# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-160.el10]
changelog:
  - smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128582]
  - smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128582]
  - smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128582]
  - smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128582]
  - cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128582]
  - smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128582]
  - smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128582]
  - smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128582]
  - smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128582]
  - smb: client: remove pointless cfid->has_lease check (Paulo Alcantara) [RHEL-128582]
  - smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128582]
  - smb: client: update cfid->last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128582]
  - smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128582]
  - smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128582]
  - smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128582]
  - smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128582]
  - smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128582]
  - smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128582]
  - smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128582]
  - redhat/configs: Enable CONFIG_EFI_SECRET for aarch64 (Gavin Shan) [RHEL-128093]
  - arm64: acpi: Enable ACPI CCEL support (Gavin Shan) [RHEL-128093]
  - arm64: Enable EFI secret area Securityfs support (Gavin Shan) [RHEL-128093]
  - arm64: realm: ioremap: Allow mapping memory as encrypted (Gavin Shan) [RHEL-128093]
  - time/timecounter: Fix the lie that struct cyclecounter is const (Ivan Vecera) [RHEL-122644]
  - ethtool: Don't check for RXFH fields conflict when no input_xfrm is requested (Ivan Vecera) [RHEL-122638]
  - net: ethtool: don't mux RXFH via rxnfc callbacks (Ivan Vecera) [RHEL-122638]
  - eth: hns3: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: hinic: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: nfp: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: mlx5: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: qede: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: benet: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: sfc: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: sfc: siena: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: sfc: falcon: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: sxgbe: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: dpaa2: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: dpaa: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: niu: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: otx2: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: thunder: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: ena: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: bnxt: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: bnx2x: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: iavf: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: ice: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: i40e: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: fm10k: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: ixgbe: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: igc: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: igb: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: e1000e: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: lan743x: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: cxgb4: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: cisco: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: gianfar: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - net: drv: hyperv: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - net: drv: virtio: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - net: drv: vmxnet3: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-122638]
  - eth: remove empty RXFH handling from drivers (Ivan Vecera) [RHEL-122638]
  - net: ethtool: add dedicated callbacks for getting and setting rxfh fields (Ivan Vecera) [RHEL-122638]
  - net: ethtool: require drivers to opt into the per-RSS ctx RXFH (Ivan Vecera) [RHEL-122638]
  - net: ethtool: remove the duplicated handling from rxfh and rxnfc (Ivan Vecera) [RHEL-122638]
  - net: ethtool: copy the rxfh flow handling (Ivan Vecera) [RHEL-122638]
  - drm/i915: Avoid open-coded use of ratelimit_state structure's ->missed field (Anusha Srivatsa) [RHEL-114532]
  - drm/i915/ggtt: Add intel_ggtt_read_entry() (Anusha Srivatsa) [RHEL-114532]
  - drm/amd/pm: Avoid open-coded use of ratelimit_state structure's internals (Anusha Srivatsa) [RHEL-114532]
  - agp/intel-gtt: Add intel_gmch_gtt_read_entry() (Anusha Srivatsa) [RHEL-114532]
  - elf: add remaining SHF_ flag macros (Anusha Srivatsa) [RHEL-114532]
  - random: Avoid open-coded use of ratelimit_state structure's ->missed field (Anusha Srivatsa) [RHEL-114532]
  - ratelimit: Convert the ->missed field to atomic_t (Anusha Srivatsa) [RHEL-114532]
  - ratelimit: Create functions to handle ratelimit_state internals (Anusha Srivatsa) [RHEL-114532]
  - bits: introduce fixed-type BIT_U*() (Anusha Srivatsa) [RHEL-114532]
  - compiler.h: add const_true() (Anusha Srivatsa) [RHEL-114532]
  - bits: introduce fixed-type GENMASK_U*() (Anusha Srivatsa) [RHEL-114532]
  - firmware: sysfb: Move bpp-depth calculation into screen_info helper (Anusha Srivatsa) [RHEL-114532]
  - drm/sysfb: Add efidrm for EFI displays (Anusha Srivatsa) [RHEL-114532]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-161.el10]
changelog:
  - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-115965]
  - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-115965]
  - redhat/configs: enable CONFIG_NFSD_V4_2_INTER_SSC in RHEL (Scott Mayhew) [RHEL-126556]
  - dpll: add phase-adjust-gran pin attribute (Petr Oros) [RHEL-126529]
  - dpll: fix device-id-get and pin-id-get to return errors properly (Petr Oros) [RHEL-126529]
  - dpll: spec: add missing module-name and clock-id to pin-get reply (Petr Oros) [RHEL-126529]
  - dpll: add phase_offset_avg_factor_get/set callback ops (Petr Oros) [RHEL-126529]
  - dpll: add phase-offset-avg-factor device attribute to netlink spec (Petr Oros) [RHEL-126529]
  - dpll: fix clock quality level reporting (Petr Oros) [RHEL-126529]
  - dpll: add reference sync get/set (Petr Oros) [RHEL-126529]
  - dpll: add reference-sync netlink attribute (Petr Oros) [RHEL-126529]
  - dpll: remove documentation of rclk_dev_name (Petr Oros) [RHEL-126529]
  - scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-124946]
  - scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-124946]
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-124946]
  - scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-124946]
  - selftests/bpf: Fix arena_spin_lock selftest failure (iqian) [RHEL-113809]
  - arm64: cpufeature: add AmpereOne to BBML2 allow list (Marcin Juszkiewicz) [RHEL-122955]
  - arm64: cpufeature: Add Olympus MIDR to BBML2 allow list (Marcin Juszkiewicz) [RHEL-122955]
  - arm64: cputype: Add NVIDIA Olympus definitions (Marcin Juszkiewicz) [RHEL-122955]
  - arm64/mm: Elide tlbi in contpte_convert() under BBML2 (Marcin Juszkiewicz) [RHEL-122955]
  - iommu/arm: Add BBM Level 2 smmu feature (Marcin Juszkiewicz) [RHEL-122955]
  - idpf: set mac type when adding and removing MAC filters (Michal Schmidt) [RHEL-121482 RHEL-121948]
  - selftests: livepatch: test if ftrace can trace a livepatched function (Rado Vrbovsky) [RHEL-114915]
  - selftests: livepatch: add new ftrace helpers functions (Rado Vrbovsky) [RHEL-114915]
  - samples/livepatch: add module descriptions (Rado Vrbovsky) [RHEL-114915]
  - selftest/livepatch: Only run test-kprobe with CONFIG_KPROBES_ON_FTRACE (Rado Vrbovsky) [RHEL-114915]
  - docs: livepatch: move text out of code block (Rado Vrbovsky) [RHEL-114915]
  - livepatch: Add comment to clarify klp_add_nops() (Rado Vrbovsky) [RHEL-114915]
  - gpio: mlxbf3: use platform_get_irq_optional() (David Thompson) [RHEL-103570]
  - redhat/configs: Add new configs from DRM 6.16 backport (Anusha Srivatsa) [RHEL-114533]
  - Merge DRM changes from upstream v6.15.5..v6.16 (Anusha Srivatsa) [RHEL-114533]
  - ALSA: update RHEL kconfigs for 6.16 upstream code (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: Allow Focusrite devices to use low samplerates (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: tas2781: reorder tas2563 calibration variables (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: tas2781: fix tas2563 EFI data endianness (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: Intel: WCL: Add the sdw_process_wakeen op (Jaroslav Kysela) [RHEL-112757]
  - ASoC: rsnd: tidyup direction name on rsnd_dai_connect() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/tas2781: Fix EFI name for calibration beginning with 1 instead of 0 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: soc-core: tidyup snd_soc_lookup_component_nolocked() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: soc-core: care NULL dirver name on snd_soc_lookup_component_nolocked() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs35l56: Remove SoundWire Clock Divider workaround for CS35L63 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs35l56: Handle new algorithms IDs for CS35L63 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs35l56: Update Firmware Addresses for CS35L63 for production silicon (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (Jaroslav Kysela) [RHEL-112757] {CVE-2025-39696}
  - ALSA: usb-audio: qcom: Adjust mutex unlock order (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SDCA: correct the calculation of the maximum init table size (Jaroslav Kysela) [RHEL-112757]
  - ASoC: rt5650: Eliminate the high frequency glitch (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: Intel: PTL: Add the sdw_process_wakeen op (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa0xxx (Jaroslav Kysela) [RHEL-112757]
  - ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv (Jaroslav Kysela) [RHEL-112757] {CVE-2025-38662}
  - ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: soc-acpi: add support for HP Omen14 ARL (Jaroslav Kysela) [RHEL-112757]
  - ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/cs35l56: Workaround bad dev-index on Lenovo Yoga Book 9i GenX (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/realtek: Support mute LED for Yoga with ALC287 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: fix SND_SOC_SOF dependencies (Jaroslav Kysela) [RHEL-112757]
  - ASoC: rt5660: Fix the dmic data source from GPIO2 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Fix NULL ptr deref on rmmod (Jaroslav Kysela) [RHEL-112757]
  - ASoC: amd: yc: add DMI quirk for ASUS M6501RM (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/realtek: Enable headset Mic on Positivo K116J (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/tas2781: Fix calibration data parser issue (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/realtek: Add quirk for ASUS ExpertBook B9403CVAR (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: Improve filtering of sample rates on Focusrite devices (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb: qcom: fix NULL pointer dereference in qmi_stop_session (Jaroslav Kysela) [RHEL-112757]
  - ALSA: qc_audio_offload: Fix missing error code in prepare_qmi_response() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: qcom: sm8250: Fix possibly undefined reference (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/realtek: Enable headset Mic on Positivo P15X (Jaroslav Kysela) [RHEL-112757]
  - ASoC: doc: cs35l56: Add CS35L63 to the list of supported devices (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: imx8: add core shutdown operation for imx8/imx8x (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/realtek: Add quirk for Asus GA605K (Jaroslav Kysela) [RHEL-112757]
  - ASoC: apple: mca: Drop default ARCH_APPLE in Kconfig (Jaroslav Kysela) [RHEL-112757]
  - ASoC: doc: cs35l56: Update to add new SoundWire firmware filename suffix (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs35l56: Use SoundWire address as alternate firmware suffix on L56 B0 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs35l56: Use SoundWire address as firmware name suffix for new silicon (Jaroslav Kysela) [RHEL-112757]
  - ASoC: sdw_utils: Fix potential NULL pointer deref in is_sdca_endpoint_present() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: ctxfi: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112757]
  - ASOC: rockchip: Use helper function devm_clk_get_enabled() (Jaroslav Kysela) [RHEL-112757]
  - ASOC: rockchip: fix capture stream handling in rockchip_sai_xfer_stop (Jaroslav Kysela) [RHEL-112757]
  - ASoC: loongson: Fix build warnings about export.h (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: ES8326: Modify initialization configuration (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs48l32: Fix a signedness bug in cs48l32_hw_params() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Fix rt5663 front end name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Simplify verification of parse_int_array() result (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: cs35l41: Constify regmap_irq_chip (Jaroslav Kysela) [RHEL-112757]
  - ASoC: pcm: Do not open FEs with no BEs connected (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Include missing string.h (Jaroslav Kysela) [RHEL-112757]
  - ASoC: amd: yc: Add support for Lenovo Yoga 7 16ARP8 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: qcom,sm8250: Add Fairphone 5 sound card (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tas571x: fix tas5733 num_controls (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tas571x: add separate tas5733 controls (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: fix out-of-bounds access on invalid clock config (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: qcom: fix USB_XHCI dependency (Jaroslav Kysela) [RHEL-112757]
  - ASoC: qdsp6: fix compile-testing without CONFIG_OF (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: add support for ES8375 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: Add Everest ES8375 audio CODEC (Jaroslav Kysela) [RHEL-112757]
  - ALSA: atmel: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: wm_adsp: Make cirrus_dir const (Jaroslav Kysela) [RHEL-112757]
  - dt-bindings: ASoC: Document Tegra264 APE support (Jaroslav Kysela) [RHEL-112757]
  - dt-bindings: ASoC: admaif: Add missing properties (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: audio-graph-card2: reference audio-graph routing property (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/tas2781: Move and unified the calibrated-data getting function for SPI and I2C into the tas2781_hda lib (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/tegra: Switch to two-argument strscpy() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: qc_audio_offload: try to reduce address space confusion (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: audio-graph-card2: add missing mic-det-gpios (Jaroslav Kysela) [RHEL-112757]
  - ALSA: qc_audio_offload: avoid leaking xfer_buf allocation (Jaroslav Kysela) [RHEL-112757]
