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Use __free() helper for pool deallocations (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Use cleanup helpers for freeing copies of the memory map (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Simplify PCI I/O handle buffer traversal (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Refactor and clean up GOP resolution picker code (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Simplify GOP handling code (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Use C99-style for loop to traverse handle buffer (Lenny Szubowicz) [RHEL-129401]
  - x86/efistub: Drop long obsolete UGA support (Lenny Szubowicz) [RHEL-129401]
  - efi/esrt: remove esre_attribute::store() (Lenny Szubowicz) [RHEL-129401]
  - efi/zboot: Limit compression options to GZIP and ZSTD (Lenny Szubowicz) [RHEL-129401]
  - efi: Fix memory leak in efivar_ssdt_load (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Take command line overrides into account for loaded files (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Fix command line fallback handling when loading files (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Parse builtin command line after bootloader provided one (Lenny Szubowicz) [RHEL-129401]
  - x86/efi: Apply EFI Memory Attributes after kexec (Lenny Szubowicz) [RHEL-129401]
  - x86/efi: Drop support for the EFI_PROPERTIES_TABLE (Lenny Szubowicz) [RHEL-129401]
  - efi/memattr: Ignore table if the size is clearly bogus (Lenny Szubowicz) [RHEL-129401]
  - efi/zboot: Fix outdated comment about using LoadImage/StartImage (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Free correct pointer on failure (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: measure initrd to PCR9 independent of source (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: remove unnecessary cmd_line_len from efi_convert_cmdline() (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: fix efi_parse_options() ignoring the default command line (Lenny Szubowicz) [RHEL-129401]
  - perf vendor events arm64: Fix typo in Ampere eMag json file (Charles Mirabile) [RHEL-122933]
  - perf vendor events AmpereOneX: Fix spelling typo in the metrics file (Charles Mirabile) [RHEL-122933]
  - perf vendor events arm64 AmpereOneX: Fix typo - should be l1d_cache_access_prefetches (Charles Mirabile) [RHEL-122933]
  - perf vendor events arm64 AmpereOne: Fix typos in metrics' descriptions (Charles Mirabile) [RHEL-122933]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-195.el10]
changelog:
  - memblock: Accept allocated memory before use in memblock_double_array() (Aristeu Rozanski) [RHEL-140476]
  - Bluetooth: hci_sync: enable PA Sync Lost event (David Marlin) [RHEL-143297]
  - Bluetooth: SMP: Fix not generating mackey and ltk when repairing (David Marlin) [RHEL-143297]
  - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref (David Marlin) [RHEL-143297]
  - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side (David Marlin) [RHEL-143297]
  - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP (David Marlin) [RHEL-143297]
  - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface (David Marlin) [RHEL-143297]
  - Bluetooth: btrtl: Avoid loading the config file on security chips (David Marlin) [RHEL-143297]
  - Bluetooth: hci_event: Fix not handling PA Sync Lost event (David Marlin) [RHEL-143297]
  - Bluetooth: hci_conn: Fix not cleaning up PA_LINK connections (David Marlin) [RHEL-143297]
  - Bluetooth: 6lowpan: add missing l2cap_chan_lock() (David Marlin) [RHEL-143297]
  - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions (David Marlin) [RHEL-143297]
  - Bluetooth: L2CAP: export l2cap_chan_hold for modules (David Marlin) [RHEL-143297]
  - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion (David Marlin) [RHEL-143297]
  - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (David Marlin) [RHEL-143297]
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-143297]
  - Bluetooth: MGMT: cancel mesh send timer when hdev removed (David Marlin) [RHEL-143297]
  - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() (David Marlin) [RHEL-143297]
  - Bluetooth: rfcomm: fix modem control handling (David Marlin) [RHEL-143297]
  - Bluetooth: hci_core: Fix tracking of periodic advertisement (David Marlin) [RHEL-143297]
  - Bluetooth: hci_conn: Fix connection cleanup with BIG with 2 or more BIS (David Marlin) [RHEL-143297]
  - Bluetooth: fix corruption in h4_recv_buf() after cleanup (David Marlin) [RHEL-143297]
  - Bluetooth: btintel_pcie: Fix event packet loss issue (David Marlin) [RHEL-143297]
  - Bluetooth: ISO: Fix another instance of dst_type handling (David Marlin) [RHEL-143297]
  - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset (David Marlin) [RHEL-143297]
  - Bluetooth: ISO: Fix BIS connection dst_type handling (David Marlin) [RHEL-143297]
  - Bluetooth: Avoid a couple dozen -Wflex-array-member-not-at-end warnings (David Marlin) [RHEL-143297]
  - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements (David Marlin) [RHEL-143297]
  - Bluetooth: ISO: don't leak skb in ISO_CONT RX (David Marlin) [RHEL-143297]
  - Bluetooth: ISO: free rx_skb if not consumed (David Marlin) [RHEL-143297]
  - Bluetooth: SCO: Fix UAF on sco_conn_free (David Marlin) [RHEL-143297]
  - Bluetooth: bcsp: receive data only if registered (David Marlin) [RHEL-143297]
  - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922 (David Marlin) [RHEL-143297]
  - Bluetooth: btusb: Add new VID/PID 13d3/3627 for MT7925 (David Marlin) [RHEL-143297]
  - Bluetooth: remove duplicate h4_recv_buf() in header (David Marlin) [RHEL-143297]
  - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames (David Marlin) [RHEL-143297]
  - Bluetooth: hci_core: Print information of hcon on hci_low_sent (David Marlin) [RHEL-143297]
  - Bluetooth: hci_core: Print number of packets in conn->data_q (David Marlin) [RHEL-143297]
  - Bluetooth: Add function and line information to bt_dbg (David Marlin) [RHEL-143297]
  - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO (David Marlin) [RHEL-143297]
  - Bluetooth: hci_core: Detect if an ISO link has stalled (David Marlin) [RHEL-143297]
  - Bluetooth: ISO: Use sk_sndtimeo as conn_timeout (David Marlin) [RHEL-143297]
  - Bluetooth: HCI: Fix using LE/ACL buffers for ISO packets (David Marlin) [RHEL-143297]
  - Bluetooth: ISO: Don't initiate CIS connections if there are no buffers (David Marlin) [RHEL-143297]
  - Bluetooth: btintel_pcie: Refactor Device Coredump (David Marlin) [RHEL-143297]
  - Bluetooth: btintel_pcie: Use strscpy() instead of strscpy_pad() (David Marlin) [RHEL-143297]
  - Bluetooth: Annotate struct hci_drv_rp_read_info with __counted_by_le() (David Marlin) [RHEL-143297]
  - Bluetooth: btintel_pcie: Define hdev->wakeup() callback (David Marlin) [RHEL-143297]
  - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 (David Marlin) [RHEL-143297]
  - Bluetooth: btintel_pcie: Move model comment before its definition (David Marlin) [RHEL-143297]
  - Bluetooth: btintel_pcie: Add id of Scorpious, Panther Lake-H484 (David Marlin) [RHEL-143297]
  - Bluetooth: btintel_pcie: Add Bluetooth core/platform as comments (David Marlin) [RHEL-143297]
  - Bluetooth: btintel_pcie: Add support for _suspend() / _resume() (David Marlin) [RHEL-143297]
  - Bluetooth: btintel: Add support for BlazarIW core (David Marlin) [RHEL-143297]
  - netfilter: nf_tables: avoid softlockup warnings in nft_chain_validate (Florian Westphal) [RHEL-130086]
  - netfilter: nf_tables: avoid chain re-validation if possible (Florian Westphal) [RHEL-130086]
  - netfilter: nf_tables: remove redundant chain validation on register store (Florian Westphal) [RHEL-130086]
  - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-130086]
  - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-130086]
  - dm log-writes: Add missing set_freezable() for freezable kthread (Benjamin Marzinski) [RHEL-136397]
  - dm-raid: fix possible NULL dereference with undefined raid type (Benjamin Marzinski) [RHEL-136397]
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels (Benjamin Marzinski) [RHEL-136397]
  - dm-verity: fix unreliable memory allocation (Benjamin Marzinski) [RHEL-136397]
  - ipv6: Fix use-after-free in inet6_addr_del(). (Hangbin Liu) [RHEL-132209]
  - net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138323]
  - net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138323]
  - net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138323]
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Davide Caratti) [RHEL-130763]
  - net: enetc: fix frame corruption on bpf_xdp_adjust_head/tail() and XDP_PASS (Davide Caratti) [RHEL-130763]
  - net: enetc: refactor bulk flipping of RX buffers to separate function (Davide Caratti) [RHEL-130763]
  - idpf: fix LAN memory regions command on some NVMs (Davide Caratti) [RHEL-130763 RHEL-139050]
  - idpf: enable XSk features and ndo_xsk_wakeup (Davide Caratti) [RHEL-130763]
  - libeth: xdp: Disable generic kCFI pass for libeth_xdp_tx_xmit_bulk() (Davide Caratti) [RHEL-130763]
  - idpf: implement Rx path for AF_XDP (Davide Caratti) [RHEL-130763]
  - compiler_types: Introduce __nocfi_generic (Davide Caratti) [RHEL-130763]
  - idpf: implement XSk xmit (Davide Caratti) [RHEL-130763]
  - idpf: add XSk pool initialization (Davide Caratti) [RHEL-130763]
  - idpf: add virtchnl functions to manage selected queues (Davide Caratti) [RHEL-130763]
  - idpf: add XDP RSS hash hint (Davide Caratti) [RHEL-130763]
  - idpf: add support for .ndo_xdp_xmit() (Davide Caratti) [RHEL-130763]
  - idpf: add support for XDP on Rx (Davide Caratti) [RHEL-130763]
  - idpf: use generic functions to build xdp_buff and skb (Davide Caratti) [RHEL-130763]
  - idpf: implement XDP_SETUP_PROG in ndo_bpf for splitq (Davide Caratti) [RHEL-130763]
  - idpf: prepare structures to support XDP (Davide Caratti) [RHEL-130763]
  - idpf: link NAPIs to queues (Davide Caratti) [RHEL-130763]
  - xdp, libeth: make the xdp_init_buff() micro-optimization generic (Davide Caratti) [RHEL-130763]
  - libeth: xdp, xsk: access adjacent u32s as u64 where applicable (Davide Caratti) [RHEL-130763]
  - libeth: xsk: add XSkFQ refill and XSk wakeup helpers (Davide Caratti) [RHEL-130763]
  - libeth: xsk: add XSk Rx processing support (Davide Caratti) [RHEL-130763]
  - libeth: xsk: add XSk xmit functions (Davide Caratti) [RHEL-130763]
  - libeth: xsk: add XSk XDP_TX sending helpers (Davide Caratti) [RHEL-130763]
  - libeth: xdp: add RSS hash hint and XDP features setup helpers (Davide Caratti) [RHEL-130763]
  - libeth: xdp: add templates for building driver-side callbacks (Davide Caratti) [RHEL-130763]
  - libeth: xdp: add XDP prog run and verdict result handling (Davide Caratti) [RHEL-130763]
  - libeth: xdp: add helpers for preparing/processing &libeth_xdp_buff (Davide Caratti) [RHEL-130763]
  - libeth: xdp: add XDPSQ cleanup timers (Davide Caratti) [RHEL-130763]
  - libeth: xdp: add XDPSQ locking helpers (Davide Caratti) [RHEL-130763]
  - libeth: xdp: add XDPSQE completion helpers (Davide Caratti) [RHEL-130763]
  - libeth: xdp: add .ndo_xdp_xmit() helpers (Davide Caratti) [RHEL-130763]
  - libeth: xdp: add XDP_TX buffers sending (Davide Caratti) [RHEL-130763]
  - libeth: support native XDP and register memory model (Davide Caratti) [RHEL-130763]
  - libeth: convert to netmem (Davide Caratti) [RHEL-130763]
  - libeth, libie: clean symbol exports up a little (Davide Caratti) [RHEL-130763]
  - xsk: respect the offsets when copying frags (Davide Caratti) [RHEL-130763]
  - xsk: add helper to get &xdp_desc's DMA and meta pointer in one go (Davide Caratti) [RHEL-130763]
  - xsk: add generic XSk &xdp_buff -> skb conversion (Davide Caratti) [RHEL-130763]
  - xsk: make xsk_buff_add_frag() really add the frag via __xdp_buff_add_frag() (Davide Caratti) [RHEL-130763]
  - xdp: add generic xdp_build_skb_from_buff() (Davide Caratti) [RHEL-130763]
  - xdp: add generic xdp_buff_add_frag() (Davide Caratti) [RHEL-130763]
  - page_pool: add page_pool_dev_alloc_netmem() (Davide Caratti) [RHEL-130763]
  - page_pool: fix incorrect mp_ops error handling (Davide Caratti) [RHEL-130763]
  - page_pool: disable sync for cpu for dmabuf memory provider (Davide Caratti) [RHEL-130763]
  - page_pool: Set `dma_sync` to false for devmem memory provider (Davide Caratti) [RHEL-130763]
  - net: page_pool: create page_pool_alloc_netmem (Davide Caratti) [RHEL-130763]
  - net: page_pool: rename page_pool_alloc_netmem to *_netmems (Davide Caratti) [RHEL-130763]
  - skbuff: allow 2-4-argument skb_frag_dma_map() (Davide Caratti) [RHEL-130763]
  - xdp: make __xdp_return() MP-agnostic (Davide Caratti) [RHEL-130763]
  - xdp: get rid of xdp_frame::mem.id (Davide Caratti) [RHEL-130763]
  - page_pool: allow mixing PPs within one bulk (Davide Caratti) [RHEL-130763]
  - xsk: Fix offset calculation in unaligned mode (Davide Caratti) [RHEL-130763]
  - xsk: Fix __xsk_generic_xmit() error code when cq is full (Davide Caratti) [RHEL-130763]
  - page_pool: make page_pool_put_page_bulk() handle array of netmems (Davide Caratti) [RHEL-130763]
  - netmem: add a couple of page helper wrappers (Davide Caratti) [RHEL-130763]
  - xdp: register system page pool as an XDP memory model (Davide Caratti) [RHEL-130763]
  - xsk: allow attaching XSk pool via xdp_rxq_info_reg_mem_model() (Davide Caratti) [RHEL-130763]
  - xdp: allow attaching already registered memory model to xdp_rxq_info (Davide Caratti) [RHEL-130763]
  - xdp, xsk: constify read-only arguments of some static inline helpers (Davide Caratti) [RHEL-130763]
  - bpf, xdp: constify some bpf_prog * function arguments (Davide Caratti) [RHEL-130763]
  - xsk: align &xdp_buff_xsk harder (Davide Caratti) [RHEL-130763]
  - xsk: Use xsk_buff_pool directly for cq functions (Davide Caratti) [RHEL-130763]
  - xsk: Wrap duplicated code to function (Davide Caratti) [RHEL-130763]
  - xsk: Carry a copy of xdp_zc_max_segs within xsk_buff_pool (Davide Caratti) [RHEL-130763]
  - xsk: Get rid of xdp_buff_xsk::orig_addr (Davide Caratti) [RHEL-130763]
  - xsk: s/free_list_node/list_node/ (Davide Caratti) [RHEL-130763]
  - xsk: Get rid of xdp_buff_xsk::xskb_list_node (Davide Caratti) [RHEL-130763]
  - overflow: Introduce __DEFINE_FLEX for having no initializer (Davide Caratti) [RHEL-130763]
  - overflow: Fix direct struct member initialization in _DEFINE_FLEX() (Davide Caratti) [RHEL-130763]
  - overflow: Clarify expectations for getting DEFINE_FLEX variable sizes (Davide Caratti) [RHEL-130763]
  - EDAC/i10nm: Add Intel Clearwater Forest server support (Aristeu Rozanski) [RHEL-45084]
  - tick/nohz: Expose housekeeping CPUs in sysfs (Herton R. Krzesinski) [RHEL-134988]
  - sysfs/cpu: Use DEVICE_ATTR_RO for nohz_full attribute (Herton R. Krzesinski) [RHEL-134988]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (CKI Backport Bot) [RHEL-130022] {CVE-2025-40168}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-196.el10]
changelog:
  - btrfs : Enable btrfs module and backport btrfs fixes from upstream v6.12 (Ravi Singh) [RHEL-140878]
  - btrfs: don't rewrite ret from inode_permission (Ravi Singh) [RHEL-140878]
  - btrfs: don't log conflicting inode if it's a dir moved in the current transaction (Ravi Singh) [RHEL-140878]
  - btrfs: scrub: always update btrfs_scrub_progress::last_physical (Ravi Singh) [RHEL-140878]
  - btrfs: fix memory leak of fs_devices in degraded seed device path (Ravi Singh) [RHEL-140878]
  - btrfs: fix a potential path leak in print_data_reloc_error() (Ravi Singh) [RHEL-140878]
  - btrfs: do not skip logging new dentries when logging a new name (Ravi Singh) [RHEL-140878]
  - btrfs: fix leaf leak in an error path in btrfs_del_items() (Ravi Singh) [RHEL-140878]
  - btrfs: release root after error in data_reloc_print_warning_inode() (Ravi Singh) [RHEL-140878]
  - btrfs: do not update last_log_commit when logging inode due to a new name (Ravi Singh) [RHEL-140878]
  - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: fix conventional zone capacity calculation (Ravi Singh) [RHEL-140878]
  - btrfs: ensure no dirty metadata is written back for an fs with errors (Ravi Singh) [RHEL-140878]
  - btrfs: mark dirty extent range for out of bound prealloc extents (Ravi Singh) [RHEL-140878]
  - btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation (Ravi Singh) [RHEL-140878]
  - btrfs: tree-checker: fix bounds check in check_inode_extref() (Ravi Singh) [RHEL-140878]
  - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() (Ravi Singh) [RHEL-140878]
  - btrfs: tree-checker: add inode extref checks (Ravi Singh) [RHEL-140878]
  - btrfs: abort transaction if we fail to update inode in log replay dir fixup (Ravi Singh) [RHEL-140878]
  - btrfs: use level argument in log tree walk callback replay_one_buffer() (Ravi Singh) [RHEL-140878]
  - btrfs: always drop log root tree reference in btrfs_replay_log() (Ravi Singh) [RHEL-140878]
  - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: refine extent allocator hint selection (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: return error from btrfs_zone_finish_endio() (Ravi Singh) [RHEL-140878]
  - btrfs: abort transaction in the process_one_buffer() log tree walk callback (Ravi Singh) [RHEL-140878]
  - btrfs: abort transaction on specific error places when walking log tree (Ravi Singh) [RHEL-140878]
  - btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots() (Ravi Singh) [RHEL-140878]
  - btrfs: do not assert we found block group item when creating free space tree (Ravi Singh) [RHEL-140878]
  - btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST (Ravi Singh) [RHEL-140878]
  - btrfs: fix incorrect readahead expansion length (Ravi Singh) [RHEL-140878]
  - btrfs: fix memory leak on duplicated memory in the qgroup assign ioctl (Ravi Singh) [RHEL-140878]
  - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running (Ravi Singh) [RHEL-140878]
  - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() (Ravi Singh) [RHEL-140878]
  - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() (Ravi Singh) [RHEL-140878]
  - btrfs: return any hit error from extent_writepage_io() (Ravi Singh) [RHEL-140878]
  - btrfs: ref-verify: handle damaged extent root tree (Ravi Singh) [RHEL-140878]
  - btrfs: don't allow adding block device of less than 1 MB (Ravi Singh) [RHEL-140878]
  - btrfs: tree-checker: fix the incorrect inode ref size check (Ravi Singh) [RHEL-140878]
  - btrfs: fix invalid extref key setup when replaying dentry (Ravi Singh) [RHEL-140878]
  - btrfs: fix corruption reading compressed range when block size is smaller than page size (Ravi Singh) [RHEL-140878]
  - btrfs: use readahead_expand() on compressed extents (Ravi Singh) [RHEL-140878]
  - btrfs: fix subvolume deletion lockup caused by inodes xarray race (Ravi Singh) [RHEL-140878]
  - btrfs: fix squota compressed stats leak (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: skip ZONE FINISH of conventional zones (Ravi Singh) [RHEL-140878]
  - btrfs: avoid load/store tearing races when checking if an inode was logged (Ravi Singh) [RHEL-140878]
  - btrfs: fix race between setting last_dir_index_offset and inode logging (Ravi Singh) [RHEL-140878]
  - btrfs: fix race between logging inode and checking if it was logged before (Ravi Singh) [RHEL-140878]
  - btrfs: subpage: keep TOWRITE tag until folio is cleaned (Ravi Singh) [RHEL-140878]
  - btrfs: send: make fs_path_len() inline and constify its argument (Ravi Singh) [RHEL-140878]
  - btrfs: send: use fallocate for hole punching with send stream v2 (Ravi Singh) [RHEL-140878]
  - btrfs: send: avoid path allocation for the current inode when issuing commands (Ravi Singh) [RHEL-140878]
  - btrfs: send: keep the current inode's path cached (Ravi Singh) [RHEL-140878]
  - btrfs: send: add and use helper to rename current inode when processing refs (Ravi Singh) [RHEL-140878]
  - btrfs: send: only use boolean variables at process_recorded_refs() (Ravi Singh) [RHEL-140878]
  - btrfs: send: factor out common logic when sending xattrs (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: requeue to unused block group list if zone finish failed (Ravi Singh) [RHEL-140878]
  - btrfs: codify pattern for adding block_group to bg_list (Ravi Singh) [RHEL-140878]
  - btrfs: explicitly ref count block_group on new_bgs list (Ravi Singh) [RHEL-140878]
  - btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() (Ravi Singh) [RHEL-140878]
  - btrfs: always abort transaction on failure to add block group to free space tree (Ravi Singh) [RHEL-140878]
  - btrfs: move transaction aborts to the error site in add_block_group_free_space() (Ravi Singh) [RHEL-140878]
  - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (Ravi Singh) [RHEL-140878]
  - btrfs: qgroup: drop unused parameter fs_info from __del_qgroup_rb() (Ravi Singh) [RHEL-140878]
  - btrfs: fix printing of mount info messages for NODATACOW/NODATASUM (Ravi Singh) [RHEL-140878]
  - btrfs: restore mount option info messages during mount (Ravi Singh) [RHEL-140878]
  - btrfs: fix incorrect log message for nobarrier mount option (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: fix write time activation failure for metadata block group (Ravi Singh) [RHEL-140878]
  - btrfs: do not allow relocation of partially dropped subvolumes (Ravi Singh) [RHEL-140878]
  - btrfs: fix iteration bug in __qgroup_excl_accounting() (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: do not select metadata BG as finish target (Ravi Singh) [RHEL-140878]
  - btrfs: error on missing block group when unaccounting log tree extent buffers (Ravi Singh) [RHEL-140878]
  - btrfs: fix log tree replay failure due to file with 0 links and extents (Ravi Singh) [RHEL-140878]
  - btrfs: clear dirty status from extent buffer on error at insert_new_root() (Ravi Singh) [RHEL-140878]
  - btrfs: don't skip remaining extrefs if dir not found during log replay (Ravi Singh) [RHEL-140878]
  - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (Ravi Singh) [RHEL-140878]
  - btrfs: populate otime when logging an inode item (Ravi Singh) [RHEL-140878]
  - btrfs: fix ssd_spread overallocation (Ravi Singh) [RHEL-140878]
  - btrfs: don't ignore inode missing when replaying log tree (Ravi Singh) [RHEL-140878]
  - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: do not remove unwritten non-data block group (Ravi Singh) [RHEL-140878]
  - btrfs: abort transaction during log replay if walk_log_tree() failed (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: use filesystem size not disk size for reclaim decision (Ravi Singh) [RHEL-140878]
  - btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (Ravi Singh) [RHEL-140878]
  - btrfs: fix assertion when building free space tree (Ravi Singh) [RHEL-140878]
  - btrfs: fix wrong start offset for delalloc space release during mmap write (Ravi Singh) [RHEL-140878]
  - btrfs: prepare btrfs_page_mkwrite() for large folios (Ravi Singh) [RHEL-140878]
  - btrfs: use btrfs_record_snapshot_destroy() during rmdir (Ravi Singh) [RHEL-140878]
  - btrfs: propagate last_unlink_trans earlier when doing a rmdir (Ravi Singh) [RHEL-140878]
  - btrfs: record new subvolume in parent dir earlier to avoid dir logging races (Ravi Singh) [RHEL-140878]
  - btrfs: fix inode lookup error handling during log replay (Ravi Singh) [RHEL-140878]
  - btrfs: fix invalid inode pointer dereferences during log replay (Ravi Singh) [RHEL-140878]
  - btrfs: return a btrfs_inode from read_one_inode() (Ravi Singh) [RHEL-140878]
  - btrfs: return a btrfs_inode from btrfs_iget_logging() (Ravi Singh) [RHEL-140878]
  - btrfs: fix iteration of extrefs during log replay (Ravi Singh) [RHEL-140878]
  - btrfs: fix missing error handling when searching for inode refs during log replay (Ravi Singh) [RHEL-140878]
  - btrfs: fix use-after-free on inode when scanning root during em shrinking (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: fix extent range end unlock in cow_file_range() (Ravi Singh) [RHEL-140878]
  - btrfs: do regular iput instead of delayed iput during extent map shrinking (Ravi Singh) [RHEL-140878]
  - btrfs: make the extent map shrinker run asynchronously as a work queue job (Ravi Singh) [RHEL-140878]
  - btrfs: skip inodes without loaded extent maps when shrinking extent maps (Ravi Singh) [RHEL-140878]
  - btrfs: update superblock's device bytes_used when dropping chunk (Ravi Singh) [RHEL-140878]
  - btrfs: fix a race between renames and directory logging (Ravi Singh) [RHEL-140878]
  - btrfs: fix qgroup reservation leak on failure to allocate ordered extent (Ravi Singh) [RHEL-140878]
  - btrfs: use unsigned types for constants defined as bit shifts (Ravi Singh) [RHEL-140878]
  - btrfs: factor out nocow ordered extent and extent map generation into a helper (Ravi Singh) [RHEL-140878]
  - btrfs: handle csum tree error with rescue=ibadroots correctly (Ravi Singh) [RHEL-140878]
  - btrfs: exit after state split error at set_extent_bit() (Ravi Singh) [RHEL-140878]
  - btrfs: exit after state insertion failure at btrfs_convert_extent_bit() (Ravi Singh) [RHEL-140878]
  - btrfs: fix invalid data space release when truncating block in NOCOW mode (Ravi Singh) [RHEL-140878]
  - btrfs: scrub: fix a wrong error type when metadata bytenr mismatches (Ravi Singh) [RHEL-140878]
  - btrfs: scrub: update device stats when an error is detected (Ravi Singh) [RHEL-140878]
  - btrfs: avoid NULL pointer dereference if no valid csum tree (Ravi Singh) [RHEL-140878]
  - btrfs: handle empty eb->folios in num_extent_folios() (Ravi Singh) [RHEL-140878]
  - btrfs: compression: adjust cb->compressed_folios allocation type (Ravi Singh) [RHEL-140878]
  - btrfs: send: return -ENAMETOOLONG when attempting a path that is too long (Ravi Singh) [RHEL-140878]
  - btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() (Ravi Singh) [RHEL-140878]
  - btrfs: fix non-empty delayed iputs list on unmount due to async workers (Ravi Singh) [RHEL-140878]
  - btrfs: run btrfs_error_commit_super() early (Ravi Singh) [RHEL-140878]
  - btrfs: avoid linker error in btrfs_find_create_tree_block() (Ravi Singh) [RHEL-140878]
  - btrfs: make btrfs_discard_workfn() block_group ref explicit (Ravi Singh) [RHEL-140878]
  - btrfs: add back warning for mount option commit values exceeding 300 (Ravi Singh) [RHEL-140878]
  - btrfs: fix folio leak in submit_one_async_extent() (Ravi Singh) [RHEL-140878]
  - btrfs: fix discard worker infinite loop after disabling discard (Ravi Singh) [RHEL-140878]
  - Revert "btrfs: canonicalize the device path before adding it" (Ravi Singh) [RHEL-140878]
  - btrfs: fix COW handling in run_delalloc_nocow() (Ravi Singh) [RHEL-140878]
  - btrfs: adjust subpage bit start based on sectorsize (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: return EIO on RAID1 block group write pointer mismatch (Ravi Singh) [RHEL-140878]
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range() (Ravi Singh) [RHEL-140878]
  - btrfs: correctly escape subvol in btrfs_show_options() (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: fix zone finishing with missing devices (Ravi Singh) [RHEL-140878]
  - btrfs: zoned: fix zone activation with missing devices (Ravi Singh) [RHEL-140878]
  - btrfs: tests: fix chunk map leak after failure to add it to the tree (Ravi Singh) [RHEL-140878]
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers (Ravi Singh) [RHEL-140878]
  - btrfs: harden block_group::bg_list against list_del() races (Ravi Singh) [RHEL-140878]
  - btrfs: fix two misuses of folio_shift() (Ravi Singh) [RHEL-140878]
  - btrfs: avoid starting new transaction when cleaning qgroup during subvolume drop (Ravi Singh) [RHEL-140878]
  - btrfs: fix a leaked chunk map issue in read_one_chunk() (Ravi Singh) [RHEL-140878]
  - btrfs: fix data overwriting bug during buffered write when block size < page size (Ravi Singh) [RHEL-140878]
  - btrfs: fix double accounting race when extent_writepage_io() failed (Ravi Singh) [RHEL-140878]
  - btrfs: fix double accounting race when btrfs_run_delalloc_range() failed (Ravi Singh) [RHEL-140878]
  - btrfs: use btrfs_inode in extent_writepage() (Ravi Singh) [RHEL-140878]
  - btrfs: rename btrfs_folio_(set|start|end)_writer_lock() (Ravi Singh) [RHEL-140878]
  - btrfs: unify to use writer locks for subpage locking (Ravi Singh) [RHEL-140878]
  - btrfs: remove unused btrfs_folio_start_writer_lock() (Ravi Singh) [RHEL-140878]
  - btrfs: mark all dirty sectors as locked inside writepage_delalloc() (Ravi Singh) [RHEL-140878]
  - btrfs: move the delalloc range bitmap search into extent_io.c (Ravi Singh) [RHEL-140878]
  - btrfs: do not assume the full page range is not dirty in extent_writepage_io() (Ravi Singh) [RHEL-140878]
  - btrfs: fix stale page cache after race between readahead and direct IO write (Ravi Singh) [RHEL-140878]
  - btrfs: rename __get_extent_map() and pass btrfs_inode (Ravi Singh) [RHEL-140878]
  - btrfs: fix hole expansion when writing at an offset beyond EOF (Ravi Singh) [RHEL-140878]
  - Revert "btrfs: avoid monopolizing a core when activating a swap file" (Ravi Singh) [RHEL-140878]
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling (Ravi Singh) [RHEL-140878]
  - btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents() (Ravi Singh) [RHEL-140878]
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Ravi Singh) [RHEL-140878]
  - btrfs: do not output error message if a qgroup has been already cleaned up (Ravi Singh) [RHEL-140878]
  - btrfs: fix assertion failure when splitting ordered extent after transaction abort (Ravi Singh) [RHEL-140878]
  - btrfs: do proper folio cleanup when run_delalloc_nocow() failed (Ravi Singh) [RHEL-140878]
  - btrfs: output the reason for open_ctree() failure (Ravi Singh) [RHEL-140878]
  - btrfs: subpage: fix the bitmap dump of the locked flags (Ravi Singh) [RHEL-140878]
  - btrfs: improve the warning and error message for btrfs_remove_qgroup() (Ravi Singh) [RHEL-140878]
  - btrfs: add the missing error handling inside get_canonical_dev_path (Ravi Singh) [RHEL-140878]
  - btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path (Ravi Singh) [RHEL-140878]
  - btrfs: avoid NULL pointer dereference if no valid extent tree (Ravi Singh) [RHEL-140878]
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Ravi Singh) [RHEL-140878]
  - btrfs: allow swap activation to be interruptible (Ravi Singh) [RHEL-140878]
  - btrfs: use bio_is_zone_append() in the completion handler (Ravi Singh) [RHEL-140878]
  - btrfs: check folio mapping after unlock in relocate_one_folio() (Ravi Singh) [RHEL-140878]
  - btrfs: check folio mapping after unlock in put_file_data() (Ravi Singh) [RHEL-140878]
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Ravi Singh) [RHEL-140878]
  - btrfs: sysfs: fix direct super block member reads (Ravi Singh) [RHEL-140878]
  - btrfs: fix transaction atomicity bug when enabling simple quotas (Ravi Singh) [RHEL-140878]
  - btrfs: fix swap file activation failure due to extents that used to be shared (Ravi Singh) [RHEL-140878]
  - btrfs: avoid monopolizing a core when activating a swap file (Ravi Singh) [RHEL-140878]
  - btrfs: fix race with memory mapped writes when activating swap file (Ravi Singh) [RHEL-140878]
  - btrfs: tree-checker: reject inline extent items with 0 ref count (Ravi Singh) [RHEL-140878]
  - btrfs: fix improper generation check in snapshot delete (Ravi Singh) [RHEL-140878]
  - btrfs: split bios to the fs sector size boundary (Ravi Singh) [RHEL-140878]
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Ravi Singh) [RHEL-140878]
  - btrfs: fix mount failure due to remount races (Ravi Singh) [RHEL-140878]
  - btrfs: drop unused parameter data from btrfs_fill_super() (Ravi Singh) [RHEL-140878]
  - btrfs: drop unused parameter options from open_ctree() (Ravi Singh) [RHEL-140878]
  - btrfs: do not clear read-only when adding sprout device (Ravi Singh) [RHEL-140878]
  - btrfs: canonicalize the device path before adding it (Ravi Singh) [RHEL-140878]
  - btrfs: avoid unnecessary device path update for the same device (Ravi Singh) [RHEL-140878]
  - btrfs: don't take dev_replace rwsem on task already holding it (Ravi Singh) [RHEL-140878]
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Ravi Singh) [RHEL-140878]
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Ravi Singh) [RHEL-140878]
  - btrfs: don't loop for nowait writes when checking for cross references (Ravi Singh) [RHEL-140878]
  - btrfs: fix use-after-free in btrfs_encoded_read_endio() (Ravi Singh) [RHEL-140878]
  - btrfs: move priv off stack in btrfs_encoded_read_regular_fill_pages() (Ravi Singh) [RHEL-140878]
  - btrfs: change btrfs_encoded_read() so that reading of extent is done by caller (Ravi Singh) [RHEL-140878]
  - btrfs: drop unused parameter file_offset from btrfs_encoded_read_regular_fill_pages() (Ravi Singh) [RHEL-140878]
  - mptcp: schedule rtx timer only after pushing data (Davide Caratti) [RHEL-133461]
  - mptcp: fix premature close in case of fallback (Davide Caratti) [RHEL-133461]
  - mptcp: fix ack generation for fallback msk (Davide Caratti) [RHEL-133461]
  - mptcp: drop bogus optimization in __mptcp_check_push() (Davide Caratti) [RHEL-133461]
  - mptcp: ensure context reset on disconnect() (Davide Caratti) [RHEL-133461] {CVE-2025-71144}
  - mptcp: fallback earlier on simult connection (Davide Caratti) [RHEL-133461] {CVE-2025-71088}
  - mptcp: avoid deadlock on fallback while reinjecting (Davide Caratti) [RHEL-133461] {CVE-2025-71126}
  - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). (Davide Caratti) [RHEL-133461] {CVE-2025-68291}
  - mptcp: fix duplicate reset on fastclose (Davide Caratti) [RHEL-133461]
  - mptcp: decouple mptcp fastclose from tcp close (Davide Caratti) [RHEL-133461]
  - mptcp: clear scheduled subflows on retransmit (Davide Caratti) [RHEL-133461]
  - mptcp: do not fallback when OoO is present (Davide Caratti) [RHEL-133461]
  - mptcp: avoid unneeded subflow-level drops (Davide Caratti) [RHEL-133461]
  - mptcp: fix a race in mptcp_pm_del_add_timer() (Davide Caratti) [RHEL-133461 RHEL-139336] {CVE-2025-40257}
  - mptcp: Fix proto fallback detection with BPF (Davide Caratti) [RHEL-133461] {CVE-2025-68227}
  - mptcp: Disallow MPTCP subflows from sockmap (Davide Caratti) [RHEL-133461]
  - mptcp: restore window probe (Davide Caratti) [RHEL-133461]
  - mptcp: fix MSG_PEEK stream corruption (Davide Caratti) [RHEL-133461]
  - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR (Davide Caratti) [RHEL-133461]
  - mptcp: reset blackhole on success with non-loopback ifaces (Davide Caratti) [RHEL-133461]
  - mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129046 RHEL-133461] {CVE-2025-40133}
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137704] {CVE-2025-38403}
  - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_6XXX (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix warning on adf_pfvf_pf_proto.c (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add bank state save and restore for qat_420xx (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix parameter order used in ICP_QAT_FW_COMN_FLAGS_BUILD (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix duplicate restarting msg during AER error (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add WQ_PERCPU to alloc_workqueue users (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - use simple_strtoull to improve qat_uclo_parse_num (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - Return pointer directly in adf_ctl_alloc_resources (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add command queue telemetry counters for GEN6 (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add ring buffer idle telemetry counter for GEN6 (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - make adf_dev_autoreset() static (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - refactor ring-related debug functions (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix seq_file position update in adf_ring_next() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix DMA direction for compression on GEN2 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - flush misc workqueue during device shutdown (Vladislav Dronov) [RHEL-103562 RHEL-94928] {CVE-2025-39721}
  - crypto: qat - enable rate limiting feature for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add compression slice count for rate limiting (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add get_svc_slice_cnt() in device data structure (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add adf_rl_get_num_svc_aes() in rate limiting (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - relocate service related functions (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - consolidate service enums (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add decompression service for rate limiting (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - validate service in rate limiting sysfs api (Vladislav Dronov) [RHEL-94928]
  - Documentation: qat: update debugfs-driver-qat_telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - enable telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add decompression service to telemetry (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - enable power management debugfs for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - relocate power management debugfs helper APIs (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix virtual channel configuration for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add live migration enablers for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - relocate and rename bank state structure definition (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - relocate bank state helper functions (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - replace CHECK_STAT macro with static inline function (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - use pr_fmt() in adf_gen4_hw_data.c (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - disable ZUC-256 capability for QAT GEN5 (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - restore ASYM service support for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - remove duplicate masking for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - lower priority for skcipher and aead algorithms (Vladislav Dronov) [RHEL-94928]
  - Documentation: qat: update sysfs-driver-qat for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add support for decompression service to GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - fix state restore for banks with exceptions (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - allow enabling VFs in the absence of IOMMU (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - use unmanaged allocation for dc_data (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add missing header inclusion (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - enable reporting of error counters for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - enable RAS support for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat/qat_6xxx - Fix NULL vs IS_ERR() check in adf_probe() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add qat_6xxx driver (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add firmware headers for GEN6 devices (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - update firmware api (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - export adf_init_admin_pm() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - expose configuration functions (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - export adf_get_service_mask() (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - add GEN6 firmware loader (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - refactor FW signing algorithm (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - use pr_fmt() in qat uclo.c (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - refactor compression template logic (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - rename and relocate timer logic (Vladislav Dronov) [RHEL-94928]
  - crypto: qat - include qat_common in top Makefile (Vladislav Dronov) [RHEL-94928]
  - sprintf.h requires stdarg.h (Vladislav Dronov) [RHEL-94928]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-197.el10]
changelog:
  - sched: Fix tracepoint called from set_tsk_need_resched() more (Phil Auld) [RHEL-145178]
  - soc/tegra: pmc: Don't fail if "aotag" is not present (CKI Backport Bot) [RHEL-140002]
  - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation (Sabrina Dubroca) [RHEL-108332]
  - xfrm: Determine inner GSO type from packet inner protocol (Sabrina Dubroca) [RHEL-108332]
  - xfrm: Check inner packet family directly from skb_dst (Sabrina Dubroca) [RHEL-108332]
  - xfrm: fix offloading of cross-family tunnels (Sabrina Dubroca) [RHEL-108332]
  - udp: also consider secpath when evaluating ipsec use for checksumming (Sabrina Dubroca) [RHEL-108332]
  - xfrm: bring back device check in validate_xmit_xfrm (Sabrina Dubroca) [RHEL-108332]
  - xfrm: restore GSO for SW crypto (Sabrina Dubroca) [RHEL-108332]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-198.el10]
changelog:
  - s390/cio: Update purge function to unregister the unused subchannels (Mete Durlu) [RHEL-145335]
  - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145336]
  - redhat/configs: Enable CONFIG_PTP_S390 (Mete Durlu) [RHEL-141647]
  - s390/time: Add PtP driver (Mete Durlu) [RHEL-141647]
  - s390/time: Add clocksource id to TOD clock (Mete Durlu) [RHEL-141647]
  - vhost: enable VHOST_FORK_OWNER_KTHREAD (Cindy Lu) [RHEL-58639]
  - config : enable VHOST_ENABLE_FORK_OWNER_CONTROL (Cindy Lu) [RHEL-58639]
  - vhost: Fix ioctl # for VHOST_[GS]ET_FORK_FROM_OWNER (Cindy Lu) [RHEL-58639]
  - vhost: Fix kthread worker cgroup failure handling (Cindy Lu) [RHEL-58639]
  - vhost: Reintroduce kthread API and add mode selection (Cindy Lu) [RHEL-58639]
  - selftests/bpf: Clobber a lot of registers in tailcall_bpf2bpf_hierarchy tests (Gregory Bell) [RHEL-127629]
  - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG (Gregory Bell) [RHEL-127629]
  - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL (Gregory Bell) [RHEL-127629]
  - s390/bpf: Do not write tail call counter into helper and kfunc frames (Gregory Bell) [RHEL-127629]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-199.el10]
changelog:
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [RHEL-106984]
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [RHEL-106984]
  - s390/drivers: Remove unnecessary include <linux/export.h> (Mete Durlu) [RHEL-99994]
  - scsi: zfcp: Simplify workqueue allocation (Mete Durlu) [RHEL-99994]
  - s390/zfcp: Remove outdated email address (Mete Durlu) [RHEL-99994]
  - redhat/configs: rename CONFIG_QCOM_QFPROM to CONFIG_NVMEM_QCOM_QFPROM (Eric Chanudet) [RHEL-144943]
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144337] {CVE-2026-22998}
  - redhat: add usbio kmod placement rule (Jan Stancek) [RHEL-139637]
  - net: ipv4: convert ip_rcv_options to drop reasons (Antoine Tenart) [RHEL-139232]
  - net: ipv4: simplify drop reason handling in ip_rcv_finish_core (Antoine Tenart) [RHEL-139232]
  - net: ipv4: make udp_v4_early_demux explicitly return drop reason (Antoine Tenart) [RHEL-139232]
  - tcp: prefer sk_skb_reason_drop() (Antoine Tenart) [RHEL-139232]
  - net/sched: Add precise drop reason for pfifo_fast queue overflows (Antoine Tenart) [RHEL-139232]
  - net: track pfmemalloc drops via SKB_DROP_REASON_PFMEMALLOC (Antoine Tenart) [RHEL-139232]
  - net: arp: use kfree_skb_reason() in arp_rcv() (Antoine Tenart) [RHEL-139232]
  - can: add drop reasons in CAN protocols receive path (Antoine Tenart) [RHEL-139232]
  - can: add drop reasons in the receive path of AF_CAN (Antoine Tenart) [RHEL-139232]
  - net: neigh: use kfree_skb_reason() in neigh_resolve_output() and neigh_connected_output() (Antoine Tenart) [RHEL-139232]
  - net: flush_backlog() small changes (Antoine Tenart) [RHEL-139232]
  - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix DP no audio issue (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/pm: force send pcie parmater on navi1x (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/pm: fix wrong pcie parameter on navi1x (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: shrink struct members (Anusha Srivatsa) [RHEL-142315]
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Fix enable/disable order (Anusha Srivatsa) [RHEL-142315]
  - drm/atomic-helper: Export and namespace some functions (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: Fix query for VPE block_type and ip_count (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Apply e4479aecf658 to dml (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable" (Anusha Srivatsa) [RHEL-142315]
  - nouveau: don't attempt fwsec on sb on newer platforms. (Anusha Srivatsa) [RHEL-142315]
  - drm/imagination: Disallow exporting of PM/FW protected objects (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (Anusha Srivatsa) [RHEL-142315]
  - drm/pagemap, drm/xe: Ensure that the devmem allocation is idle before use (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/svm: Fix a debug printout (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Drop preempt-fences when destroying imported dma-bufs. (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Use usleep_range for accurate long-running workload timeslicing (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Adjust long-running workload timeslices to reasonable values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/eustall: Disallow 0 EU stall property values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Disallow 0 OA property values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (Anusha Srivatsa) [RHEL-142315]
  - drm: Fix object leak in DRM_IOCTL_GEM_CHANGE_HANDLE (Anusha Srivatsa) [RHEL-142315]
  - drm/mgag200: Fix big-endian support (Anusha Srivatsa) [RHEL-142315]
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (Anusha Srivatsa) [RHEL-142315]
  - drm/i915: Fix format string truncation warning (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Trap handler support for expert scheduling mode (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: bump minimum vgpr size for gfx1151 (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau/gsp: Allocate fwsec-sb at boot (Anusha Srivatsa) [RHEL-142315]
  - drm/bridge: ti-sn65dsi83: ignore PLL_UNLOCK errors (Anusha Srivatsa) [RHEL-142315]
  - drm/amd: Fix unbind/rebind for VCN 4.0.5 (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (Anusha Srivatsa) [RHEL-142315]
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (Anusha Srivatsa) [RHEL-142315]
  - drm/buddy: Separate clear and dirty free block trees (Anusha Srivatsa) [RHEL-142315]
  - drm/buddy: Optimize free block management with RB tree (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/sdma6: Update SDMA 6.0.3 FW version to include UMQ protected-fence fix (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: Forward VMID reservation errors (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/amd: Skip power ungate during suspend for VPE" (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/guc: READ/WRITE_ONCE g2h_fence->done (Anusha Srivatsa) [RHEL-142315]
  - drm/gem-shmem: Fix the MODULE_LICENSE() string (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: don't attach the tlb fence for SI (Anusha Srivatsa) [RHEL-142315]
  - drm/displayid: add quirk to ignore DisplayID checksum errors (Anusha Srivatsa) [RHEL-142315]
  - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (Anusha Srivatsa) [RHEL-142315]
  - drm: nova: depend on CONFIG_64BIT (Anusha Srivatsa) [RHEL-142315]
  - drm/displayid: pass iter to drm_find_displayid_extension() (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix scratch registers offsets for DCN351 (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix scratch registers offsets for DCN35 (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/amd/display: Fix pbn to kbps Conversion" (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Always set OAG_OAGLBCTXCTRL_COUNTER_RESUME (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: fix a job->pasid access race in gpu recovery (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Restore engine registers before restarting schedulers after GT reset (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Increase TDF timeout (Anusha Srivatsa) [RHEL-142315]
  - drm/me/gsc: mei interrupt top half should be in irq disabled context (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: fix drm_gpusvm_init() arguments (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Apply Wa_14020316580 in xe_gt_idle_enable_pg() (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Fix freq kobject leak on sysfs_create_files failure (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: Handle EDEADLK in set_up_atomic_state() (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: Handle EDEADLK in drm_test_check_valid_clones() (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: hdmi: Handle drm_kunit_helper_enable_crtc_connector() returning EDEADLK (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation (Anusha Srivatsa) [RHEL-142315]
  - drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init (Anusha Srivatsa) [RHEL-142315]
  - drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc() (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/fbdev: use the same 64-byte stride alignment as i915 (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Use huge page size to check split svm range alignment (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: fix circular dep oops from vendored i2c encoder (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: refactor deprecated strcpy (Anusha Srivatsa) [RHEL-142315]
  - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: novatek-nt35560: avoid on-stack device structure (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Prevent potential UAF in group creation (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: assign AID to uuid in topology for SPX mode (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Avoid adding of kernel BOs to extobj list (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: restrict the flush page to a 32-bit address (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix potential memleak of vma structure (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix UAF on kernel BO VA nodes (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix race with suspend during unplug (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix UAF race between device unplug and FW event processing (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix group_free_queue() for partially initialized queues (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Handle errors returned by drm_sched_entity_init() (Anusha Srivatsa) [RHEL-142315]
  - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix race condition when unbinding BOs (Anusha Srivatsa) [RHEL-142315]
  - drm: nova: select NOVA_CORE (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Remove skip of dma unmap for imported buffers (Anusha Srivatsa) [RHEL-142315]
  - drm/rcar-du: dsi: Fix missing parameter in RXSETR_...EN macros (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/userq: fix SDMA and compute validation (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: add userq object va track helpers (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix race condition when mapping dmabuf (Anusha Srivatsa) [RHEL-142315]
  - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() (Anusha Srivatsa) [RHEL-142315]
  - drm/vgem-fence: Fix potential deadlock on release (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix DCT active percent format (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Rework bind/unbind of imported buffers (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: visionox-rm69299: Don't clear all mode flags (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail (Anusha Srivatsa) [RHEL-142315]
  - lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-138056]
  - lib/freader: support reading more than 2 folios (Waiman Long) [RHEL-138056]
  - lib: move freader into buildid.h (Waiman Long) [RHEL-138056]
  - sfc: fix potential memory leak in efx_mae_process_mport() (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: replace min/max nesting with clamp() (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - PCI/ERR: Remove remnants of .link_reset() callback (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: unfix not-a-typo in comment (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - net: Fix typos [sfc] (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: falcon: refactor and document ef4_ethtool_get_rxfh_fields (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: siena: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138021] {CVE-2025-38415}
  - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138021] {CVE-2025-38415}
  - erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137980] {CVE-2025-38172}
  - perf/x86/intel/cstate: Add Clearwater Forest support (Michael Petlan) [RHEL-45066]