  - ALSA: qc_audio_offload: rename dma/iova/va/cpu/phys variables (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: qcom: Fix an error handling path in qc_usb_audio_probe() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/cs35l41_hda: select FW_CS_DSP (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: sof_sdw: Add support for wclrvp & ocelot in WCL platform (Jaroslav Kysela) [RHEL-112757]
  - ALSA: amd7930: replace strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: soc-acpi-intel-mtl-match: Add match for CDB35L63-CB2 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: intel: sof_sdw: Add support for CS35L63 into machine driver (Jaroslav Kysela) [RHEL-112757]
  - PCI: Add Intel Wildcat Lake audio Device ID (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: hda-intel: add Wildcat Lake support (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: intel-dsp-config: Add WCL support (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: Intel: add initial support for WCL (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: add HDMI codec ID for Intel WCL (Jaroslav Kysela) [RHEL-112757]
  - ALSA: dbri: replace strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: n64: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: qcom: sc8280xp: Add sound card support for QCS9100 and QCS9075 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: qcom,sm8250: Add QCS9100 and QCS9075 sound card (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tas2781: Header file cleanup and Move the macro definitions to fwlib (Jaroslav Kysela) [RHEL-112757]
  - ASoC: rt722: make regmap cache-only in probe (Jaroslav Kysela) [RHEL-112757]
  - ASoC: fsl_xcvr: update platform driver name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: soc-utils: Check string pointer validity in snd_soc_dlc_is_dummy() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb: fcp: Use USB API functions rather than constants (Jaroslav Kysela) [RHEL-112757]
  - ALSA: scarlett2: Use USB API functions rather than constants (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: Rename Pioneer mixer channel controls (Jaroslav Kysela) [RHEL-112757]
  - dt-bindings: Document Tegra264 HDA Support (Jaroslav Kysela) [RHEL-112757]
  - dt-bindings: Update Tegra194 and Tegra234 HDA bindings (Jaroslav Kysela) [RHEL-112757]
  - ASoC: mediatek: mt8183-afe-pcm: shorten mt8183_is_volatile_reg() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: mediatek: mt8183-afe-pcm: Shorten irq_data table using macros (Jaroslav Kysela) [RHEL-112757]
  - ASoC: mediatek: mt8183-afe-pcm: Shorten memif_data table using macros (Jaroslav Kysela) [RHEL-112757]
  - ASoC: q6apm-lpass-dais: Print APM port id in decimal on enable error (Jaroslav Kysela) [RHEL-112757]
  - ASoC: amd: use new ACP dev names for DAI links (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: mediatek: Simplify mediatek,clk-provider (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: Intel: hda: Set the mic_privacy flag for soundwire with ACE3+ (Jaroslav Kysela) [RHEL-112757]
  - soundwire: intel: Add awareness of ACE3+ microphone privacy (Jaroslav Kysela) [RHEL-112757]
  - soundwire: bus: Add internal slave ID and use for IRQs (Jaroslav Kysela) [RHEL-112757]
  - soundwire: bus: Simplify sdw_assign_device_num() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: Add Everest ES8389 audio CODEC (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: add support for ES8389 (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: cs35l56: Log tuning unique identifiers during firmware load (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs35l56: Log tuning unique identifiers during firmware load (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tlv320aic3x: Use dev_err_probe (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/tas2781: Fix the ld issue reported by kernel test robot (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/tas2781: Fix the symbol was not declare warning reported by kernel test robot (Jaroslav Kysela) [RHEL-112757]
  - ALSA: sb: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: soc-core: merge snd_soc_unregister_component() and snd_soc_unregister_component_by_driver() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: msnd: Remove midi code (Jaroslav Kysela) [RHEL-112757]
  - ALSA: intel-hdmi-audio: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: wavefront: remove snd_wavefront_xxx() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: isa/gus: remove snd_gf1_lfo_xxx() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: intel-nhlt: Print errors in intel_nhlt_ssp_device_type() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: soc.h: remove unnecessary definitions (Jaroslav Kysela) [RHEL-112757]
  - ASoC: soc.h: remove snd_soc_disconnect_sync() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: atom: Remove unused functions (Jaroslav Kysela) [RHEL-112757]
  - ASoC: rt712-sdca: remove redundant else path of if statement (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: rt9123: Fix sparse cast warning (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb: mixer_us16x08: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb: mixer_quirks: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: pci: ali5451: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: pci: asihpi: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: pci: au88x0: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb: mixer: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb: midi: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: pci: hda: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: virtio: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: core: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: i2c: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: sh: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: gus: Remove deadcode (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/tas2781: Create an independent lib to save the shared parts for both SPI and I2C driver (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: Remove unused snd_hdac_stream_get_spbmaxfifo (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: Remove unused snd_hda_add_nid (Jaroslav Kysela) [RHEL-112757]
  - ASoC: rt712-sdca: remove redundant else path of if statement (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Add rt713_vb_l3_rt1320_l3 support (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: soc-acpi-intel-lnl/ptl-match: Simplify variable name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tas2781: Add a debugfs node for acoustic tuning (Jaroslav Kysela) [RHEL-112757]
  - ASoC: amd: sof_amd_sdw: add logic to get cpu_pin_id for ACP7.0/ACP7.1 platforms (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Sort ACPI link/machine tables (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: cs42l52: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: cs42l52: Drop cs42l52.h (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: cs42l52: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: cs42l73: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: cs42l73: Drop cs42l73.h (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: cs42l73: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: cs42l56: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: cs42l56: Drop cs42l56.h (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: cs42l56: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: add disable_function_topology module parameter (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: set disable_function_topology if override_tplg_filename is set (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: add disable_function_topology flag (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs35l56: Read Silicon ID from DIE_STS registers for CS35L63 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs35l56: Add initial support for CS35L63 for I2C and SoundWire (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs35l56: Add Mute, Volume and Posture registers to firmware register list (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs35l56: Add struct to index firmware registers (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs35l56: Add Index based on ACPI HID or SDW ID to select regmap config (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: imx8m: Use reset controller API to control the DSP (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: sof_sdw: Avoid NULL check fail when re-probing (Jaroslav Kysela) [RHEL-112757]
  - ASoC: sdw_utils: Remove num_platforms from simple DAI helper (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/tas2781: select CONFIG_CRC8 for SND_HDA_SCODEC_TAS2781_I2C (Jaroslav Kysela) [RHEL-112757]
  - ALSA: core: Remove unused snd_jack_set_parent (Jaroslav Kysela) [RHEL-112757]
  - ALSA: core: Remove unused snd_device_get_state (Jaroslav Kysela) [RHEL-112757]
  - ALSA: seq: Remove unused snd_seq_queue_client_leave_cells (Jaroslav Kysela) [RHEL-112757]
  - ALSA: pcm: Remove unused snd_dmaengine_pcm_open_request_chan (Jaroslav Kysela) [RHEL-112757]
  - ALSA: pcm: Remove unused snd_pcm_rate_range_to_bits (Jaroslav Kysela) [RHEL-112757]
  - ASoC: intel: atom: Return -ENOMEM if pcim_iomap() fails (Jaroslav Kysela) [RHEL-112757]
  - ASoC: intel: atom: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ASoC: intel: avs: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ASoC: sof: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: amd: add build support for soundwire (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: amd: add soundwire wake irq handling (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: amd: enable soundwire host wake irq mask (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: amd: refactor acp reset sequence (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: amd: enable ACP_PME_EN register for ACP7.0 & ACP7.1 platforms (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: amd: update soundwire specific acp descriptor fields (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: amd: add ACP7.1 platform support (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: amd: remove else condition in resume sequence (Jaroslav Kysela) [RHEL-112757]
  - ASoC: fsl_rpmsg: Allocate a smaller buffer size for capture stream (Jaroslav Kysela) [RHEL-112757]
  - ASoC: fsl_rpmsg: Configure CPU DAI for card that sits on rpmsg-micfil-channel (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: tas2764: Fix Wvoid-pointer-to-enum-cast warning (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: wsa88xx/wcd938x: Drop kerneldoc marker from inner comment (Jaroslav Kysela) [RHEL-112757]
  - ASoC: mediatek: mt8195: use snd_soc_dlc_is_dummy() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: mediatek: mt8188: use snd_soc_dlc_is_dummy() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: soc-utils: add snd_soc_dlc_is_dummy() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: sma1307: Remove including of_gpio.h (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: twl4030: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: twl4030: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/tas2781: Remove tas2781_spi_fwlib.c and leverage SND_SOC_TAS2781_FMWLIB (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/cs35l56: Remove dependency on COMPILE_TEST (Jaroslav Kysela) [RHEL-112757]
  - ASoC: wm_adsp: Don't use no_free_ptr() when passing to PTR_ERR() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: Use min() to simplify aw_dev_dsp_update_container() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: topology: Fix null pointer dereference (Jaroslav Kysela) [RHEL-112757]
  - ASoC: amd: acp: Drop superfluous assignment in acp_sof_probe() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: korg1212: Replace the pending stop check code with sync_stop PCM ops (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/hda_cs_dsp_ctl: Delete hda_cs_dsp_ctl module (Jaroslav Kysela) [RHEL-112757]
  - ASoC: renesas: add MSIOF sound support (Jaroslav Kysela) [RHEL-112757]
  - ASoC: renesas: rsnd: enable to use "adg" clock (Jaroslav Kysela) [RHEL-112757]
  - ASoC: renesas: rsnd: care BRGA/BRGB select in rsnd_adg_clk_enable() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: renesas: rsnd: allow to use ADG as standalone (Jaroslav Kysela) [RHEL-112757]
  - dt-bindings: renesas,sh-msiof: Add MSIOF I2S Sound support (Jaroslav Kysela) [RHEL-112757]
  - ASoC: starfive: Use max() to simplify code in jh7110_tdm_syncdiv() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: fsl: don't set link->platform if not needed (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Fix NULL pointer dereference (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: wcd938x: drop unnecessary mux flag assignment (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: wcd938x: fix mux error handling (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: tpa6130a2: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: tpa6130a2: Remove tpa6130a2_platform_data (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: tpa6130a2: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112757]
  - ALSA: maestro3: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: ali5451: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: ca0106: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: cs46xx: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: cs5535: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: echoaudio: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: emu10k1: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: ice: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: nm256: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: riptide: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: ymfpci: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: rme9652: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: trident: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: vx222: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: lx6464es: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: oxygen: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: als: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: azt3328: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: es19x8: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: fm801: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: intel8x: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: sis7019: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: via82: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: cmipci: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: ens1370: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: rme32: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: rme96: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: sonicvibes: Use pure devres PCI (Jaroslav Kysela) [RHEL-112757]
  - ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support (Jaroslav Kysela) [RHEL-112757]
  - ASoC: adau7118: Allow dsp_a mode (Jaroslav Kysela) [RHEL-112757]
  - ASoC: rockchip: add Serial Audio Interface (SAI) driver (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: add schema for rockchip SAI controllers (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: fsl,mqs: Document audio graph port (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: Add Pioneer DJ DJM-V10 support (Jaroslav Kysela) [RHEL-112757]
  - ALSA: pcm: Make snd_pcm_lib_malloc_pages() debug message say "allocate" (Jaroslav Kysela) [RHEL-112757]