  - cpuidle: governors: menu: Select polling state in some more cases (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Rearrange main loop in menu_select() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Avoid selecting states with too much latency (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Avoid using invalid recent intervals data (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Fix cpuhotplug routine with PREEMPT_RT=y (Mark Langsdorf) [RHEL-120323]
  - cpuidle: dt: fix opencoded for_each_cpu() in idle_state_valid() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Drop redundant sync_state support (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Opt-out from genpd's common ->sync_state() support (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Fix uninitialized variable in dt_idle_state_present() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Avoid initializing faux device if no DT idle states are present (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Correct the domain-idlestate statistics in debugfs (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Move the per CPU variable domain_state to a struct (Mark Langsdorf) [RHEL-120323]
  - pmdomain: core: Add genpd helper to correct the usage/rejected counters (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Transition to the faux device interface (Mark Langsdorf) [RHEL-120323]
  - cpuidle: menu: Optimize bucket assignment when next_timer_ns equals KTIME_MAX (Mark Langsdorf) [RHEL-120323]
  - cpuidle: teo: Fix typos in two comments (Mark Langsdorf) [RHEL-120323]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-200.el10]
changelog:
  - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference (Ming Lei) [RHEL-143329]
  - iommufd/selftest: Add missing kconfig for DMA_SHARED_BUFFER (Cédric Le Goater) [RHEL-111742]
  - iommufd: Fix building without dmabuf (Cédric Le Goater) [RHEL-111742]
  - iommu/arm-smmu-v3-iommufd: Allow attaching nested domain for GBPA cases (Cédric Le Goater) [RHEL-111742]
  - iommufd/selftest: Add some tests for the dmabuf flow (Cédric Le Goater) [RHEL-111742]
  - iommufd: Accept a DMABUF through IOMMU_IOAS_MAP_FILE (Cédric Le Goater) [RHEL-111742]
  - iommufd: Have iopt_map_file_pages convert the fd to a file (Cédric Le Goater) [RHEL-111742]
  - iommufd: Have pfn_reader process DMABUF iopt_pages (Cédric Le Goater) [RHEL-111742]
  - iommufd: Allow MMIO pages in a batch (Cédric Le Goater) [RHEL-111742]
  - iommufd: Allow a DMABUF to be revoked (Cédric Le Goater) [RHEL-111742]
  - iommufd: Do not map/unmap revoked DMABUFs (Cédric Le Goater) [RHEL-111742]
  - iommufd: Add DMABUF to iopt_pages (Cédric Le Goater) [RHEL-111742]
  - vfio/pci: Add vfio_pci_dma_buf_iommufd_map() (Cédric Le Goater) [RHEL-111742]
  - module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper (Cédric Le Goater) [RHEL-111742]
  - dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings (Cédric Le Goater) [RHEL-132423]
  - vfio/pds: Fix memory leak in pds_vfio_dirty_enable() (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Disable qword access to the VGA region (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Disable qword access to the PCI ROM bar (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Add vfio_pci_device_init_perf_test (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Eliminate INVALID_IOVA (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Split libvfio.h into separate header files (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move vfio_selftests_*() helpers into libvfio.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename vfio_util.h to libvfio.h (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Stop passing device for IOMMU operations (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move IOVA allocator into iova_allocator.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move IOMMU library code into iommu.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename struct vfio_dma_region to dma_region (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Upgrade driver logging to dev_err() (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Prefix logs with device BDF where relevant (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Eliminate overly chatty logging (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Support multiple devices in the same container/iommufd (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Introduce struct iommu (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename struct vfio_iommu_mode to iommu_mode (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Allow passing multiple BDFs on the command line (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Split run.sh into separate scripts (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move run.sh into scripts directory (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: wait for the GPU mem to be ready (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: Inform devmem unmapped after reset (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: split the code to wait for GPU ready (Cédric Le Goater) [RHEL-132423]
  - vfio: use vfio_pci_core_setup_barmap to map bar in mmap (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: Add support for huge pfnmap (Cédric Le Goater) [RHEL-132423]
  - vfio: refactor vfio_pci_mmap_huge_fault function (Cédric Le Goater) [RHEL-132423]
  - dma-buf: fix integer overflow in fill_sg_entry() for buffers >= 8GiB (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Use RCU for error/request triggers to avoid circular locking (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace: Support get_dmabuf_phys (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Add dma-buf export support for MMIO regions (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Enable peer-to-peer DMA transactions by default (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Share the core device pointer while invoking feature functions (Cédric Le Goater) [RHEL-132423]
  - vfio: Export vfio device get and put registration helpers (Cédric Le Goater) [RHEL-132423]
  - dma-buf: provide phys_vec to scatter-gather mapping routine (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Document DMABUF model (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Provide an access to pci_p2pdma_map_type() function (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Refactor to separate core P2P functionality from memory allocation (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Simplify bus address mapping API (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Separate the mmap() support from the core logic (Cédric Le Goater) [RHEL-132423]
  - vfio: Remove the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio: Move the remaining drivers to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/platform: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Convert all PCI drivers to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/ccw: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/gvt: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/mbochs: Convert mbochs to use vfio_info_add_capability() (Cédric Le Goater) [RHEL-132423]
  - vfio: Add get_region_info_caps op (Cédric Le Goater) [RHEL-132423]
  - vfio: Require drivers to implement get_region_info (Cédric Le Goater) [RHEL-132423]
  - vfio/gvt: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/ccw: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/cdx: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/fsl: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/platform: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mbochs: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mdpy: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mtty: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Fill in the missing get_region_info ops (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/virtio: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/hisi: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - hisi_acc_vfio_pci: Add .match_token_uuid callback in hisi_acc_vfio_pci_migrn_ops (Cédric Le Goater) [RHEL-132423]
  - vfio: Fix ksize arg while copying user struct in vfio_df_ioctl_bind_iommufd() (Cédric Le Goater) [RHEL-132423]
  - hisi_acc_vfio_pci: adapt to new migration configuration (Cédric Le Goater) [RHEL-132423]
  - crypto: hisilicon - qm updates BAR configuration (Cédric Le Goater) [RHEL-132423]
  - vfio/mtty: Fix spelling typo in samples/vfio-mdev (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Store libvfio build outputs in $(OUTPUT)/libvfio (Cédric Le Goater) [RHEL-132423]
  - iommu/dma: add missing support for DMA_ATTR_MMIO for dma_iova_unlink() (Cédric Le Goater) [RHEL-116969]
  - kmsan: fix kmsan_handle_dma() to avoid false positives (Cédric Le Goater) [RHEL-116969]
  - kmsan: fix missed kmsan_handle_dma() signature conversion (Cédric Le Goater) [RHEL-116969]
  - mm/hmm: properly take MMIO path (Cédric Le Goater) [RHEL-116969]
  - mm/hmm: migrate to physical address-based DMA mapping API (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: export new dma_*map_phys() interface (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: implement DMA_ATTR_MMIO for dma_(un)map_page_attrs() (Cédric Le Goater) [RHEL-116969]
  - kmsan: convert kmsan_handle_dma to use physical addresses (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: convert dma_direct_*map_page to be phys_addr_t based (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: implement DMA_ATTR_MMIO for iommu_dma_(un)map_phys() (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: rename iommu_dma_*map_page to iommu_dma_*map_phys (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: rename trace_dma_*map_page to trace_dma_*map_phys (Cédric Le Goater) [RHEL-116969]
  - dma-debug: refactor to use physical addresses for page mapping (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: implement DMA_ATTR_MMIO for dma_iova_link(). (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: introduce new DMA attribute to indicate MMIO memory (Cédric Le Goater) [RHEL-116969]
  - objtool: Support Clang AUTOFDO .cold functions (Joe Lawrence) [RHEL-114919]
  - objtool: Fix skip_alt_group() for non-alternative STAC/CLAC (Joe Lawrence) [RHEL-114919]
  - objtool/LoongArch: Get table size correctly if LTO is enabled (Joe Lawrence) [RHEL-114919]
  - objtool/klp: Only enable --checksum when needed (partial) (Joe Lawrence) [RHEL-114916]
  - objtool: Set minimum xxhash version to 0.8 (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add the debian-based package name of xxhash to the hint (Joe Lawrence) [RHEL-114916]
  - Revert "objtool: Warn on functions with ambiguous -ffunction-sections section names" (Joe Lawrence) [RHEL-114916]
  - kbuild: Check for functions with ambiguous -ffunction-sections section names (Joe Lawrence) [RHEL-114916]
  - objtool: Warn on functions with ambiguous -ffunction-sections section names (Joe Lawrence) [RHEL-114916]
  - tty: synclink_gt: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - tty: amiserial: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - media: atomisp: gc2235: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - serial: icom: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - drivers/xen/xenbus: Fix namespace collision and split() section placement with AutoFDO (Joe Lawrence) [RHEL-114916]
  - media: atomisp: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Fix TEXT_MAIN to include .text.start and friends (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Exclude .text.startup and .text.exit from TEXT_MAIN (Joe Lawrence) [RHEL-114916]
  - tools/objtool: Copy the __cleanup unused variable fix for older clang (Joe Lawrence) [RHEL-114916]
  - livepatch: Introduce source code helpers for livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add --show-first-changed option to show function divergence (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add --debug option to show cloning decisions (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Introduce klp-build script for generating livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add stub init code for livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Introduce fix-patch-lines script to avoid __LINE__ diff noise (Joe Lawrence) [RHEL-114916]
  - kbuild,objtool: Defer objtool validation step for CONFIG_KLP_BUILD (Joe Lawrence) [RHEL-114916]
  - livepatch: Add CONFIG_KLP_BUILD (Joe Lawrence) [RHEL-114916]
  - objtool: Add base objtool support for livepatch modules (Joe Lawrence) [RHEL-114916]
  - objtool: Refactor prefix symbol creation code (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add post-link subcommand to finalize livepatch modules (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --debug option to show cloning decisions (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Introduce klp diff subcommand for diffing object files (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --debug-checksum=<funcs> to show per-instruction checksums (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --checksum option to generate per-function checksums (Joe Lawrence) [RHEL-114916]
  - objtool: Unify STACK_FRAME_NON_STANDARD entry sizes (Joe Lawrence) [RHEL-114916]
  - x86/asm: Annotate special section entries (Joe Lawrence) [RHEL-114916]
  - x86/bug: Add ARCH_WARN_ASM macro for BUG/WARN asm code sharing with Rust (Joe Lawrence) [RHEL-114916]
  - objtool: Add ANNOTATE_DATA_SPECIAL (Joe Lawrence) [RHEL-114916]
  - objtool: Move ANNOTATE* macros to annotate.h (Joe Lawrence) [RHEL-114916]
  - objtool: Add annotype() helper (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_file() (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_reloc() and elf_init_reloc() (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_data() (Joe Lawrence) [RHEL-114916]
  - objtool: Generalize elf_create_section() (Joe Lawrence) [RHEL-114916]
  - objtool: Generalize elf_create_symbol() (Joe Lawrence) [RHEL-114916]
  - objtool: Simplify special symbol handling in elf_update_symbol() (Joe Lawrence) [RHEL-114916]
  - objtool: Refactor add_jump_destinations() (Joe Lawrence) [RHEL-114916]
  - objtool: Reindent check_options[] (Joe Lawrence) [RHEL-114916]
  - objtool: Resurrect --backup option (Joe Lawrence) [RHEL-114916]
  - objtool: Rename --Werror to --werror (Joe Lawrence) [RHEL-114916]
  - objtool: Avoid emptying lists for duplicate sections (Joe Lawrence) [RHEL-114916]
  - objtool: Simplify reloc offset calculation in unwind_read_hints() (Joe Lawrence) [RHEL-114916]
  - objtool: Mark prefix functions (Joe Lawrence) [RHEL-114916]
  - objtool: Fix weak symbol hole detection for .cold functions (Joe Lawrence) [RHEL-114916]
  - objtool: Mark .cold subfunctions (Joe Lawrence) [RHEL-114916]
  - objtool: Add section/symbol type helpers (Joe Lawrence) [RHEL-114916]
  - objtool: Convert elf iterator macros to use 'struct elf' (Joe Lawrence) [RHEL-114916]
  - objtool: Fix failure when being compiled on x32 system (Joe Lawrence) [RHEL-114916]
  - objtool: Add action to check for absence of absolute relocations (Joe Lawrence) [RHEL-114916]
  - objtool: Remove .parainstructions reference (Joe Lawrence) [RHEL-114916]
  - objtool: Clean up compiler flag usage (Joe Lawrence) [RHEL-114916]
  - objtool: Const string cleanup (Joe Lawrence) [RHEL-114916]
  - objtool: Check for missing annotation entries in read_annotate() (Joe Lawrence) [RHEL-114916]
  - objtool: Fix "unexpected end of section" warning for alternatives (Joe Lawrence) [RHEL-114916]
  - objtool: Fix __pa_symbol() relocation handling (Joe Lawrence) [RHEL-114916]
  - objtool: Fix x86 addend calculation (Joe Lawrence) [RHEL-114916]
  - objtool: Fix weak symbol detection (Joe Lawrence) [RHEL-114916]
  - objtool: Fix interval tree insertion for zero-length symbols (Joe Lawrence) [RHEL-114916]
  - objtool: Add empty symbols to the symbol tree again (Joe Lawrence) [RHEL-114916]
  - objtool: Remove error handling boilerplate (Joe Lawrence) [RHEL-114916]
  - objtool: Fix standalone --hacks=jump_label (Joe Lawrence) [RHEL-114916]
  - objtool: Propagate elf_truncate_section() error in elf_write() (Joe Lawrence) [RHEL-114916]
  - objtool: Fix broken error handling in read_symbols() (Joe Lawrence) [RHEL-114916]
  - objtool: Make find_symbol_containing() less arbitrary (Joe Lawrence) [RHEL-114916]
  - interval_tree: Sync interval_tree_generic.h with tools (Joe Lawrence) [RHEL-114916]
  - x86/alternative: Refactor INT3 call emulation selftest (Joe Lawrence) [RHEL-114916]
  - modpost: Ignore unresolved section bounds symbols (Joe Lawrence) [RHEL-114916]
  - kbuild: Remove 'kmod_' prefix from __KBUILD_MODNAME (Joe Lawrence) [RHEL-114916]
  - elfnote: Change ELFNOTE() to use __UNIQUE_ID() (Joe Lawrence) [RHEL-114916]
  - compiler.h: Make addressable symbols less of an eyesore (Joe Lawrence) [RHEL-114916]
  - compiler: Tweak __UNIQUE_ID() naming (Joe Lawrence) [RHEL-114916]
  - x86/kprobes: Remove STACK_FRAME_NON_STANDARD annotation (Joe Lawrence) [RHEL-114916]
  - x86/module: Improve relocation error messages (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Unify TEXT_MAIN, DATA_MAIN, and related macros (Joe Lawrence) [RHEL-114916]
  - s390/vmlinux.lds.S: Prevent thunk functions from getting placed with normal text (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Include .data.rel[.local] into .data section (Joe Lawrence) [RHEL-114916]
  - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: ipc: Separate hibernate callbacks in dev_pm_ops (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Use IPC RESET instead of void message in ish_wakeup() (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: ipc: Always schedule FW reset work on RESET_NOTIFY/ACK (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-ipc: Reset clients state on resume from D3 (Tony Camuso) [RHEL-135993]
  - HID: intel-ishtp-hid: Clear suspended flag only after connected on resume (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Add ishtp_get_connection_state() interface (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-ipc: Remove redundant ready check after timeout function (Tony Camuso) [RHEL-135993]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-201.el10]
changelog:
  - vfio: Prevent from pinned DMABUF importers to attach to VFIO DMABUF (Cédric Le Goater) [RHEL-144911]
  - r8152: Advertise software timestamp information. (Jose Ignacio Tornos Martinez) [RHEL-124653]
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143197] {CVE-2025-68800}
  - RDMA/efa: Remove possible negative shift (Kamal Heib) [RHEL-140846]
  - RDMA/efa: Extend admin timeout error print (Kamal Heib) [RHEL-140846]
  - RDMA/efa: Add Network HW statistics counters (Kamal Heib) [RHEL-140846]
  - io_uring/io-wq: fix incorrect io_wq_for_each_worker() termination logic (Jeff Moyer) [RHEL-140845]
  - io_uring/rw: cast rw->flags assignment to rwf_t (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-140845]
  - io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-140845]
  - io_uring: fix filename leak in __io_openat_prep() (Jeff Moyer) [RHEL-140845]
  - io_uring: fix nr_segs calculation in io_import_kbuf (Jeff Moyer) [RHEL-140845]
  - io_uring: fix min_wait wakeups for SQPOLL (Jeff Moyer) [RHEL-140845]
  - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory (Jeff Moyer) [RHEL-140845]
  - io_uring/rsrc: fix lost entries after cloned range (Jeff Moyer) [RHEL-140845]
  - io_uring/poll: correctly handle io_poll_add() return value on update (Jeff Moyer) [RHEL-140845]
  - io_uring/rsrc: don't use blk_rq_nr_phys_segments() as number of bvecs (Jeff Moyer) [RHEL-140845]
  - io_uring/rw: ensure allocated iovec gets cleared for early failure (Jeff Moyer) [RHEL-140845]
  - io_uring: fix regbuf vector size truncation (Jeff Moyer) [RHEL-140845]
  - io_uring: use WRITE_ONCE for user shared memory (Jeff Moyer) [RHEL-140845]
  - io_uring: fix types for region size calulation (Jeff Moyer) [RHEL-140845]
  - io_uring: correct __must_hold annotation in io_install_fixed_file (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: be smarter on when to update the stime usage (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: switch away from getrusage() for CPU accounting (Jeff Moyer) [RHEL-140845]
  - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-140845]
  - io_uring/fdinfo: get rid of dumping credentials (Jeff Moyer) [RHEL-140845]
  - io_uring/fdinfo: only compile if CONFIG_PROC_FS is set (Jeff Moyer) [RHEL-140845]
  - io_uring: fix incorrect unlikely() usage in io_waitid_prep() (Jeff Moyer) [RHEL-140845]
  - io_uring: protect mem region deregistration (Jeff Moyer) [RHEL-140845]
  - Revert "io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common()" (Jeff Moyer) [RHEL-140845]
  - io_uring: fix incorrect io_kiocb reference in io_link_skb (Jeff Moyer) [RHEL-140845]
  - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations (Jeff Moyer) [RHEL-140845]
  - io_uring: include dying ring in task_work "should cancel" state (Jeff Moyer) [RHEL-140845]
  - fs: add a FMODE_ flag to indicate IOCB_HAS_METADATA availability (Jeff Moyer) [RHEL-140845]
  - io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-140845]
  - io_uring: export io_[un]account_mem (Jeff Moyer) [RHEL-140845]
  - io_uring: don't use int for ABI (Jeff Moyer) [RHEL-140845]
  - tools headers UAPI: sync linux/stat.h linux/fs.h with tools (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix size read races in truncate, fallocate and copy offload (Olga Kornievskaia) [RHEL-134733]
  - NFS/localio: Deal with page bases that are > PAGE_SIZE (Olga Kornievskaia) [RHEL-134733]
  - NFS/localio: Stop further I/O upon hitting an error (Olga Kornievskaia) [RHEL-134733]
  - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() (Olga Kornievskaia) [RHEL-134733]
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix a deadlock involving nfs_release_folio() (Olga Kornievskaia) [RHEL-134733]
  - pNFS: Fix a deadlock when returning a delegation during open() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Drop the client reference in client_states_open() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg() (Olga Kornievskaia) [RHEL-134733]
  - lockd: fix vfs_test_lock() calls (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Clear TIME_DELEG in the suppattr_exclcreat bitmap (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix memory leak in nfsd_create_serv error paths (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: restore destructor on submit failure (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Mark variable __maybe_unused to avoid W=1 build break (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: bound check rq_pages index in inline path (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: return 0 on success from svc_rdma_copy_inline_range (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: use rc_pageoff for memcpy byte offset (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: duplicate handshake cancellations leak socket (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: fix regression due to out-of-order __put_cred (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove 61 byte hole from needless ____cacheline_aligned (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove alignment size checking in nfs_is_local_dio_possible (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix inheritance of the block sizes when automounting (Olga Kornievskaia) [RHEL-134733]
  - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68764}
  - Revert "nfs: ignore SB_RDONLY when mounting nfs" (Olga Kornievskaia) [RHEL-134733]
  - Revert "nfs: clear SB_RDONLY before getting superblock" (Olga Kornievskaia) [RHEL-134733]
  - Revert "nfs: ignore SB_RDONLY when remounting nfs" (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68349}
  - NFSv4.1: protect destroying and nullifying bc_serv structure (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: new helper function for stopping backchannel server (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: cleanup common code in backchannel request (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: pass transport for callback shutdown (Olga Kornievskaia) [RHEL-134733]
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in readdir and lookup (Olga Kornievskaia) [RHEL-134733]
  - NFS: Avoid changing nlink when file removes and attribute updates race (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Make FILE_SYNC WRITEs comply with spec (Olga Kornievskaia) [RHEL-134733]
  - NFSD: use correct reservation type in nfsd4_scsi_fence_client (Olga Kornievskaia) [RHEL-134733]
  - NFSD: don't start nfsd if sv_permsocks is empty (Olga Kornievskaia) [RHEL-134733]
  - lockd: don't allow locking on reexported NFSv2/3 (Olga Kornievskaia) [RHEL-134733]
  - NFSD/blocklayout: Extract extent mapping from proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - NFSD/blocklayout: Fix minlength check in proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: Release transport resources synchronously (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: Fix memory leak in tls_handshake_accept() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix LTP test failures when timestamps are delegated (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68242}
  - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() (Olga Kornievskaia) [RHEL-134733]
  - NFS: sysfs: fix leak when nfs_client kobject add fails (Olga Kornievskaia) [RHEL-134733]
  - NFSv2/v3: Fix error handling in nfs_atomic_open_v23() (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: do not issue misaligned DIO out-of-order (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: Ensure DIO WRITE's IO on stable storage upon completion (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: backfill missing partial read support for misaligned DIO (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add refcounting for each iocb IO associated with NFS pgio header (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove unecessary ENOTBLK handling in DIO WRITE support (Olga Kornievskaia) [RHEL-134733]
  - NFS: Check the TLS certificate fields in nfs_match_client() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68243}
  - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS (Olga Kornievskaia) [RHEL-134733]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() (Olga Kornievskaia) [RHEL-134733]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v3_ds_connect() (Olga Kornievskaia) [RHEL-134733]
  - Revert "SUNRPC: Make RPCSEC_GSS_KRB5 select CRYPTO instead of depending on it" (Olga Kornievskaia) [RHEL-134733]
  - nfsd: ensure SEQUENCE replay sends a valid reply. (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Never cache a COMPOUND when the SEQUENCE operation fails (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Skip close replay processing if XDR encoding fails (Olga Kornievskaia) [RHEL-134733]
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40273}
  - nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix refcount leak in nfsd_set_fh_dentry() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40212}
  - nfsd: Avoid strlen conflict in nfsd4_encode_components_esc() (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix crash in nfsd4_read_release() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40324}
  - NFS4: Fix state renewals missing after boot (Olga Kornievskaia) [RHEL-134733]
  - NFS: check if suid/sgid was cleared after a write as needed (Olga Kornievskaia) [RHEL-134733]
  - NFS4: Apply delay_retrans to async operations (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: fix to allocate mirror->dss before use (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40087}
  - nfsd: discard nfserr_dropit (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Make RPCSEC_GSS_KRB5 select CRYPTO instead of depending on it (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Add io_cache_{read,write} controls to debugfs (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Do the grace period check in ->proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - nfsd: delete unnecessary NULL check in __fh_verify() (Olga Kornievskaia) [RHEL-134733]
  - NFS: add basic STATX_DIOALIGN and STATX_DIO_READ_ALIGN support (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add tracepoints for misaligned DIO READ and WRITE support (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add proper O_DIRECT support for READ and WRITE (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: refactor iocb initialization (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: refactor iocb and iov_iter_bvec initialization (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: avoid issuing misaligned IO using O_DIRECT (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: make trace_nfs_local_open_fh more useful (Olga Kornievskaia) [RHEL-134733]
  - NFSD: filecache: add STATX_DIOALIGN and STATX_DIO_READ_ALIGN support (Olga Kornievskaia) [RHEL-134733]
  - fs: add STATX_DIO_READ_ALIGN (Olga Kornievskaia) [RHEL-134733]
  - fs: reformat the statx definition (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: unexport rpc_malloc() and rpc_free() (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Add support for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Update layout stats & error paths for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Write path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Commit path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Read path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Update low level helper functions to be DS stripe aware. (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Add data structure support for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Use ds_commit_idx when marking a write commit (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Remove cred local variable dependency (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Disallow layoutget during grace period (Olga Kornievskaia) [RHEL-134733]
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68185}
  - fs: add RWF_DONTCACHE iocb and FOP_DONTCACHE file_operations flag (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Update gssx_accept_sec_context() to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Update svcxdr_init_decode() to call xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the flexfilelayout driver to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the filelayout to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the blocklayout to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update listxattr to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update getacl to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update readdir to use a scratch folio (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Introduce xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Remove redundant __GFP_NOWARN (Olga Kornievskaia) [RHEL-134733]
  - nfs: remove NFS_WBACK_BUSY() (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: fix mount hang after CREATE_SESSION failure (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: fix backchannel max_resp_sz verification check (Olga Kornievskaia) [RHEL-134733]
  - NFSv4: fix "prefered"->"preferred" (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: add a Kconfig option to redirect dfprintk() output to trace buffer (Olga Kornievskaia) [RHEL-134733]
  - redhat/configs: Add CONFIG_SUNRPC_DEBUG_TRACE (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: remove dfprintk_cont() and dfprintk_rcu_cont() (Olga Kornievskaia) [RHEL-134733]
  - nfs: cleanup tracepoint declarations (Olga Kornievskaia) [RHEL-134733]
  - nfs: add tracepoints to nfs_writepages() (Olga Kornievskaia) [RHEL-134733]
  - nfs: more in-depth tracing of writepage events (Olga Kornievskaia) [RHEL-134733]
  - nfs: new tracepoints around write handling (Olga Kornievskaia) [RHEL-134733]
  - nfs: add tracepoints to nfs_file_read() and nfs_file_write() (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix "occurence"->"occurrence" (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Don't force CRYPTO_LIB_SHA256 to be built-in (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Reduce DRC bucket size (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Delay adding new entries to LRU (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Move the svc_rpcb_cleanup() call sites (Olga Kornievskaia) [RHEL-134733]
  - NFS: Remove rpcbind cleanup for NFSv4.0 callback (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Drop redundant conversion to bool (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: eliminate return pointer in svc_tcp_sendmsg() (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix pr_notice in svc_tcp_sendto() to show correct length (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Eliminate an allocation in nfs4_make_rec_clidname() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Replace open-coded conversion of bytes to hex (Olga Kornievskaia) [RHEL-134733]
  - lockd: Remove space before newline (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix timestamp updates in CB_GETATTR (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix SETATTR updates for delegated timestamps (Olga Kornievskaia) [RHEL-134733]
  - nfsd: track original timestamps in nfs4_delegation (Olga Kornievskaia) [RHEL-134733]
  - nfsd: use ATTR_CTIME_SET for delegated ctime updates (Olga Kornievskaia) [RHEL-134733]
  - vfs: add ATTR_CTIME_SET flag (Olga Kornievskaia) [RHEL-134733]
  - nfsd: ignore ATTR_DELEG when checking ia_valid before notify_change() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix assignment of ia_ctime.tv_nsec on delegated mtime update (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix last write offset handling in layoutcommit (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Implement large extent array support in pNFS (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Minor cleanup in layoutcommit decoding (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Minor cleanup in layoutcommit processing (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Rework encoding and decoding of nfsd4_deviceid (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: Change ret code of xdr_stream_decode_opaque_fixed (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: delay pc_release callback until after the reply is sent (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Move the fh_getattr() helper (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Relocate the fh_want_write() and fh_drop_write() helpers (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix null pointer dereference on zero-length checksum (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40129}
  - nfsctl: symlink has no business bumping link count of parent directory (Olga Kornievskaia) [RHEL-134733]
  - slightly simplify nfs_atomic_open() (Olga Kornievskaia) [RHEL-134733]
  - simplify nfs_atomic_open_v23() (Olga Kornievskaia) [RHEL-134733]
  - check_export(): constify path argument (Olga Kornievskaia) [RHEL-134733]
  - rqst_exp_get_by_name(): constify path argument (Olga Kornievskaia) [RHEL-134733]
  - nfs: constify path argument of __vfs_getattr() (Olga Kornievskaia) [RHEL-134733]
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-133462]
  - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (Guillaume Nault) [RHEL-133462]
  - inet: Avoid ehash lookup race in inet_ehash_insert() (Guillaume Nault) [RHEL-133462]
  - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (Guillaume Nault) [RHEL-133462]