  - ASoC: wm8998: Add Kconfig prompt (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: Remove unused rt566[58]_sel_asrc_clk_src (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs48l32: Use modern PM_OPS (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: mt8195: add missing audio routing and link-name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: mt8195: add compatible mt8195_mt6359 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: mediatek: mt8195: Add mt8195-mt6359 card (Jaroslav Kysela) [RHEL-112757]
  - ASoC: mediatek: mt8195: Move rt5682 specific dapm routes (Jaroslav Kysela) [RHEL-112757]
  - firmware: cs_dsp: Add some sanity-checking to test harness (Jaroslav Kysela) [RHEL-112757]
  - ASoC: rt722: fix pop noise at the beginning of DMIC recording (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs48l32: Fix spelling mistake "exceeeds" -> "exceeds" (Jaroslav Kysela) [RHEL-112757]
  - ASoC: fsl_rpmsg: Remove useless return variable (Jaroslav Kysela) [RHEL-112757]
  - ASoC: ak4458: Remove useless return variable (Jaroslav Kysela) [RHEL-112757]
  - ASoC: rt722: fix pop noise at the beginning of headphone playback (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs-amp-lib-test: Use faux bus instead of creating a dummy platform device (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/tas2781: Create a common header for both spi and i2c tas2781 hda driver (Jaroslav Kysela) [RHEL-112757]
  - ASoC: qcom: qdsp6: Set error code in q6usb_hw_params() (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: qcom: delete a stray tab (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda/cirrus_scodec_test: Modernize creation of dummy devices (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs-amp-lib-test: Use flex_array_size() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs48l32: Add driver for Cirrus Logic CS48L32 audio DSP (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: Add Cirrus Logic CS48L32 audio DSP (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs-amp-lib: Annotate struct cirrus_amp_efi_data with __counted_by() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: cs-amp-lib: Replace offsetof() with struct_size() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: rsnd: use snd_pcm_direction_name() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: soc_sdw_utils: skip the endpoint that doesn't present (Jaroslav Kysela) [RHEL-112757]
  - ASoC: sdw_utils: split asoc_sdw_get_codec_name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: soc-acpi-intel-mtl-match: add get_function_tplg_files ops (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add get_function_tplg_files ops (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: soc-acpi-intel-lnl-match: set get_function_tplg_files ops (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: topology: load multiple topologies (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: topology: don't convert error code (Jaroslav Kysela) [RHEL-112757]
  - ASoC: SOF: topology: allocate string for tuples (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: Add support for Richtek rt9123p (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: Add bindings for Richtek rt9123p (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: Add support for Richtek rt9123 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: Add bindings for Richtek rt9123 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tas2764: expose die temp to hwmon (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tas2770: expose die temp to hwmon (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tas2764: Apply Apple quirks (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tas2764: Raise regmap range maximum (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tas2770: Support setting the PDM TX slot (Jaroslav Kysela) [RHEL-112757]
  - ASoC: ac97: Add DT support (Jaroslav Kysela) [RHEL-112757]
  - ASoC: loongson: Add Loongson-1 AC97 Driver (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: Add Realtek ALC203 Codec (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: Add Loongson-1 AC97 Controller (Jaroslav Kysela) [RHEL-112757]
  - ASoC: test-component: add set_tdm_slot stub implementation (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: qcom: Notify USB audio devices on USB offload probing (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: qcom: Add USB offload route kcontrol (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: qcom: Don't allow USB offload path if PCM device is in use (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: qcom: Introduce QC USB SND offloading support (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: qcom: Add USB QMI definitions (Jaroslav Kysela) [RHEL-112757]
  - ASoC: qcom: qdsp6: Fetch USB offload mapped card and PCM device (Jaroslav Kysela) [RHEL-112757]
  - ASoC: qcom: qdsp6: Add headphone jack for offload connection status (Jaroslav Kysela) [RHEL-112757]
  - ASoC: qcom: qdsp6: Add USB backend ASoC driver for Q6 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: qcom: qdsp6: q6afe: Increase APR timeout (Jaroslav Kysela) [RHEL-112757]
  - ASoC: qcom: qdsp6: Introduce USB AFE port to q6dsp (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: Update example for enabling USB offload on SM8250 (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: qcom,q6dsp-lpass-ports: Add USB_RX port (Jaroslav Kysela) [RHEL-112757]
  - ASoC: usb: Fetch ASoC card and pcm device information (Jaroslav Kysela) [RHEL-112757]
  - ASoC: doc: Add documentation for SOC USB (Jaroslav Kysela) [RHEL-112757]
  - ASoC: usb: Rediscover USB SND devices on USB port add (Jaroslav Kysela) [RHEL-112757]
  - ASoC: usb: Create SOC USB SND jack kcontrol (Jaroslav Kysela) [RHEL-112757]
  - ASoC: usb: Add PCM format check API for USB backend (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Add SoC USB APIs for adding an USB backend (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: Allow for rediscovery of connected USB SND devices (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: Prevent starting of audio stream if in use (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: Save UAC sample size information (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: Introduce USB SND platform op callbacks (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: Check for support for requested audio format (Jaroslav Kysela) [RHEL-112757]
  - ALSA: usb-audio: Export USB SND APIs for modules (Jaroslav Kysela) [RHEL-112757]
  - ALSA: Add USB audio device jack type (Jaroslav Kysela) [RHEL-112757]
  - ASoC: wm_adsp: Use vmemdup_user() instead of open-coding (Jaroslav Kysela) [RHEL-112757]
  - ALSA: cs46xx: Remove commented out code (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tas2781-i2c: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: wm_adsp: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: pcm6240: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: tas2781-fmwlib: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: ak5386: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Support 16 TDMs in dynamic assignment (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Iterate over correct number of TDMs (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Assign unique ID to platform devices (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Allow to specify custom configurations with i2s_test (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Allow for 16 channels configuration (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Rename AVS_CHANNELS_MAX define (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: Allow for 16 channels configuration (Jaroslav Kysela) [RHEL-112757]
  - lib/string_helpers: Introduce parse_int_array() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change ssm4567 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change rt5682 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change rt5663 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change rt5514 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change rt298 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change rt286 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change rt274 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change probe card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change pcm3168a card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change nau8825 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change max98927 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change max98373 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change max98357a card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change sspX-loopback card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change hdaudio card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change es8336 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change DMIC card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Change da7219 card name (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Use topology information for endpoint numbers (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: boards: Add Kconfig option for obsolete card names (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda: Select avs-driver by default on FCL (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Add boards definitions for FCL platform (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Conditionally add DMA config when creating Copier (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Dynamically assign ops for non-HDAudio DAIs (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: PTL-based platforms support (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hdspm: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112757]
  - ALSA: lola: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112757]
  - ALSA: cs5530: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112757]
  - ALSA: hda_intel: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112757]
  - ALSA: cs4281: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112757]
  - ALSA: bt87x: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112757]
  - ALSA: aw2: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112757]
  - ALSA: au88x0: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112757]
  - ALSA: atiixp: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112757]
  - ALSA: ad1889: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112757]
  - ASoC: sta32x: Remove unnecessary NULL check before clk_disable_unprepare() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: hdmi-codec: wire up the .prepare callback also for SPDIF DAI ops (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: rt5677: Use secs_to_jiffies() instead of msecs_to_jiffies() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: Remove unused SND_SOC_INTEL_DA7219_MAX98357A_GENERIC (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: fsl,mqs: Reference common DAI properties (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: maxim,max98925: Fix include placement in DTS example (Jaroslav Kysela) [RHEL-112757]
  - ASoC: loongson: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112757]
  - ASoC: sun8i-codec: Remove unnecessary NULL check before clk_prepare_enable/clk_disable_unprepare (Jaroslav Kysela) [RHEL-112757]
  - ASoC: Intel: avs: Permit deferred card registration (Jaroslav Kysela) [RHEL-112757]
  - ASoC: core: Complete support for card rebinding (Jaroslav Kysela) [RHEL-112757]
  - ASoC: stm: stm32_sai: Use dev_err_probe() (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: wcd938x: add mux control support for hp audio mux (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: wcd93xx: add bindings for audio mux controlling hp (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codecs: wcd-mbhc: cleanup swap_gnd_mic api (Jaroslav Kysela) [RHEL-112757]
  - ASoC: fsl_sai: separate set_tdm_slot() for tx and rx (Jaroslav Kysela) [RHEL-112757]
  - ASoC: fsl_sai: separate 'is_dsp_mode' for tx and rx (Jaroslav Kysela) [RHEL-112757]
  - ASoC: fsl_sai: add xlate_tdm_slot_mask() callback (Jaroslav Kysela) [RHEL-112757]
  - ASoC: fsl_sai: allow to set mclk rate with zero clk_id (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: wcd938x: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112757]
  - ASoC: codec: wcd939x: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: audio-graph-card2: add widgets and hp-det-gpios support (Jaroslav Kysela) [RHEL-112757]
  - ASoC: dt-bindings: support imx95's CM7 core (Jaroslav Kysela) [RHEL-112757]
  - kunit: platform: Resolve 'struct completion' warning (Jaroslav Kysela) [RHEL-112757]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-162.el10]
changelog:
  - dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-123203]
  - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129200]
  - net/mlx5: fs, fix UAF in flow counter release (CKI Backport Bot) [RHEL-124434] {CVE-2025-39979}
  - cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120561] {CVE-2025-38737}
  - redhat/configs: automotive: enable I2C_IMX and dependencies (Jared Kangas) [RHEL-116101]
  - i2c: imx: use guard to take spinlock (Jared Kangas) [RHEL-116101]
  - i2c: imx: fix emulated smbus block read (Jared Kangas) [RHEL-116101]
  - i2c: imx: add some dev_err_probe calls (Jared Kangas) [RHEL-116101]
  - i2c: imx: support DMA defer probing (Jared Kangas) [RHEL-116101]
  - i2c: imx: switch different pinctrl state in different system power status (Jared Kangas) [RHEL-116101]
  - i2c: imx: add imx7d compatible string for applying erratum ERR007805 (Jared Kangas) [RHEL-116101]
  - i2c: imx: fix missing stop condition in single-master mode (Jared Kangas) [RHEL-116101]
  - i2c: imx: make controller available until system suspend_noirq() and from resume_noirq() (Jared Kangas) [RHEL-116101]
  - i2c: imx: fix divide by zero warning (Jared Kangas) [RHEL-116101]
  - i2c: imx: add support for S32G2/S32G3 SoCs (Jared Kangas) [RHEL-116101]
  - dt-bindings: i2c: imx: add SoC specific compatible strings for S32G (Jared Kangas) [RHEL-116101]
  - i2c: imx: prevent rescheduling in non dma mode (Jared Kangas) [RHEL-116101]
  - i2c: imx: separate atomic, dma and non-dma use case (Jared Kangas) [RHEL-116101]
  - i2c: imx: do not poll for bus busy in single master mode (Jared Kangas) [RHEL-116101]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-163.el10]
changelog:
  - rseq/selftests: Use weak symbol reference, not definition, to link with glibc (Gavin Shan) [RHEL-128766]
  - rseq/selftests: Fix namespace collision with rseq UAPI header (Gavin Shan) [RHEL-128766]
  - rseq/selftests: Ensure the rseq ABI TLS is actually 1024 bytes (Gavin Shan) [RHEL-128766]
  - selftests/rseq: Add rseq syscall errors test (Gavin Shan) [RHEL-128766]
  - rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm (Gavin Shan) [RHEL-128766]
  - selftests/rseq: Fix handling of glibc without rseq support (Gavin Shan) [RHEL-128766]
  - rseq/selftests: Add support for OpenRISC (Gavin Shan) [RHEL-128766]
  - kernel: extend rh_waived to cope better with the CVE mitigations case (Ricardo Robaina) [RHEL-122980]
  - octeon_ep_vf: Add support to retrieve hardware channel information (Kamal Heib) [RHEL-118599]
  - octeon_ep: Add support to retrieve hardware channel information (Kamal Heib) [RHEL-118599]
  - futex: Optimize per-cpu reference counting (Waiman Long) [RHEL-101509]
  - futex: Don't leak robust_list pointer on exec race (Waiman Long) [RHEL-101509]
  - selftest/futex: Compile also with libnuma < 2.0.16 (Waiman Long) [RHEL-101509]