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Jan Kolarik <jkolarik@redhat.com> - 0.72.0-1
changelog:
  - Update to 0.72.0
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474)
  - transaction: Save the reason for installing (RhBug:1733274)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279,2176263)
  - conf: Add limited shell-style variable expansion (RhBug:1789346)
  - conf: Add support for $releasever_major, $releasever_minor (RhBug:1789346)
  - repo: Don't download the repository if the local cache is up to date
  - Allow DNF to be removed by DNF 5 (RhBug:2221907)
  - Include dist-info for python3-libdnf
  - bindings: Load all modules with RTLD_GLOBAL
  - Update translations


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.11-1
changelog:
  - fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Added translation using Weblate (Czech) (pavel.borecki@gmail.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore: Removed getSyspurposeCompliance (jhnidek@redhat.com)
  - chore: Do not call candlepin from GetSyspurposeStatus (jhnidek@redhat.com)
  - chore: Removed SyspurposeComplianceStatusCache (jhnidek@redhat.com)
  - fix: Require findutils in .spec file (jhnidek@redhat.com)
  - feat: Try to cache candlepin server capabilities (jhnidek@redhat.com)
  - solved a conflict in utils.py (jstavel@redhat.com)
  - CCT-744: integration tests for DBus Config object (jstavel@redhat.com)
  - CCT-1029: tests for Register with environment option (jstavel@redhat.com)
  - chore: Small changes in integration-tests/test_syspurpose.py
    (jhnidek@redhat.com)
  - chore: Small fixes in test_register_get_orgs.py (jhnidek@redhat.com)
  - chore: Small fixes of integration-tests/test_register.py (jhnidek@redhat.com)
  - chore: Small tweaks of bash script of integration tests (jhnidek@redhat.com)
  - chore(doc): Improved README.md for integration tests (jhnidek@redhat.com)
  - CCT-743: rebased (jstavel@redhat.com)
  - CCT-1600: fix applied, unified settings.toml to use the same name of
    valid_fields.json (jstavel@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CCT-742: integration tests for DBus Syspurpose object (jstavel@redhat.com)
  - CCT-1029: test for dbus method GetEnvironments (jstavel@redhat.com)
  - CCT-1097: added enable_content for registration tests (jstavel@redhat.com)
  - CCT-745: multi org credentials added (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.12-1
changelog:
  - feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Added translation using Weblate (Finnish) (noreply-addon-
    languages@weblate.org)
  - Translated using Weblate (Czech) (jsefler@redhat.com)
  - fix(test): Fix unit tests of "sub-man status" (jhnidek@redhat.com)
  - RHEL-126153: Update GCP to Google Cloud in log messages (crag@redhat.com)
  - fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
  - ci: bump actions/upload-artifact from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix profile upload because of missing self.cp (suttner@atix.de)
  - feat: added signature type log in TLS handshake (macano@redhat.com)
  - feat: added internal method to get tls handshake info
    (manuelcanorojo@gmail.com)
  - fix: Print list of environments without --set/--list (jhnidek@redhat.com)
  - fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
  - fix(test): Fix unit test of aws (jhnidek@redhat.com)
  - fix(ci): Fixed integration tests of syspurpose (jhnidek@redhat.com)
  - chore: Removed deprecated information from setup.py (jhnidek@redhat.com)
  - chore(ci): Specify permissions for Actions (mhorky@redhat.com)
  - feat: check if --set arg is empty when the environments module is called
    (manuelcanorojo@gmail.com)
  - docs: added missing gettext building dependency (manuelcanorojo@gmail.com)
  - docs: improved man content related to subscription-manager environment
    variables for proxy configuration (manuelcanorojo@gmail.com)
  - ci: bump actions/checkout from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix gobject python package name of sles (suttner@atix.de)
  - Fix SLES build on OBS (suttner@atix.de)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.0-1
changelog:
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - chore: Format register.py (mhorky@redhat.com)
  - feat: Require SCA for registration (mhorky@redhat.com)
  - doc: Update install and testing guide (stomsa@redhat.com)
  - Fixed spec file to list packages twice (suttner@atix.de)
  - code review comments fixes - update metadata and test. (chambrid@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - Collect Azure VM Name and Resource Group Name as a cloud fact.
    (chambrid@redhat.com)
  - fix: Improve wording in redhat.repo template (glutexo@icloud.com)
  - Remove commands moved to syspurpose (glutexo@icloud.com)
  - doc: drop references to "activate" (ptoscano@redhat.com)
  - feat: Remove import command (zpetrace@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Add option to run smoke tests with fake IMDS servers.
    (jhnidek@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat(ci): Update testing matrix (mhorky@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Patsy Griffin <pfrankli@redhat.com> - 6.06-7
changelog:
  - Break up man-pages-additional-20140218.tar.xz (RHEL-101696)
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Jaroslav Rohel <jrohel@redhat.com> - 3.9.0-1
changelog:
  - Update to 3.9.0
  - Add leaves command - List installed packages not required by other installed packages


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Leo Sandoval <lsandova@redhat.com> - 0.7.2-2
changelog:
  - Rebase several patches from upstream which:
    - Introduce --is-sb-enabled parameter and better return codes
    - Remove unused int_to_b64()
    - Show help on unsupported systems
  - Resolves: #RHEL-90836
  - Resolves: #RHEL-90839


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Vit Mojzis <vmojzis@redhat.com> - 0.30.0-21
changelog:
  - Improve "help/usage" message (RHEL-38477)
  - libnetlabel: fix a header file guard typo
  - netlabel-config: Fix IPv4/IPv6 addresses parsing in nlbl_reset_unlbl()
  - netlabel: Update man page to clarify SELinux labeling
  - tests: add a basic CALIPSO pass through test
  - doc: fix a typo in the netlabel-config man page


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80811
    Resolves: RHEL-57022
    Resolves: RHEL-24098
    Resolves: RHEL-24097
    Resolves: RHEL-86865


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-122599
    Resolves: RHEL-141987
    Resolves: RHEL-142009
    Resolves: RHEL-142022
    Resolves: RHEL-142026
    Resolves: RHEL-142030
    Resolves: RHEL-142034
    Resolves: RHEL-142038
    Resolves: RHEL-142042
    Resolves: RHEL-142046
    Resolves: RHEL-142050
    Resolves: RHEL-142054


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.81-1
changelog:
  - Update to latest upstream version with better support for latest OSes,
    closes rhbz#2090942
  - Remove 'which' dependency, closes rhbz#2111531
  - Add support for detecting EFI shell binary (shell.efi), closes rhbz#2101953
  - Add support for Win 11 on ARM 64 systems


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.9.0-4
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Paul Howarth <paul@city-fan.org> - 1:0.240-1
changelog:
  - Update to 0.240
    - Use Test::More::isnt() instead of Test::More::isn't in tests, which is
      deprecated, as ' isn't allowed as package separator in an upcoming version
      of Perl (GH#13)