  - selftest/futex: Reintroduce "Memory out of range" numa_mpol's subtest (Waiman Long) [RHEL-101509]
  - selftest/futex: Make the error check more precise for futex_numa_mpol (Waiman Long) [RHEL-101509]
  - selftests/futex: Fix futex_wait() for 32bit ARM (Waiman Long) [RHEL-101509]
  - futex: Use correct exit on failure from futex_hash_allocate_default() (Waiman Long) [RHEL-101509]
  - futex: Prevent use-after-free during requeue-PI (Waiman Long) [RHEL-101509]
  - selftests/futex: Fix typos and grammar in futex_priv_hash (Waiman Long) [RHEL-101509]
  - selftests/futex: Fix format-security warnings in futex_priv_hash (Waiman Long) [RHEL-101509]
  - selftests/futex: Fix some futex_numa_mpol subtests (Waiman Long) [RHEL-101509]
  - selftests/futex: Remove the -g parameter from futex_priv_hash (Waiman Long) [RHEL-101509]
  - futex: Move futex_hash_free() back to __mmput() (Waiman Long) [RHEL-101509]
  - futex: Move futex cleanup to __mmdrop() (Waiman Long) [RHEL-101509]
  - futex: Use user_write_access_begin/_end() in futex_put_value() (Waiman Long) [RHEL-101509]
  - selftests/futex: Fix spelling mistake "Succeffuly" -> "Successfully" (Waiman Long) [RHEL-101509]
  - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (Waiman Long) [RHEL-101509]
  - perf bench futex: Remove support for IMMUTABLE (Waiman Long) [RHEL-101509]
  - selftests/futex: Remove support for IMMUTABLE (Waiman Long) [RHEL-101509]
  - futex: Remove support for IMMUTABLE (Waiman Long) [RHEL-101509]
  - futex: Make futex_private_hash_get() static (Waiman Long) [RHEL-101509]
  - futex: Use RCU-based per-CPU reference counting instead of rcuref_t (Waiman Long) [RHEL-101509]
  - selftests/futex: Adapt the private hash test to RCU related changes (Waiman Long) [RHEL-101509]
  - perf bench futex: Fix prctl include in musl libc (Waiman Long) [RHEL-101509]
  - selftests/futex: Add futex_numa to .gitignore (Waiman Long) [RHEL-101509]
  - futex: Temporary disable FUTEX_PRIVATE_HASH (Waiman Long) [RHEL-101509]
  - futex: Initialize futex_phash_new during fork(). (Waiman Long) [RHEL-101509]
  - futex: Verify under the lock if hash can be replaced (Waiman Long) [RHEL-101509]
  - futex: Handle invalid node numbers supplied by user (Waiman Long) [RHEL-101509]
  - selftests/futex: Set the home_node in futex_numa_mpol (Waiman Long) [RHEL-101509]
  - selftests/futex: getopt() requires int as return value. (Waiman Long) [RHEL-101509]
  - tools headers UAPI: Sync linux/prctl.h with the kernel sources to pick FUTEX knob (Waiman Long) [RHEL-101509]
  - io_uring/futex: mark wait requests as inflight (Waiman Long) [RHEL-101509]
  - selftests/futex: Fix spelling mistake "unitiliazed" -> "uninitialized" (Waiman Long) [RHEL-101509]
  - futex: Correct the kernedoc return value for futex_wait_setup(). (Waiman Long) [RHEL-101509]
  - tools headers: Synchronize prctl.h ABI header (Waiman Long) [RHEL-101509]
  - futex: Use RCU_INIT_POINTER() in futex_mm_init(). (Waiman Long) [RHEL-101509]
  - selftests/futex: Use TAP output in futex_numa_mpol (Waiman Long) [RHEL-101509]
  - selftests/futex: Use TAP output in futex_priv_hash (Waiman Long) [RHEL-101509]
  - futex: Fix kernel-doc comments (Waiman Long) [RHEL-101509]
  - futex: Relax the rcu_assign_pointer() assignment of mm->futex_phash in futex_mm_init() (Waiman Long) [RHEL-101509]
  - futex: Fix outdated comment in struct restart_block (Waiman Long) [RHEL-101509]
  - futex,selftests: Add another FUTEX2_NUMA selftest (Waiman Long) [RHEL-101509]
  - selftests/futex: Add futex_numa_mpol (Waiman Long) [RHEL-101509]
  - selftests/futex: Add futex_priv_hash (Waiman Long) [RHEL-101509]
  - selftests/futex: Build without headers nonsense (Waiman Long) [RHEL-101509]
  - tools/perf: Allow to select the number of hash buckets (Waiman Long) [RHEL-101509]
  - tools headers: Synchronize prctl.h ABI header (Waiman Long) [RHEL-101509]
  - futex: Implement FUTEX2_MPOL (Waiman Long) [RHEL-101509]
  - futex: Implement FUTEX2_NUMA (Waiman Long) [RHEL-101509]
  - futex: Allow to make the private hash immutable (Waiman Long) [RHEL-101509]
  - futex: Allow to resize the private local hash (Waiman Long) [RHEL-101509]
  - futex: Allow automatic allocation of process wide futex hash (Waiman Long) [RHEL-101509]
  - futex: Add basic infrastructure for local task local hash (Waiman Long) [RHEL-101509]
  - futex: Create helper function to initialize a hash slot (Waiman Long) [RHEL-101509]
  - futex: Introduce futex_q_lockptr_lock() (Waiman Long) [RHEL-101509]
  - futex: Decrease the waiter count before the unlock operation (Waiman Long) [RHEL-101509]
  - futex: Acquire a hash reference in futex_wait_multiple_setup() (Waiman Long) [RHEL-101509]
  - futex: Create private_hash() get/put class (Waiman Long) [RHEL-101509]
  - futex: Create futex_hash() get/put class (Waiman Long) [RHEL-101509]
  - futex: Create hb scopes (Waiman Long) [RHEL-101509]
  - futex: Pull futex_hash() out of futex_q_lock() (Waiman Long) [RHEL-101509]
  - futex: Move futex_queue() into futex_wait_setup() (Waiman Long) [RHEL-101509]
  - mm: Add vmalloc_huge_node() (Waiman Long) [RHEL-101509]
  - rcuref: Provide rcuref_is_dead() (Waiman Long) [RHEL-101509]
  - futex: Use a hashmask instead of hashsize (Waiman Long) [RHEL-101509]
  - rcuref: Plug slowpath race in rcuref_put() (Waiman Long) [RHEL-101509]
  - futex: Pass in task to futex_queue() (Waiman Long) [RHEL-101509]
  - seqlock: add missing parameter documentation for raw_seqcount_try_begin() (Waiman Long) [RHEL-101509]
  - mm: introduce mmap_lock_speculate_{try_begin|retry} (Waiman Long) [RHEL-101509]
  - mm: convert mm_lock_seq to a proper seqcount (Waiman Long) [RHEL-101509]
  - seqlock: add raw_seqcount_try_begin (Waiman Long) [RHEL-101509]
  - sched/wake_q: Add helper to call wake_up_q after unlock with preemption disabled (Waiman Long) [RHEL-101509]
  - locking/rtmutex: Make sure we wake anything on the wake_q when we release the lock->wait_lock (Waiman Long) [RHEL-101509]
  - locking: rtmutex: Fix wake_q logic in task_blocks_on_rt_mutex (Waiman Long) [RHEL-101509]
  - locking/mutex: Make mutex::wait_lock irq safe (Waiman Long) [RHEL-101509]
  - locking/mutex: Remove wakeups from under mutex::wait_lock (Waiman Long) [RHEL-101509]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-164.el10]
changelog:
  - selftest: packetdrill: Import client-ack-dropped-then-recovery-ms-timestamps.pkt (CKI Backport Bot) [RHEL-124166]
  - selftest: packetdrill: Import sockopt-fastopen-key.pkt (CKI Backport Bot) [RHEL-124166]
  - selftest: packetdrill: Import opt34/*-trigger-rst.pkt. (CKI Backport Bot) [RHEL-124166]
  - selftest: packetdrill: Import opt34/reset-* tests. (CKI Backport Bot) [RHEL-124166]
  - selftest: packetdrill: Import opt34/icmp-before-accept.pkt. (CKI Backport Bot) [RHEL-124166]
  - selftest: packetdrill: Import opt34/fin-close-socket.pkt. (CKI Backport Bot) [RHEL-124166]
  - selftest: packetdrill: Add test for experimental option. (CKI Backport Bot) [RHEL-124166]
  - selftest: packetdrill: Add test for TFO_SERVER_WO_SOCKOPT1. (CKI Backport Bot) [RHEL-124166]
  - selftest: packetdrill: Import TFO server basic tests. (CKI Backport Bot) [RHEL-124166]
  - selftest: packetdrill: Define common TCP Fast Open cookie. (CKI Backport Bot) [RHEL-124166]
  - selftest: packetdrill: Require explicit setsockopt(TCP_FASTOPEN). (CKI Backport Bot) [RHEL-124166]
  - selftest: packetdrill: Set ktap_set_plan properly for single protocol test. (CKI Backport Bot) [RHEL-124166]
  - selftests/net: packetdrill: Support single protocol test. (CKI Backport Bot) [RHEL-124166]
  - selftests: net: packetdrill: xfail all problems on slow machines (CKI Backport Bot) [RHEL-124166]
  - selftests/net: packetdrill: add --mss option to three tests (CKI Backport Bot) [RHEL-124166]
  - selftests/net: packetdrill: more xfail changes (CKI Backport Bot) [RHEL-124166]
  - KVM: arm64: vgic-v3: Release reserved slot outside of lpi_xa's lock (Donald Dutile) [RHEL-115972]
  - Revert "KVM: arm64: Split kvm_pgtable_stage2_destroy()" (Donald Dutile) [RHEL-115972]
  - Revert "KVM: arm64: Reschedule as needed when destroying the stage-2 page-tables" (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic: fix incorrect spinlock API usage (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Remove stage 2 read fault check (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Fix parameter ordering for VBAR_EL1 assignment (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Fix incorrect VNCR invalidation range calculation (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-v3: Reinstate IRQ lock ordering for LPI xarray (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-v3: Indicate vgic_put_irq() may take LPI xarray lock (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-v3: Don't require IRQs be disabled for LPI xarray lock (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-v3: Erase LPIs from xarray outside of raw spinlocks (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Spin off release helper from vgic_put_irq() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-v3: Use bare refcount for VGIC LPIs (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic: Drop stale comment on IRQ active state (Donald Dutile) [RHEL-115972]
  - KVM: arm64: VHE: Save and restore host MDCR_EL2 value correctly (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Guard PMSCR_EL1 initialization with SPE presence check (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Initialize PMSCR_EL1 when in VHE (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: fix VNCR TLB ASID match logic for non-Global entries (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Mark freed S2 MMUs as invalid (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Fix ATS12 handling of single-stage translation (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Remove __vcpu_{read,write}_sys_reg_{from,to}_cpu() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Fix vcpu_{read,write}_sys_reg() accessors (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Simplify sysreg access on exception delivery (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the 32bit state (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Sync ID_AA64MMFR3_EL1 in set_id_regs (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Get rid of ARM64_FEATURE_MASK() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Make ID_AA64PFR1_EL1.RAS_frac writable (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Make ID_AA64PFR0_EL1.RAS writable (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Ignore HCR_EL2.FIEN set by L1 guest's EL2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Handle RASv1p1 registers (Donald Dutile) [RHEL-115972]
  - arm64: Add capability denoting FEAT_RASv1p1 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Reschedule as needed when destroying the stage-2 page-tables (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Split kvm_pgtable_stage2_destroy() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Correctly populate FAR_EL2 on nested SEA injection (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftest: Add standalone test checking for KVM's own UUID (Donald Dutile) [RHEL-115972]
  - arm64: vgic-v2: Fix guest endianness check in hVHE mode (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Sync protected guest VBAR_EL1 on injecting an undef exception (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Handle AIDR_EL1 and REVIDR_EL1 in host for protected VMs (Donald Dutile) [RHEL-115972]
  - kvm: arm64: use BUG() instead of BUG_ON(1) (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Handle SEAs due to VNCR redirection (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Properly check ESR_EL2.VNCR on taking a VNCR_EL2 related fault (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Don't attempt vLPI mappings when vPE allocation is disabled (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Add FEAT_RAS EL2 registers to get-reg-list (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Add test for nASSGIcap attribute (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-v3: Allow userspace to write GICD_TYPER2.nASSGIcap (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-v3: Allow access to GICD_IIDR prior to initialization (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-v3: Consolidate MAINT_IRQ handling (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Disambiguate support for vSGIs v. vLPIs (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftest: vgic-v3: Add basic GICv3 sysreg userspace access test (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Enforce the sorting of the GICv3 system register table (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Clarify the check for reset callback in check_sysreg_table() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-v3: Fix ordering of ICH_HCR_EL2 (Donald Dutile) [RHEL-115972]
  - arm64: kvm: trace_handle_exit: use string choices helper (Donald Dutile) [RHEL-115972]
  - arm64: kvm: sys_regs: use string choices helper (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Follow specification when implementing WXN (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Remove the wi->{e0,}poe vs wr->{p,u}ov confusion (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-its: Return -ENXIO to invalid KVM_DEV_ARM_VGIC_GRP_CTRL attrs (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Make RAS registers UNDEF when RAS isn't advertised (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Tighten the definition of FEAT_PMUv3p9 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Convert MDCR_EL2 to config-driven sanitisation (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Convert SCTLR_EL1 to config-driven sanitisation (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Convert TCR2_EL2 to config-driven sanitisation (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: get-reg-list: Add base EL2 registers (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: get-reg-list: Simplify feature dependency (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Advertise FGT2 registers to userspace (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Condition FGT registers on feature availability (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Expose GICv3 EL2 registers via KVM_DEV_ARM_VGIC_GRP_CPU_SYSREGS (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Let GICv3 save/restore honor visibility attribute (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Define helper for ICH_VTR_EL2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Define constant value for ICC_SRE_EL2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Don't advertise ICH_*_EL2 registers through GET_ONE_REG (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Make RVBAR_EL2 accesses UNDEF (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Commit exceptions from KVM_SET_VCPU_EVENTS immediately (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Test ESR propagation for vSError injection (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Populate ESR_ELx.EC for emulated SError injection (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Fix enforcement of upper bound on MDCR_EL2.HPMN (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Catch up set_id_regs with the kernel (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Add SCTLR2_EL1 to get-reg-list (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Test SEAs are taken to SError vector when EASE=1 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Add basic SError injection test (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Don't retire MMIO instruction w/ pending (emulated) SError (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Advertise support for FEAT_DoubleFault2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Advertise support for FEAT_SCTLR2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Enable vSErrors when HCRX_EL2.TMEA is set (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Honor SError routing effects of SCTLR2_ELx.NMEA (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Take "masked" aborts to EL2 when HCRX_EL2.TMEA is set (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Route SEAs to the SError vector when EASE is set (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Ensure Address size faults affect correct ESR (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Factor out helper for selecting exception target EL (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Describe SCTLR2_ELx RESx masks (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Enable SCTLR2 when advertised to the guest (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Context switch SCTLR2_ELx when advertised to the guest (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Wire up SCTLR2_ELx sysreg descriptors (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Describe trap behavior of SCTLR2_EL1 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Advertise support for FEAT_RAS (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Use guest hypervisor's vSError state (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Add FEAT_RAS vSError sys regs to table (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Honor SError exception routing / masking (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Respect exception routing rules for SEAs (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Treat vCPU with pending SError as runnable (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add helper to identify a nested context (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nvhe: Disable branch generation in nVHE guests (Donald Dutile) [RHEL-115972]