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: John Kacur <jkacur@redhat.com> - 0.7.4-1
changelog:
  - Rebase to upstream version 0.7.4
  - Convert to pyproject-based build using pyproject.toml
  - Remove python3-six dependency (no longer needed)
  - Remove distutils patch (no longer needed with pyproject build)
  Resolves: RHEL-114904


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Miro Hrončok <mhroncok@redhat.com> - 2.32.4-1
changelog:
  - Update to 2.32.4
  - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs
  Resolves: RHEL-105460


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Miro Hrončok <mhroncok@redhat.com> - 1.26.19-3
changelog:
  - Security fix for CVE-2025-66471
  - Security fix for CVE-2025-66418
  - Security fix for CVE-2026-21441
  Resolves: RHEL-142737, RHEL-137215, RHEL-142755


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Jiri Hnidek <jhnidek@redhat.com> 8-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Various fixes in state management (tomatus777@gmail.com)
  - Upgrade to Patternfly 6 (tomatus777@gmail.com)
  - make eslint happy (tomatus777@gmail.com)
  - test: mock-insights should have /host_exists endpoint (pkoprda@redhat.com)
  - build: switch to esbuild (tomatus777@gmail.com)
  - build: fix installation of sub-man with newer Fedora (ptoscano@redhat.com)
  - refactor: Remove system purpose status (pkoprda@redhat.com)
  - refactor: Display status consistent with subscription-manager
    (pkoprda@redhat.com)
  - refactor: Simplify displaying of installed products (pkoprda@redhat.com)
  - Stop using deprecated translatable for html (jvanderwaa@redhat.com)


author: mhorky <mhorky@redhat.com> 9-1
changelog:
  - remove src/po.js (tomatus777@tomatus.cz)
  - translate placeholder strings (tomatus777@tomatus.cz)
  - index.html: fix import order and make localization work again (tomatus777@tomatus.cz)
  - Fixes: RHEL-111937


author: Pino Toscano <ptoscano@redhat.com> 5-1
changelog:
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2077759: invoke cockpit.translate() after document loading
    (ptoscano@redhat.com)
  - test: Drop outdated copy of packagelib.py (martin@piware.de)
  - Added missing keys to react components (jhnidek@redhat.com)
  - Fix the issue, when it is not possible to install insights-client
    (jhnidek@redhat.com)
  - test: Sync packagelib.py with cockpit main (martin@piware.de)
  - New target and added one project directory to .gitignore (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: mhorky <mhorky@redhat.com> 9-1
changelog:
  - remove src/po.js (tomatus777@tomatus.cz)
  - translate placeholder strings (tomatus777@tomatus.cz)
  - index.html: fix import order and make localization work again (tomatus777@tomatus.cz)
  - Fixes: RHEL-111937

    (tomatus777@tomatus.cz)


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.4-1
changelog:
  - Allow systemd-coredump the sys_chroot capability
  Resolves: RHEL-97586
  - Add the rhcd_rw_fifo_files() interface
  Related: RHEL-99318
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-99318


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.5-1
changelog:
  - Confine nfs-server generator
  Resolves: RHEL-106119
  - Support virtqemud handle hotplug hostdev devices
  Resolves: RHEL-65266
  - Allow virtstoraged create qemu /var/run files
  Resolves: RHEL-104344
  - Allow virtqemud write to sysfs files
  Resolves: RHEL-104378
  - Allow unconfined_domain_type cap2_userns capabilities
  Resolves: RHEL-93656


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.6-1
changelog:
  - Apply generator template to selinux-autorelabel generator
  Resolves: RHEL-107516
  - Allow systemd-coredumpd capabilities in the user namespace
  Resolves: RHEL-97586
  - Allow virtqemud start a vm which uses nbdkit
  Resolves: RHEL-69118
  - Add nbdkit_signal() and nbdkit_signull() interfaces
  Resolves: RHEL-69118
  - Allow openvswitch read virtqemud process state
  Resolves: RHEL-65322
  - Add binsbin-convert.sh script
  Resolves: RHEL-69118


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.7-1
changelog:
  - Revert "Add policy for insights-core"
  Resolves: RHEL-110651
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110651


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.8-1
changelog:
  - Reapply "Add insights_core interfaces"
  Resolves: RHEL-112368
  - Reapply "Add policy for insights-core"
  Resolves: RHEL-112368


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.9-1
changelog:
  - Allow systemd-oomd watch tmpfs dirs
  Resolves: RHEL-106998
  - Allow systemd-oomd watch dbus pid sock files
  Resolves: RHEL-106998
  - Allow userdomain to connect to systemd-oomd over a unix socket
  Resolves: RHEL-106998
  - Allow 'oomctl dump' to interact with systemd-oomd
  Resolves: RHEL-106998
  - Basic functionality for systemd-oomd
  Resolves: RHEL-106998
  - Basic enablement for systemd-oomd
  Resolves: RHEL-106998
  - Remove permissive domains
  Resolves: RHEL-107038
  - Allow iptables manage its private fifo_files in /tmp
  Resolves: RHEL-83775
  - Allow ras-mc-ctl write to sysfs files
  Resolves: RHEL-86926
  - Allow nfs generator create and use netlink sockets
  Resolves: RHEL-111556
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.10-1
changelog:
  - Allow sshd-auth read generic proc files
  Resolves: RHEL-107732
  - Allow sshd-auth read and write user domain ptys
  Resolves: RHEL-107732
  - Allow sshd-session get attributes of sshd vsock socket
  Resolves: RHEL-107732
  - Adjust guest and xguest users policy for sshd-session
  Resolves: RHEL-107732
  - Update files_search_base_file_types()
  Resolves: RHEL-107732
  - Allow sshd-session read cockpit pid files
  Resolves: RHEL-107732
  - Add default contexts for sshd-seesion
  Resolves: RHEL-107732
  - Define types for new openssh executables
  Resolves: RHEL-107732
  - Allow ras-mc-ctl get attributes of the kmod executable
  Resolves: RHEL-102535
  - Define file equivalency for /var/opt
  Resolves: RHEL-116512
  - Update specfile triggers for DSP modules
  Resolves: RHEL-116044


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.11-1
changelog:
  - Allow iotop stream connect to systemd-userdbd
  Resolves: RHEL-105481
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-107589
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-124855
  - Allow nfsidmapd search virt lib directories
  Resolves: RHEL-68722
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.12-1
changelog:
  - Update kernel_secretmem_use()
  Resolves: RHEL-116154
  - Allow system_mail_t read apache system content conditionally
  Resolves: RHEL-114970
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-119619
  - Update specfile trigger for smartmontools
  Resolves: RHEL-113167


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.13-1
changelog:
  - Add the rpm_signal() interface
  Related: RHEL-107589
  - Allow tuned_t use its private tmpfs files
  Related: RHEL-107589
  - Allow samba-bgqd send to smbd over a unix datagram socket
  Resolves: RHEL-93731
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041
  - Confine redfish_finder - host api discovery service
  Resolves: RHEL-50299
  - Update policy for dhcpc_hook_t
  Resolves: RHEL-113937
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  Resolves: RHEL-113937
  - Allow systemd to map files under /sys
  Resolves: RHEL-132638


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.14-1
changelog:
  - Update ktls policy
  Resolves: RHEL-123737
  - Update policy for redfish-finder
  Resolves: RHEL-50299
  - Allow sshd-session read, write, and map ica tmpfs files
  Resolves: RHEL-138247
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  Resolves: RHEL-127721
  - Allow stalld map sysfs files
  Resolves: RHEL-135512
  - Allow aide get attributes of a filesystem with extended attributes
  Resolves: RHEL-121479
  - Label miscellaneous /dev/papr-* devices
  Resolves: RHEL-129839
  - Allow KDE Plasma Login Manager to function as a display manager
  Resolves: RHEL-135676
  - Update specfile trigger for openwsmand
  Resolves: RHEL-133024


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.15-1
changelog:
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-77047
  - Allow stap server read virtual memory sysctls
  Resolves: RHEL-114104
  - Allow sshd-session inherit limits from its parent process
  Resolves: RHEL-136673
  - Allow sshd noatsecure on sshd-session execution
  Resolves: RHEL-138247
  - Allow sshd-net read and write to sshd vsock socket
  Related: RHEL-138247


author: Martin Osvald <mosvald@redhat.com> - 2.14.2-1
changelog:
  - sysusers.d: add script and configuration fragments for groups
  - passwd: align 'nologin' shell path with systemd defaults
  - uidgid: assign GID 101 for 'ssh_keys' group
  - uidgid: assign UID/GID 114 for 'polkitd'
  - passwd: update GECOS field for 'root' user
  - services: remove commas from aliases for ircu-3
  - setup.spec: throw away newaliases output again


author: Martin Osvald <mosvald@redhat.com> - 2.14.3-1
changelog:
  - sysusers.d: add script and generate configuration fragment for users
  - Add fallback to hostname determination for csh.login (rhbz#2079768)
  - Remove ancient Conflicts
  - files: mark /run/motd as an ephemeral ghost entry


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: Jan Macku <jamacku@redhat.com> - 257-1
changelog:
  - Rebase to new upstream release v257 (RHEL-71409)
  - netif-naming-scheme: introduce rhel-10.0 scheme (RHEL-44417)


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-8
changelog:
  - Backport upstream changes to jailify extraction directory
    Includes related gnulib changes to add openat2
    Fixes CVE-2025-45582


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-10
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)
  - upstream fix for savannah bug 64581, commit 51142180
    (crash with TAR_OPTIONS)
  - Backport fix for regression in the --no-overwrite-dir option
    Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
    in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html


author: John B. Wyatt IV <jwyatt@redhat.com> - 0.19-11
changelog:
  - Fix syntax warnings
  - Switch RHEL10 pkg to use autosetup like c9s does in tuna, -v makes it more verbose
  Resolves: RHEL-106288


author: John B. Wyatt IV <jwyatt@redhat.com> - 0.19-12
changelog:
  - Reverting the previous syntax warnings fix patch and replacing it with the
  tuna-Fix-string-syntax-warnings-with-raw-strings patch.
  Resolves: RHEL-106288


author: John Kacur <jkacur@redhat.com> - 0.19-14
changelog:
  - Update man page with cpu_power command
  - Fix show_threads -t and show_irqs -q to not match everything if no match
  - Fix run command failing to apply BATCH policy
  - Add -U and -K to the move command
  Resolves: RHEL-107914 RHEL-106070 RHEL-93776 RHEL-106068


author: John Kacur <jkacur@redhat.com> - 0.20-1
changelog:
  - Update to upstream version 0.20
  - Convert spec file to use pyproject-rpm-macros
  - Use %pyproject_buildrequires, %pyproject_build, %pyproject_install
  - Use %pyproject_save_files for automatic file list generation
  - Remove oscilloscope (unsupported in RHEL)
  Resolves: RHEL-114902, RHEL-83080


author: John Kacur <jkacur@redhat.com> - 0.20-2
changelog:
  - Add python3-pip, python3-setuptools, python3-wheel BuildRequires
  - Delete setup.py in %prep so pyproject.toml build is used
  - Compress man page during %prep similar to rteval
  - Install tuna script and compressed man page explicitly
  Resolves: RHEL-114902


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94809
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
    - functions: make calc_isolated_cores return CPU ranges
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: disable appropriate P-State drivers
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    - gui: fix the profile deleter script


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <pats@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84740)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 6.0-67
changelog:
  - zipinfo: remove the extra %c that caused invalid reads
  - zipinfo: fix the whitespaces in the output
  - Zipbombs: Port Another patch, orinally made by Mark Adler
  - https://github.com/madler/unzip/commit/af0d07f95809653b669d88aa0f424c6d5aa48ba0
    Resolves: RHEL-59972
    Resolves: RHEL-6286


author: - Chung Chung <cchung@redhat.com> - 8.3.2.1-1
changelog:
  - Add vdocalculatesize utility.
  - Improve handling of corrupt index metadata.
  - Resolves: RHEL-129392


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fixc causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fix causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-1
changelog:
  - Update to version 2.11 (RHEL-59010)
  - backport fix for known regression on brcmfmac (rhbz#2302577)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-4
changelog:
  - Use pkcs11 provider to resolve PKCS11 URIs (RHEL-86951)
  - De-clutter syslog from CTRL-EVENT-SIGNAL-CHANGE messages (RHEL-71344)


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