  - KVM: selftests: Change MDSCR_EL1 register holding variables as uint64_t (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Remove kvm_arch_vcpu_run_map_fp() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Fix handling of FEAT_GTG for unimplemented granule sizes (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Expose MTE_STORE_ONLY feature to guest (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Expose FEAT_MTE_TAGGED_FAR feature to guest (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Don't free hyp pages with pKVM on GICv2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Fix error path in init_hyp_mode() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Adjust range correctly during host stage-2 faults (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Fix MI line level calculation in vgic_v3_nested_update_mi() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: VHE: Centralize ISBs when returning to host (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Remove cpacr_clear_set() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Remove ad-hoc CPTR manipulation from kvm_hyp_handle_fpsimd() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Remove ad-hoc CPTR manipulation from fpsimd_sve_sync() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Reorganise CPTR trap manipulation (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Close the GIC FD in arch_timer_edge_cases (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Fix tracking of shadow list registers (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Make __vcpu_sys_reg() a pure rvalue operand (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Don't use __vcpu_sys_reg() to get the address of a sysreg (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add RMW specific sysreg accessor (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add assignment-specific sysreg accessor (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-debug: Avoid dereferencing NULL ITE pointer (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Mask out non-VA bits from TLBI VA* on VNCR invalidation (Donald Dutile) [RHEL-115972]
  - arm64: kvm, smccc: Fix vendor uuid (Donald Dutile) [RHEL-115972]
  - arm64: kvm, smccc: Introduce and use API for getting hypervisor UUID (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Fix documentation for vgic_its_iter_next() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: np-guest CMOs with PMD_SIZE fixmap (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Stage-2 huge mappings for np-guests (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add a range to pkvm_mappings (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Convert pkvm_mappings to interval tree (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add a range to __pkvm_host_test_clear_young_guest() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Fix debug checking for np-guests using huge mappings (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add a range to __pkvm_host_wrprotect_guest() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add a range to __pkvm_host_unshare_guest() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add a range to __pkvm_host_share_guest() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Introduce for_each_hyp_page (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Handle huge mappings for np-guest CMOs (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Release faulted-in VNCR page from mmu_lock critical section (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Handle TLBI S1E2 for VNCR invalidation with mmu_lock held (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Hold mmu_lock when invalidating VNCR SW-TLB before translating (Donald Dutile) [RHEL-115972]
  - KVM: arm64: vgic-its: Add debugfs interface to expose ITS tables (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Remove dead code from ERET handling (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Plumb TLBI S1E2 into system instruction dispatch (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Add S1 TLB invalidation primitive for VNCR_EL2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Program host's VNCR_EL2 to the fixmap address (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Handle VNCR_EL2 invalidation from MMU notifiers (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Handle mapping of VNCR_EL2 at EL2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Handle VNCR_EL2-triggered faults (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Add userspace and guest handling of VNCR_EL2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Add pseudo-TLB backing VNCR_EL2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Don't adjust PSTATE.M when L2 is nesting (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Move TLBI range decoding to a helper (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Snapshot S1 ASID tagging information during walk (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Extract translation helper from the AT code (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Allocate VNCR page when required (Donald Dutile) [RHEL-115972]
  - arm64: Update comment regarding values in __boot_cpu_mode (Donald Dutile) [RHEL-115972]
  - KVM: arm64: nv: Remove clearing of ICH_LR<n>.EOI if ICH_LR<n>.HW == 1 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Don't feed uninitialised data to HCR_EL2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Teach address translation about access faults (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Fix PAR_EL1.{PTW,S} reporting on AT S1E* (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Handle TSB CSYNC traps (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add FGT descriptors for FEAT_FGT2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Allow sysreg ranges for FGT descriptors (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add context-switch for FEAT_FGT2 registers (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add trap routing for FEAT_FGT2 registers (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add sanitisation for FEAT_FGT2 registers (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add FEAT_FGT2 registers to the VNCR page (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Use HCR_EL2 feature map to drive fixed-value bits (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Use HCRX_EL2 feature map to drive fixed-value bits (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Allow kvm_has_feat() to take variable arguments (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Use FGT feature maps to drive RES0 bits (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Validate FGT register descriptions against RES0 masks (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Switch to table-driven FGU configuration (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Handle PSB CSYNC traps (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Use KVM-specific HCRX_EL2 RES0 mask (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Remove hand-crafted masks for FGT registers (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Use computed FGT masks to setup FGT registers (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Propagate FGT masks to the nVHE hypervisor (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Unconditionally configure fine-grain traps (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Use computed masks as sanitisers for FGT registers (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add description of FGT bits leading to EC!=0x18 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Compute FGT masks from KVM's own FGT tables (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Plug FEAT_GCS handling (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Don't treat HCRX_EL2 as a FGT register (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Restrict ACCDATA_EL1 undef to FEAT_LS64_ACCDATA being disabled (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Handle trapping of FEAT_LS64* instructions (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Simplify handling of negative FGT bits (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Tighten handling of unknown FGT groups (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Extend pKVM selftest for np-guests (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Selftest for pKVM transitions (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Don't WARN from __pkvm_host_share_guest() (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Add .hyp.data section (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Add test for SVE host corruption (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Replace ternary flags with str_on_off() helper (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Unconditionally cross check hyp state (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Defer EL2 stage-1 mapping on share (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Move hyp state to hyp_vmemmap (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Introduce {get,set}_host_state() helpers (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Use 0b11 for encoding PKVM_NOPAGE (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Fix pKVM page-tracking comments (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Track SVE state in the hypervisor vcpu structure (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Let kvm_vcpu_read_pmcr() return an EL-dependent value for PMCR_EL0.N (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Handle out-of-bound write to MDCR_EL2.HPMN (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Don't let userspace write to PMCR_EL0.N when the vcpu has EL2 (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Contextualise the handling of PMCR_EL0.P writes (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Fix MDCR_EL2.HPMN reset value (Donald Dutile) [RHEL-115972]
  - KVM: arm64: Repaint pmcr_n into nr_pmu_counters (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Explicitly set the page attrs to Inner-Shareable (Donald Dutile) [RHEL-115972]
  - KVM: arm64: selftests: Introduce and use hardware-definition macros (Donald Dutile) [RHEL-115972]
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125760]
  - selftests: openvswitch: add a simple test for tunnel metadata (Adrian Moreno) [RHEL-115600]
  - net: openvswitch: Use for_each_cpu() where appropriate (Adrian Moreno) [RHEL-115600]
  - net: openvswitch: fix kernel-doc warnings in internal headers (Adrian Moreno) [RHEL-115600]
  - Revert "openvswitch: switch to per-action label counting in conntrack" (Adrian Moreno) [RHEL-115600]
  - redhat/kernel.spec.template: add net/can kselftests (Davide Caratti) [RHEL-118603]
  - selftests: can: enable CONFIG_CAN_VCAN as a module (Davide Caratti) [RHEL-118603]
  - selftests: can: test_raw_filter.sh: add support of physical interfaces (Davide Caratti) [RHEL-118603]
  - selftests: can: Import tst-filter from can-tests (Davide Caratti) [RHEL-118603]
  - net/hsr: add protocol version to fill_info output (Jan Vaclav) [RHEL-119342]
  - net/hsr: add interlink to fill_info output (Jan Vaclav) [RHEL-119342]
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.89.0 (Rado Vrbovsky) [RHEL-114914]
  - objtool: Add missing endian conversion to read_annotate() (Rado Vrbovsky) [RHEL-114914]
  - objtool/rust: relax slice condition to cover more `noreturn` Rust functions (Rado Vrbovsky) [RHEL-114914]
  - x86/its: FineIBT-paranoid vs ITS (objtool only) (Rado Vrbovsky) [RHEL-114914]
  - kernfs: remove iattr_mutex (Jerome Marchand) [RHEL-78204]
  - bpf: add get_netns_cookie helper to cgroup_skb programs (Jerome Marchand) [RHEL-78204]
  - bpf: add get_netns_cookie helper to tc programs (Jerome Marchand) [RHEL-78204]
  - Revert "mm/page_alloc: Fix try_alloc_pages" (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add test for BPF_NEG alu on CONST_PTR_TO_MAP (Jerome Marchand) [RHEL-78204]
  - bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: trigger verifier.c:maybe_exit_scc() for a speculative state (Jerome Marchand) [RHEL-78204]
  - bpf: dont report verifier bug for missing bpf_scc_visit on speculative path (Jerome Marchand) [RHEL-78204]
  - bpf: Allow fall back to interpreter for programs with stack size <= 512 (Jerome Marchand) [RHEL-78204]
  - bpf: Update the list of BPF selftests maintainers (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add tests for bpf_strnstr (Jerome Marchand) [RHEL-78204]
  - bpf: Fix bpf_strnstr() to handle suffix match cases better (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Fix "expression result unused" warnings with icecc (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Extend crypto_sanity selftest with invalid dst buffer (Jerome Marchand) [RHEL-78204]
  - bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (Jerome Marchand) [RHEL-78204]
  - bpf: Check the helper function is valid in get_helper_proto (Jerome Marchand) [RHEL-78204]
  - bpf: Fix memory leak of bpf_scc_info objects (Jerome Marchand) [RHEL-78204]
  - bpf: Improve ctx access verifier error message (Jerome Marchand) [RHEL-78204]
  - libbpf: Avoid possible use of uninitialized mod_len (Jerome Marchand) [RHEL-78204]
  - bpf: Fix oob access in cgroup local storage (Jerome Marchand) [RHEL-78204]
  - bpf: Move cgroup iterator helpers to bpf.h (Jerome Marchand) [RHEL-78204]
  - bpf: Move bpf map owner out of common struct (Jerome Marchand) [RHEL-78204]
  - bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps (Jerome Marchand) [RHEL-78204]
  - bpf: Add cookie object to bpf maps (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Migrate fexit_noreturns case into tracing_failure test suite (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add selftest for attaching tracing programs to functions in deny list (Jerome Marchand) [RHEL-78204]
  - bpf: Add log for attaching tracing programs to functions in deny list (Jerome Marchand) [RHEL-78204]
  - bpf: Show precise rejected function when attaching fexit/fmod_ret to __noreturn functions (Jerome Marchand) [RHEL-78204]
  - bpf: Fix various typos in verifier.c comments (Jerome Marchand) [RHEL-78204]
  - bpf: Add third round of bounds deduction (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Test invariants on JSLT crossing sign (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Test cross-sign 64bits range refinement (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Update reg_bound range refinement logic (Jerome Marchand) [RHEL-78204]
  - bpf: Improve bounds when s64 crosses sign boundary (Jerome Marchand) [RHEL-78204]
  - powerpc64/bpf: Add jit support for load_acquire and store_release (Jerome Marchand) [RHEL-78204]
  - bpf: Simplify bounds refinement from s32 (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Enable private stack tests for arm64 (Jerome Marchand) [RHEL-78204]
  - bpf, arm64: JIT support for private stack (Jerome Marchand) [RHEL-78204]
  - bpf: Move bpf_jit_get_prog_name() to core.c (Jerome Marchand) [RHEL-78204]
  - bpf, arm64: Fix fp initialization for exception boundary (Jerome Marchand) [RHEL-78204]
  - umd: Remove usermode driver framework (Jerome Marchand) [RHEL-78204]
  - bpf/preload: Don't select USERMODE_DRIVER (Jerome Marchand) [RHEL-78204]
  - bpf: Use ERR_CAST instead of ERR_PTR(PTR_ERR(...)) (Jerome Marchand) [RHEL-78204]
  - libbpf: Verify that arena map exists when adding arena relocations (Jerome Marchand) [RHEL-78204]
  - libbpf: Fix warning in calloc() usage (Jerome Marchand) [RHEL-78204]
  - bpf/selftests: Add selftests for token info (Jerome Marchand) [RHEL-78204]
  - bpf: Add struct bpf_token_info (Jerome Marchand) [RHEL-78204]
  - libbpf: start v1.7 dev cycle (Jerome Marchand) [RHEL-78204]
  - bpf: Clean up individual BTF_ID code (Jerome Marchand) [RHEL-78204]
  - bpf: Update iterators.lskel-big-endian.h (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: enable tracing_struct tests for arm64 (Jerome Marchand) [RHEL-78204]
  - bpf, arm64: remove structs on stack constraint (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Fix build error due to certain uninitialized variables (Jerome Marchand) [RHEL-78204]
  - netkit: Remove location field in netkit_link (Jerome Marchand) [RHEL-78204]
  - bpf: Remove attach_type in bpf_tracing_link (Jerome Marchand) [RHEL-78204]
  - bpf: Remove attach_type in bpf_netns_link (Jerome Marchand) [RHEL-78204]
  - bpf: Remove location field in tcx_link (Jerome Marchand) [RHEL-78204]
  - bpf: Remove attach_type in sockmap_link (Jerome Marchand) [RHEL-78204]
  - bpf: Remove attach_type in bpf_cgroup_link (Jerome Marchand) [RHEL-78204]
  - bpf: Add attach_type field to bpf_link (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Range analysis test case for JSET (Jerome Marchand) [RHEL-78204]
  - bpf: Forget ranges when refining tnum after JSET (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: add selftests for bpf_arena_reserve_pages (Jerome Marchand) [RHEL-78204]
  - bpf/arena: add bpf_arena_reserve_pages kfunc (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Remove enum64 case from __arg_untrusted test suite (Jerome Marchand) [RHEL-78204]
  - bpf: Clean code with bpf_copy_to_user() (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Negative test case for tail call map (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add Spectre v4 tests (Jerome Marchand) [RHEL-78204]
  - bpf: Fix aux usage after do_check_insn() (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Set CONFIG_PACKET=y for selftests (Jerome Marchand) [RHEL-78204]
  - bpf: Fix improper int-to-ptr cast in dump_stack_cb (Jerome Marchand) [RHEL-78204]
  - bpf: Fix bounds for bpf_prog_get_file_line linfo loop (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: tests for __arg_untrusted void * global func params (Jerome Marchand) [RHEL-78204]
  - bpf: support for void/primitive __arg_untrusted global func params (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: test cases for __arg_untrusted (Jerome Marchand) [RHEL-78204]
  - libbpf: __arg_untrusted in bpf_helpers.h (Jerome Marchand) [RHEL-78204]
  - bpf: attribute __arg_untrusted for global function parameters (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: ptr_to_btf_id struct walk ending with primitive pointer (Jerome Marchand) [RHEL-78204]
  - bpf: rdonly_untrusted_mem for btf id walk pointer leafs (Jerome Marchand) [RHEL-78204]
  - bpf: make makr_btf_ld_reg return error for unexpected reg types (Jerome Marchand) [RHEL-78204]
  - bpf: Avoid putting struct bpf_scc_callchain variables on the stack (Jerome Marchand) [RHEL-78204]
  - bpf: Reduce stack frame size by using env->insn_buf for bpf insns (Jerome Marchand) [RHEL-78204]
  - bpf: Simplify assignment to struct bpf_insn pointer in do_misc_fixups() (Jerome Marchand) [RHEL-78204]
  - bpf: Avoid warning on unexpected map for tail call (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add tests for prog streams (Jerome Marchand) [RHEL-78204]
  - bpftool: Add support for dumping streams (Jerome Marchand) [RHEL-78204]
  - libbpf: Introduce bpf_prog_stream_read() API (Jerome Marchand) [RHEL-78204]
  - libbpf: Add bpf_stream_printk() macro (Jerome Marchand) [RHEL-78204]
  - bpf: Report rqspinlock deadlocks/timeout to BPF stderr (Jerome Marchand) [RHEL-78204]
  - bpf: Report may_goto timeout to BPF stderr (Jerome Marchand) [RHEL-78204]
  - bpf: Add dump_stack() analogue to print to BPF stderr (Jerome Marchand) [RHEL-78204]
  - bpf: Add function to find program from stack trace (Jerome Marchand) [RHEL-78204]
  - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (Jerome Marchand) [RHEL-78204]
  - bpf: Add function to extract program source info (Jerome Marchand) [RHEL-78204]
  - bpf: Introduce BPF standard streams (Jerome Marchand) [RHEL-78204]
  - bpf: Refactor bprintf buffer support (Jerome Marchand) [RHEL-78204]
  - bpf: Add show_fdinfo for kprobe_multi (Jerome Marchand) [RHEL-78204]
  - bpf: Add show_fdinfo for uprobe_multi (Jerome Marchand) [RHEL-78204]
  - bpf: Show precise link_type for {uprobe,kprobe}_multi fdinfo (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add test cases for bpf_dynptr_memset() (Jerome Marchand) [RHEL-78204]
  - bpf: Add bpf_dynptr_memset() kfunc (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Allow veristat compile standalone (Jerome Marchand) [RHEL-78204]
  - bpf: Avoid warning on multiple referenced args in call (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Negative test case for ref_obj_id in args (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: null checks for rdonly_untrusted_mem should be preserved (Jerome Marchand) [RHEL-78204]
  - bpf: avoid jump misprediction for PTR_TO_MEM | PTR_UNTRUSTED (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Don't call fsopen() as privileged user (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Fix spelling mistake "subtration" -> "subtraction" (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Enable dynptr/test_probe_read_user_str_dynptr (Jerome Marchand) [RHEL-78204]
  - bpf: Warn on internal verifier errors (Jerome Marchand) [RHEL-78204]
  - s390/bpf: Describe the frame using a struct instead of constants (Jerome Marchand) [RHEL-78204]
  - s390/bpf: Centralize frame offset calculations (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: bpf_rdonly_cast u{8,16,32,64} access tests (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: improve error messages in veristat (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Fix cgroup_xattr/read_cgroupfs_xattr (Jerome Marchand) [RHEL-78204]
  - bpf: guard BTF_ID_FLAGS(bpf_cgroup_read_xattr) with CONFIG_BPF_LSM (Jerome Marchand) [RHEL-78204]
  - bpf: Fix string kfuncs names in doc comments (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Test array presets in veristat (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Support array presets in veristat (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Separate var preset parsing in veristat (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add tests for string kfuncs (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Allow macros in __retval (Jerome Marchand) [RHEL-78204]
  - bpf: Add kfuncs for read-only string operations (Jerome Marchand) [RHEL-78204]
  - uaccess: Define pagefault lock guard (Jerome Marchand) [RHEL-78204]
  - bpf: add btf_type_is_i{32,64} helpers (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: check operations on untrusted ro pointers to mem (Jerome Marchand) [RHEL-78204]
  - bpf: allow void* cast using bpf_rdonly_cast() (Jerome Marchand) [RHEL-78204]
  - bpf: add bpf_features enum (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add tests for BPF_NEG range tracking logic (Jerome Marchand) [RHEL-78204]
  - bpf: Add range tracking for BPF_NEG (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Fix usdt multispec failure with arm64/clang20 selftest build (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add testcases for BPF_ADD and BPF_SUB (Jerome Marchand) [RHEL-78204]
  - bpf, verifier: Improve precision for BPF_ADD and BPF_SUB (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Support ppc64el in vmtest (Jerome Marchand) [RHEL-78204]
  - bpf: Make update_prog_stats() always_inline (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add tests for bpf_cgroup_read_xattr (Jerome Marchand) [RHEL-78204]
  - bpf: Mark cgroup_subsys_state->cgroup RCU safe (Jerome Marchand) [RHEL-78204]
  - bpf: Introduce bpf_cgroup_read_xattr to read xattr of cgroup's node (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add test for bpftool access to read-only protected maps (Jerome Marchand) [RHEL-78204]
  - bpftool: Use appropriate permissions for map access (Jerome Marchand) [RHEL-78204]
  - powerpc/bpf: Fix warning for unused ori31_emitted (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: include limits.h needed for PATH_MAX directly (Jerome Marchand) [RHEL-78204]
  - bpf: Fix key serial argument of bpf_lookup_user_key() (Jerome Marchand) [RHEL-78204]
  - bpf: Get rid of redundant 3rd argument of prepare_seq_file() (Jerome Marchand) [RHEL-78204]
  - bpftool: Fix JSON writer resource leak in version command (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Fix unintentional switch case fall through (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: More precise cpu_mitigations state detection (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Fix RELEASE build failure with gcc14 (Jerome Marchand) [RHEL-78204]
  - bpf: Remove redundant free_verifier_state()/pop_stack() (Jerome Marchand) [RHEL-78204]
  - veristat: Memory accounting for bpf programs (Jerome Marchand) [RHEL-78204]
  - bpf: Include verifier memory allocations in memcg statistics (Jerome Marchand) [RHEL-78204]
  - bpf/veristat: Fix veristat for map type BPF_MAP_TYPE_CGRP_STORAGE (Jerome Marchand) [RHEL-78204]
  - tools/bpf_jit_disasm: Fix potential negative tpath index in get_exec_path() (Jerome Marchand) [RHEL-78204]
  - bpf: Initialize used but uninit variable in propagate_liveness() (Jerome Marchand) [RHEL-78204]
  - docs/bpf: Default cpu version changed from v1 to v3 in llvm 20 (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: tests with a loop state missing read/precision mark (Jerome Marchand) [RHEL-78204]
  - bpf: include backedges in peak_states stat (Jerome Marchand) [RHEL-78204]
  - bpf: remove {update,get}_loop_entry functions (Jerome Marchand) [RHEL-78204]
  - bpf: propagate read/precision marks over state graph backedges (Jerome Marchand) [RHEL-78204]
  - bpf: move REG_LIVE_DONE check to clean_live_states() (Jerome Marchand) [RHEL-78204]
  - bpf: set 'changed' status if propagate_liveness() did any updates (Jerome Marchand) [RHEL-78204]
  - bpf: set 'changed' status if propagate_precision() did any updates (Jerome Marchand) [RHEL-78204]
  - bpf: Fix state use-after-free on push_stack() err (Jerome Marchand) [RHEL-78204]
  - bpf: starting_state parameter for __mark_chain_precision() (Jerome Marchand) [RHEL-78204]
  - bpf: frame_insn_idx() utility function (Jerome Marchand) [RHEL-78204]
  - bpf: compute SCCs in program control flow graph (Jerome Marchand) [RHEL-78204]
  - Revert "bpf: use common instruction history across all states" (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Fix cgroup_mprog_ordering failure due to uninitialized variable (Jerome Marchand) [RHEL-78204]
  - bpf, doc: Improve wording of docs (Jerome Marchand) [RHEL-78204]
  - bpf: adjust path to trace_output sample eBPF program (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add test for Spectre v1 mitigation (Jerome Marchand) [RHEL-78204]
  - bpf: Fall back to nospec for Spectre v1 (Jerome Marchand) [RHEL-78204]
  - bpf: Rename sanitize_stack_spill to nospec_result (Jerome Marchand) [RHEL-78204]
  - bpf, arm64, powerpc: Change nospec to include v1 barrier (Jerome Marchand) [RHEL-78204]
  - bpf, arm64, powerpc: Add bpf_jit_bypass_spec_v1/v4() (Jerome Marchand) [RHEL-78204]
  - bpf: Return -EFAULT on internal errors (Jerome Marchand) [RHEL-78204]
  - bpf: Return -EFAULT on misconfigurations (Jerome Marchand) [RHEL-78204]
  - bpf: Move insn if/else into do_check_insn() (Jerome Marchand) [RHEL-78204]
  - bpf: Add cookie in fdinfo for raw_tp (Jerome Marchand) [RHEL-78204]
  - bpf: Add cookie in fdinfo for tracing (Jerome Marchand) [RHEL-78204]
  - bpftool: Display cookie for tracing link probe (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add cookies check for tracing fill_link_info test (Jerome Marchand) [RHEL-78204]
  - bpf: Add cookie to tracing bpf_link_info (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add test cases with CONST_PTR_TO_MAP null checks (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add cmp_map_pointer_with_const test (Jerome Marchand) [RHEL-78204]
  - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (Jerome Marchand) [RHEL-78204]
  - bpf: Add show_fdinfo for perf_event (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add two selftests for mprog API based cgroup progs (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Move some tc_helpers.h functions to test_progs.h (Jerome Marchand) [RHEL-78204]
  - libbpf: Support link-based cgroup attach with options (Jerome Marchand) [RHEL-78204]
  - bpf: Implement mprog API on top of existing cgroup progs (Jerome Marchand) [RHEL-78204]
  - cgroup: Add bpf prog revisions to struct cgroup_bpf (Jerome Marchand) [RHEL-78204]
  - Documentation: Fix spelling mistake. (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Fix bpf_mod_race test failure with arm64 64KB page size (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: rbtree: Fix incorrect global variable usage (Jerome Marchand) [RHEL-78204]
  - Tests for the ".emit_strings" functionality in the BTF dumper. (Jerome Marchand) [RHEL-78204]
  - libbpf: Add support for printing BTF character arrays as strings (Jerome Marchand) [RHEL-78204]
  - bpf: Clarify sanitize_check_bounds() (Jerome Marchand) [RHEL-78204]
  - libbpf: Correct some typos and syntax issues in usdt doc (Jerome Marchand) [RHEL-78204]
  - bpftool: Display cookie for raw_tp link probe (Jerome Marchand) [RHEL-78204]
  - selftests/bpf: Add cookies check for raw_tp fill_link_info test (Jerome Marchand) [RHEL-78204]
  - bpf: Add cookie to raw_tp bpf_link_info (Jerome Marchand) [RHEL-78204]
  - sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (CKI Backport Bot) [RHEL-118742]
  - sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (CKI Backport Bot) [RHEL-118742]
  - iavf: iavf_suspend(): take RTNL before netdev_lock() (Mohammad Heib) [RHEL-87380]
  - virtio-net: don't re-enable refill work too early when NAPI is disabled (Mohammad Heib) [RHEL-87380]
  - virtio-net: disable delayed refill when pausing rx (Mohammad Heib) [RHEL-87380]
  - virtio_net: Use persistent NAPI config (Mohammad Heib) [RHEL-87380]
  - virtio-net: Map NAPIs to queues (Mohammad Heib) [RHEL-87380]
  - virtio-net: Refactor napi_disable paths (Mohammad Heib) [RHEL-87380]
  - virtio-net: Refactor napi_enable paths (Mohammad Heib) [RHEL-87380]
  - iavf: Fix a locking bug in an error path (Mohammad Heib) [RHEL-87380]
  - iavf: fix circular lock dependency with netdev_lock (Mohammad Heib) [RHEL-87380]
  - wifi: mt76: move napi_enable() from under BH (Mohammad Heib) [RHEL-87380]
  - eth: via-rhine: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87380]
  - eth: niu: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87380]
  - eth: 8139too: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87380]
  - eth: forcedeth: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87380]
  - eth: forcedeth: remove local wrappers for napi enable/disable (Mohammad Heib) [RHEL-87380]
  - eth: tg3: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87380]
  - net: mvneta: fix locking in mvneta_cpu_online() (Mohammad Heib) [RHEL-87380]
  - net: introduce netdev_napi_exit() (Mohammad Heib) [RHEL-87380]
  - net: destroy dev->lock later in free_netdev() (Mohammad Heib) [RHEL-87380]
  - netdev-genl: remove rtnl_lock protection from NAPI ops (Mohammad Heib) [RHEL-87380]
  - net: protect NAPI config fields with netdev_lock() (Mohammad Heib) [RHEL-87380]
  - net: protect napi->irq with netdev_lock() (Mohammad Heib) [RHEL-87380]
  - net: protect threaded status of NAPI with netdev_lock() (Mohammad Heib) [RHEL-87380]
  - net: make netdev netlink ops hold netdev_lock() (Mohammad Heib) [RHEL-87380]
  - net: protect NAPI enablement with netdev_lock() (Mohammad Heib) [RHEL-87380]
  - net: protect netdev->napi_list with netdev_lock() (Mohammad Heib) [RHEL-87380]
  - net: add netdev->up protected by netdev_lock() (Mohammad Heib) [RHEL-87380]
  - net: add helpers for lookup and walking netdevs under netdev_lock() (Mohammad Heib) [RHEL-87380]
  - net: make netdev_lock() protect netdev->reg_state (Mohammad Heib) [RHEL-87380]
  - net: add netdev_lock() / netdev_unlock() helpers (Mohammad Heib) [RHEL-87380]
  - eth: iavf: extend the netdev_lock usage (Mohammad Heib) [RHEL-87380]
  - net: cleanup init_dummy_netdev_core() (Mohammad Heib) [RHEL-87380]
  - net: remove init_dummy_netdev() (Mohammad Heib) [RHEL-87380]
  - selftests: drv-net: test empty queue and NAPI responses in netlink (Mohammad Heib) [RHEL-87380]
  - netdev-genl: avoid empty messages in napi get (Mohammad Heib) [RHEL-87380]
  - netdev-genl: avoid empty messages in queue dump (Mohammad Heib) [RHEL-87380]
  - sctp: initialize more fields in sctp_v6_from_sk() (Xin Long) [RHEL-115593]
  - sctp: mark sctp_do_peeloff static (Xin Long) [RHEL-115593]
  - sctp: Do not wake readers in __sctp_write_space() (Xin Long) [RHEL-115593]
  - sctp: Remove unused sctp_assoc_del_peer and sctp_chunk_iif (Xin Long) [RHEL-115593]
  - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 (David Marlin) [RHEL-118518]
  - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (David Marlin) [RHEL-118518]
  - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-118518] {CVE-2025-39981}
  - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (David Marlin) [RHEL-118518] {CVE-2025-39982}
  - Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (David Marlin) [RHEL-118518] {CVE-2025-39983}
  - Bluetooth: hci_sync: Fix hci_resume_advertising_sync (David Marlin) [RHEL-118518]
  - Bluetooth: Fix build after header cleanup (David Marlin) [RHEL-118518]
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (David Marlin) [RHEL-118518] {CVE-2025-39860}
  - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early (David Marlin) [RHEL-118518] {CVE-2025-39861}
  - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-118518]
  - Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced (David Marlin) [RHEL-118518]
  - Bluetooth: hci_event: Mark connection as closed during suspend disconnect (David Marlin) [RHEL-118518]
  - Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success (David Marlin) [RHEL-118518]
  - Bluetooth: hci_conn: Make unacked packet handling more robust (David Marlin) [RHEL-118518]
  - Bluetooth: btnxpuart: Uses threaded IRQ for host wakeup handling (David Marlin) [RHEL-118518]
  - Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() (David Marlin) [RHEL-118518]
  - Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established (David Marlin) [RHEL-118518]
  - Bluetooth: hci_core: Fix using ll_privacy_capable for current settings (David Marlin) [RHEL-118518]
  - Bluetooth: hci_core: Fix using {cis,bis}_capable for current settings (David Marlin) [RHEL-118518]
  - Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown (David Marlin) [RHEL-118518]
  - Bluetooth: hci_sync: Avoid adding default advertising on startup (David Marlin) [RHEL-118518]
  - Bluetooth: hci_event: Mask data status from LE ext adv reports (David Marlin) [RHEL-118518]
  - Bluetooth: btintel_pcie: Fix Alive Context State Handling (David Marlin) [RHEL-118518]
  - Bluetooth: btintel_pcie: Make driver wait for alive interrupt (David Marlin) [RHEL-118518]
  - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (David Marlin) [RHEL-118518] {CVE-2025-38593}
  - Bluetooth: btusb: Add one more ID 0x28de:0x1401 for Qualcomm WCN6855 (David Marlin) [RHEL-118518]
  - Bluetooth: btusb: Sort WCN6855 device IDs by VID and PID (David Marlin) [RHEL-118518]
  - Bluetooth: btusb: QCA: Support downloading custom-made firmwares (David Marlin) [RHEL-118518]
  - Bluetooth: btnxpuart: Add uevents for FW dump and FW download complete (David Marlin) [RHEL-118518]
  - Bluetooth: btnxpuart: Correct the Independent Reset handling after FW dump (David Marlin) [RHEL-118518]
  - Bluetooth: ISO: Support SCM_TIMESTAMPING for ISO TS (David Marlin) [RHEL-118518]
  - Bluetooth: ISO: add socket option to report packet seqnum via CMSG (David Marlin) [RHEL-118518]
  - Bluetooth: btintel: Define a macro for Intel Reset vendor command (David Marlin) [RHEL-118518]
  - Bluetooth: Fix typos in comments (David Marlin) [RHEL-118518]
  - Bluetooth: RFCOMM: Fix typos in comments (David Marlin) [RHEL-118518]
  - Bluetooth: aosp: Fix typo in comment (David Marlin) [RHEL-118518]
  - Bluetooth: hci_bcm4377: Fix typo in comment (David Marlin) [RHEL-118518]
  - Bluetooth: btrtl: Fix typo in comment (David Marlin) [RHEL-118518]
  - Bluetooth: btmtk: Fix typo in log string (David Marlin) [RHEL-118518]
  - Bluetooth: btintel: Fix typo in comment (David Marlin) [RHEL-118518]
  - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (David Marlin) [RHEL-118518]
  - Bluetooth: btusb: Add RTL8852BE device 0x13d3:0x3618 (David Marlin) [RHEL-118518]
  - Bluetooth: btnxpuart: implement powerup sequence (David Marlin) [RHEL-118518]
  - Bluetooth: Fix spelling mistakes (David Marlin) [RHEL-118518]
  - Bluetooth: btnxpuart: Add support for 4M baudrate (David Marlin) [RHEL-118518]
  - Bluetooth: hci_event: Correct comment about HCI_EV_EXTENDED_INQUIRY_RESULT (David Marlin) [RHEL-118518]
  - Bluetooth: hci_core: Eliminate an unnecessary goto label in hci_find_irk_by_addr() (David Marlin) [RHEL-118518]
  - Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (David Marlin) [RHEL-118518]
  - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (David Marlin) [RHEL-118518]
  - Bluetooth: hci_qca: Enable ISO data packet RX (David Marlin) [RHEL-118518]
  - Bluetooth: btintel_pcie: Add support for device 0x4d76 (David Marlin) [RHEL-118518]
  - Bluetooth: Remove hci_conn_hash_lookup_state() (David Marlin) [RHEL-118518]
  - Bluetooth: btusb: Add a new VID/PID 2c7c/7009 for MT7925 (David Marlin) [RHEL-118518]
  - Bluetooth: btintel_pcie: Reword restart to recovery (David Marlin) [RHEL-118518]
  - Bluetooth: btintel_pcie: Support Function level reset (David Marlin) [RHEL-118518]
  - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID 13d3:3601) (David Marlin) [RHEL-118518]
  - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (David Marlin) [RHEL-118518]
  - selftests/bpf: Fix bpf selftest build warning (Hangbin Liu) [RHEL-123090]
  - doc/netlink: Fix typos in operation attributes (Hangbin Liu) [RHEL-123090]
  - docs: remove cdomain.py (Hangbin Liu) [RHEL-123090]
  - doc: mptcp: fix Netlink specs link (Hangbin Liu) [RHEL-123090]
  - net: sched: uapi: add more sanely named duplicate defines (Hangbin Liu) [RHEL-123090]
  - net: add UAPI to the header guard in various network headers (Hangbin Liu) [RHEL-123090]
  - netlink: specs: ovs_vport: align with C codegen capabilities (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: remove implicit structs from devconf (Hangbin Liu) [RHEL-123090]
  - netlink: specs: remove implicit structs for SNMP counters (Hangbin Liu) [RHEL-123090]
  - netlink: specs: ovs: correct struct names (Hangbin Liu) [RHEL-123090]
  - netlink: specs: nl80211: drop structs which are not uAPI (Hangbin Liu) [RHEL-123090]
  - docs: use parser_yaml extension to handle Netlink specs (Hangbin Liu) [RHEL-123090]
  - docs: conf.py: several coding style fixes (Hangbin Liu) [RHEL-123090]
  - docs: conf.py: properly handle include and exclude patterns (Hangbin Liu) [RHEL-123090]
  - docs: conf.py: drop backward support for old Sphinx versions (Hangbin Liu) [RHEL-123090]
  - docs: changes: update Sphinx minimal version to 3.4.3 (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: support uint in multi-attr (Hangbin Liu) [RHEL-123090]
  - tools: ynl: add ipv4-or-v6 display hint (Hangbin Liu) [RHEL-123090]
  - tools: ynl: decode hex input (Hangbin Liu) [RHEL-123090]
  - tools: ynl: encode indexed-arrays (Hangbin Liu) [RHEL-123090]
  - tools: ynl: move nest packing to a helper function (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: rename TypeArrayNest to TypeIndexedArray (Hangbin Liu) [RHEL-123090]
  - tools: ynl: avoid "use of uninitialized variable" false positive in generated code (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: validate nested arrays (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: avoid repetitive variables definitions (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: refactor local vars for .attr_put() callers (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: add sub-type check (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: generate nested array policies (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: allow overriding name-prefix for constants (Hangbin Liu) [RHEL-123090]
  - netlink: specs: add conntrack dump and stats dump support (Hangbin Liu) [RHEL-123090]
  - netlink: specs: team: avoid mangling multilines doc (Hangbin Liu) [RHEL-123090]
  - tools: ynl: rst: display attribute-set doc (Hangbin Liu) [RHEL-123090]
  - tools: ynl: check for membership with 'not in' (Hangbin Liu) [RHEL-123090]
  - tools: ynl: use 'cond is None' (Hangbin Liu) [RHEL-123090]
  - tools: ynl: remove unnecessary semicolons (Hangbin Liu) [RHEL-123090]
  - tools: ynl: remove unused imports (Hangbin Liu) [RHEL-123090]
  - tools: ynl: remove f-string without any placeholders (Hangbin Liu) [RHEL-123090]
  - tools: ynl: remove assigned but never used variable (Hangbin Liu) [RHEL-123090]
  - tools: ynl: avoid bare except (Hangbin Liu) [RHEL-123090]
  - tools: ynl: fix undefined variable name (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: fix nested array counting (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: use macro for binary min-len check (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: print setters for multi-val attrs (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: print alloc helper for multi-val attrs (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: move free printing to the print_type_full() helper (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: don't add suffix for pure types (Hangbin Liu) [RHEL-123090]
  - tools: ynl: process unknown for enum values (Hangbin Liu) [RHEL-123090]
  - tools: ynl: default to --process-unknown in installed mode (Hangbin Liu) [RHEL-123090]
  - tools: ynl: fix mixing ops and notifications on one socket (Hangbin Liu) [RHEL-123090]
  - docs: parser_yaml.py: add support for line numbers from the parser (Hangbin Liu) [RHEL-123090]
  - docs: sphinx: add a parser for yaml files for Netlink specs (Hangbin Liu) [RHEL-123090]
  - tools: netlink_yml_parser.py: add line numbers to parsed data (Hangbin Liu) [RHEL-123090]
  - tools: ynl_gen_rst.py: drop support for generating index files (Hangbin Liu) [RHEL-123090]
  - tools: ynl_gen_rst.py: cleanup coding style (Hangbin Liu) [RHEL-123090]
  - tools: ynl_gen_rst.py: Split library from command line tool (Hangbin Liu) [RHEL-123090]
  - docs: netlink: netlink-raw.rst: use :ref: instead of :doc: (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: decode ip6gre (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: add missing byte-order properties (Hangbin Liu) [RHEL-123090]
  - tools: ynl: parse extack for sub-messages (Hangbin Liu) [RHEL-123090]
  - tools: ynl: add a sample for TC (Hangbin Liu) [RHEL-123090]
  - netlink: specs: tc: add qdisc dump to TC spec (Hangbin Liu) [RHEL-123090]
  - tools: ynl: enable codegen for TC (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: support weird sub-message formats (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: support local attrs in _multi_parse (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: move fixed header info from RenderInfo to Struct (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: support passing selector to a nest (Hangbin Liu) [RHEL-123090]
  - netlink: specs: tc: drop the family name prefix from attrs (Hangbin Liu) [RHEL-123090]
  - netlink: specs: tc: all actions are indexed arrays (Hangbin Liu) [RHEL-123090]
  - netlink: specs: tc: fix a couple of attribute names (Hangbin Liu) [RHEL-123090]
  - tc: fix typo probabilty in tc.yaml doc (Hangbin Liu) [RHEL-123090]
  - netlink: specs: tc: add C naming info (Hangbin Liu) [RHEL-123090]
  - netlink: specs: tc: use tc-gact instead of tc-gen as struct name (Hangbin Liu) [RHEL-123090]
  - netlink: specs: tc: remove duplicate nests (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: add makefile deps for neigh (Hangbin Liu) [RHEL-123090]
  - tools: ynl: add a sample for rt-link (Hangbin Liu) [RHEL-123090]
  - tools: ynl: enable codegen for all rt- families (Hangbin Liu) [RHEL-123090]
  - tools: ynl: submsg: reverse parse / error reporting (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: submsg: support parsing and rendering sub-messages (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: submsg: render the structs (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: submsg: plumb thru an empty type (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: prepare for submsg structs (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: factor out the annotation of pure nested struct (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: array-nest: support arrays of nests (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: Allow multi-attr without nested-attributes again (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: support struct for binary attributes (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: auto-indent else (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: support sub-type for binary attributes (Hangbin Liu) [RHEL-123090]
  - tools: ynl: handle broken pipe gracefully in CLI (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: move the count into a presence struct too (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: split presence metadata (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: rename basic presence from 'bit' to 'present' (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: validate 0 len strings from kernel (Hangbin Liu) [RHEL-123090]
  - tools: ynl: allow fixed-header to be specified per op (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: don't init enum checks for classic netlink (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: array-nest: support binary array with exact-len (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: array-nest: support put for scalar (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: mutli-attr: support binary types with struct (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: multi-attr: type gen for string (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: support CRUD-like notifications for classic Netlink (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: support using dump types for ntf (Hangbin Liu) [RHEL-123090]
  - tools: ynl: let classic netlink requests specify extra nlflags (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: fill in missing empty attr lists (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: factor out free_needs_iter for a struct (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: fix comment about nested struct dict (Hangbin Liu) [RHEL-123090]
  - tools: ynl: fix typo in info string (Hangbin Liu) [RHEL-123090]
  - tools: ynl: fix the header guard name for OVPN (Hangbin Liu) [RHEL-123090]
  - tools: ynl: add missing header deps (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-rule: add C naming info (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rtnetlink: correct notify properties (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-neigh: make sure getneigh is consistent (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-neigh: add C naming info (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: add notification for newlink (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: make bond's ipv6 address attribute fixed size (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: adjust AF_ nest for C codegen (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: add C naming info (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: remove duplicated group in attr list (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: remove if-netnsid from attr list (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: remove the fixed members from attrs (Hangbin Liu) [RHEL-123090]
  - netlink: specs: allow header properties for attribute sets (Hangbin Liu) [RHEL-123090]
  - tools: ynl: generate code for rt-route and add a sample (Hangbin Liu) [RHEL-123090]
  - tools: ynl: generate code for rt-addr and add a sample (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: use family c-name in notifications (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: consider dump ops without a do "type-consistent" (Hangbin Liu) [RHEL-123090]
  - tools: ynl: don't use genlmsghdr in classic netlink (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: don't consider requests with fixed hdr empty (Hangbin Liu) [RHEL-123090]
  - tools: ynl: support creating non-genl sockets (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-route: add C naming info (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-addr: add C naming info (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-route: remove the fixed members from attrs (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-addr: remove the fixed members from attrs (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-route: specify fixed-header at operations level (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rename rtnetlink specs in accordance with family name (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt_route: pull the ifa- prefix out of the names (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt_addr: pull the ifa- prefix out of the names (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt_addr: fix get multi command name (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt_addr: fix the spec format / schema failures (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-neigh: prefix struct nfmsg members with ndm (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: adjust mctp attribute naming (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rtnetlink: attribute naming corrections (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt-link: add an attr layer around alt-ifname (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: make sure we validate subtype of array-nest (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: individually free previous values on double set (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: move local vars after the opening bracket (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: don't declare loop iterator in place (Hangbin Liu) [RHEL-123090]
  - netlink: specs: Add a spec for FIB rule management (Hangbin Liu) [RHEL-123090]
  - netlink: specs: Add a spec for neighbor tables in rtnetlink (Hangbin Liu) [RHEL-123090]
  - selftests/net: Add selftest for IPv4 RTM_GETMULTICAST support (Hangbin Liu) [RHEL-123090]
  - selftests: net-drv: stats: sanity check netlink dumps (Hangbin Liu) [RHEL-123090]
  - selftests: net-drv: queues: sanity check netlink dumps (Hangbin Liu) [RHEL-123090]
  - selftests: net: support setting recv_size in YNL (Hangbin Liu) [RHEL-123090]
  - netdev: fix repeated netlink messages in queue stats (Hangbin Liu) [RHEL-123090]
  - netdev: fix repeated netlink messages in queue dump (Hangbin Liu) [RHEL-123090]
  - netlink: specs: wireless: add a spec for nl80211 (Hangbin Liu) [RHEL-123090]
  - netlink: specs: add s8, s16 to genetlink schemas (Hangbin Liu) [RHEL-123090]
  - netlink: specs: support nested structs in genetlink legacy (Hangbin Liu) [RHEL-123090]
  - tools/net/ynl: add indexed-array scalar support to ynl-gen-c (Hangbin Liu) [RHEL-123090]
  - tools/net/ynl: sanitise enums with leading digits in ynl-gen-c (Hangbin Liu) [RHEL-123090]
  - tools/net/ynl: add s8, s16 to valid scalars in ynl-gen-c (Hangbin Liu) [RHEL-123090]
  - tools/net/ynl: accept IP string inputs (Hangbin Liu) [RHEL-123090]
  - tools/net/ynl: support rendering C array members to strings (Hangbin Liu) [RHEL-123090]
  - tools/net/ynl: support decoding indexed arrays as enums (Hangbin Liu) [RHEL-123090]
  - tools/net/ynl: remove extraneous plural from variable names (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: support limits using definitions (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: don't output external constants (Hangbin Liu) [RHEL-123090]
  - tools: ynl: c: correct reverse decode of empty attrs (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen-c: improve support for empty nests (Hangbin Liu) [RHEL-123090]
  - netlink: specs: rt_link: decode ip6tnl, vti and vti6 link attrs (Hangbin Liu) [RHEL-123090]
  - tools: ynl: print some information about attribute we can't parse (Hangbin Liu) [RHEL-123090]
  - tools: ynl: correctly handle overrides of fields in subset (Hangbin Liu) [RHEL-123090]
  - tools/net/ynl: fix sub-message key lookup for nested attributes (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen-c: don't require -o argument (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen-c: annotate valid choices for --mode (Hangbin Liu) [RHEL-123090]
  - tools: ynl-gen: allow uapi headers in sub-dirs (Hangbin Liu) [RHEL-123090]
  - tools/net/ynl: add async notification handling (Hangbin Liu) [RHEL-123090]
  - ynl: samples: Fix the wrong format specifier (Hangbin Liu) [RHEL-123090]
  - netlink: add NLA_POLICY_MAX_LEN macro (Hangbin Liu) [RHEL-123090]


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/114901, c++/114903, c++/114974, c++/114994, c++/115114,
  	c++/115139, driver/114980, fortran/114827, fortran/114874,
  	fortran/115039, libstdc++/107800, libstdc++/114866, libstdc++/114891,
  	libstdc++/115015, libstdc++/115063, libstdc++/115119,
  	middle-end/114931, sanitizer/115172, target/69374, target/112959,
  	target/114968, target/114975, target/114981, target/115065,
  	target/115069, tree-optimization/114998, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-5
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/115270, c/114493, c++/105320, c++/114275, c++/114868, c++/114983,
  	c++/115187, fortran/86100, fortran/115150, libstdc++/109849,
  	libstdc++/111641, libstdc++/114940, libstdc++/115099,
  	libstdc++/115269, libstdc++/115335, middle-end/108789,
  	middle-end/115352, modula2/114886, rtl-optimization/114902,
  	rtl-optimization/115038, rtl-optimization/115092, target/113719,
  	target/115169, target/115297, target/115317, target/115324,
  	tree-optimization/115149, tree-optimization/115192,
  	tree-optimization/115197, tree-optimization/115232,
  	tree-optimization/115307, tree-optimization/115337


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114398, ada/114708, c/115290, c++/99678, c++/115239, c++/115283,
  	c++/115378, c++/115511, driver/115440, fortran/83865, jit/115442,
  	libstdc++/114958, libstdc++/115247, libstdc++/115308,
  	rtl-optimization/115281, target/109549, target/111343, target/115253,
  	target/115353, target/115360, tree-optimization/115544
    - fix s390x ICEs with vector permutations from memory (#2293207, #2292501)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs c/114930, c/115502, c/115587, c++/115198, c++/115358, c++/115504,
  	c++/115624, fortran/114019, fortran/115390, libstdc++/115454,
  	libstdc++/115575, libstdc++/115668, target/106069, target/114846,
  	target/115342, target/115355, target/115608, tree-optimization/115278,
  	tree-optimization/115508
  - revert the August 2016 workaround for python bytecode compilation (#2294381)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Jan Kolarik <jkolarik@redhat.com> - 0.72.0-1
changelog:
  - Update to 0.72.0
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474)
  - transaction: Save the reason for installing (RhBug:1733274)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279,2176263)
  - conf: Add limited shell-style variable expansion (RhBug:1789346)
  - conf: Add support for $releasever_major, $releasever_minor (RhBug:1789346)
  - repo: Don't download the repository if the local cache is up to date
  - Allow DNF to be removed by DNF 5 (RhBug:2221907)
  - Include dist-info for python3-libdnf
  - bindings: Load all modules with RTLD_GLOBAL
  - Update translations


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.11-1
changelog:
  - fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Added translation using Weblate (Czech) (pavel.borecki@gmail.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore: Removed getSyspurposeCompliance (jhnidek@redhat.com)
  - chore: Do not call candlepin from GetSyspurposeStatus (jhnidek@redhat.com)
  - chore: Removed SyspurposeComplianceStatusCache (jhnidek@redhat.com)
  - fix: Require findutils in .spec file (jhnidek@redhat.com)
  - feat: Try to cache candlepin server capabilities (jhnidek@redhat.com)
  - solved a conflict in utils.py (jstavel@redhat.com)
  - CCT-744: integration tests for DBus Config object (jstavel@redhat.com)
  - CCT-1029: tests for Register with environment option (jstavel@redhat.com)
  - chore: Small changes in integration-tests/test_syspurpose.py
    (jhnidek@redhat.com)
  - chore: Small fixes in test_register_get_orgs.py (jhnidek@redhat.com)
  - chore: Small fixes of integration-tests/test_register.py (jhnidek@redhat.com)
  - chore: Small tweaks of bash script of integration tests (jhnidek@redhat.com)
  - chore(doc): Improved README.md for integration tests (jhnidek@redhat.com)
  - CCT-743: rebased (jstavel@redhat.com)
  - CCT-1600: fix applied, unified settings.toml to use the same name of
    valid_fields.json (jstavel@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CCT-742: integration tests for DBus Syspurpose object (jstavel@redhat.com)
  - CCT-1029: test for dbus method GetEnvironments (jstavel@redhat.com)
  - CCT-1097: added enable_content for registration tests (jstavel@redhat.com)
  - CCT-745: multi org credentials added (jstavel@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.0-1
changelog:
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - chore: Format register.py (mhorky@redhat.com)
  - feat: Require SCA for registration (mhorky@redhat.com)
  - doc: Update install and testing guide (stomsa@redhat.com)
  - Fixed spec file to list packages twice (suttner@atix.de)
  - code review comments fixes - update metadata and test. (chambrid@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - Collect Azure VM Name and Resource Group Name as a cloud fact.
    (chambrid@redhat.com)
  - fix: Improve wording in redhat.repo template (glutexo@icloud.com)
  - Remove commands moved to syspurpose (glutexo@icloud.com)
  - doc: drop references to "activate" (ptoscano@redhat.com)
  - feat: Remove import command (zpetrace@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Add option to run smoke tests with fake IMDS servers.
    (jhnidek@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat(ci): Update testing matrix (mhorky@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Patsy Griffin <pfrankli@redhat.com> - 6.06-7
changelog:
  - Break up man-pages-additional-20140218.tar.xz (RHEL-101696)
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Jaroslav Rohel <jrohel@redhat.com> - 3.9.0-1
changelog:
  - Update to 3.9.0
  - Add leaves command - List installed packages not required by other installed packages


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Vit Mojzis <vmojzis@redhat.com> - 0.30.0-21
changelog:
  - Improve "help/usage" message (RHEL-38477)
  - libnetlabel: fix a header file guard typo
  - netlabel-config: Fix IPv4/IPv6 addresses parsing in nlbl_reset_unlbl()
  - netlabel: Update man page to clarify SELinux labeling
  - tests: add a basic CALIPSO pass through test
  - doc: fix a typo in the netlabel-config man page


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80811
    Resolves: RHEL-57022
    Resolves: RHEL-24098
    Resolves: RHEL-24097
    Resolves: RHEL-86865


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.9.0-4
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Paul Howarth <paul@city-fan.org> - 1:0.240-1
changelog:
  - Update to 0.240
    - Use Test::More::isnt() instead of Test::More::isn't in tests, which is
      deprecated, as ' isn't allowed as package separator in an upcoming version
      of Perl (GH#13)


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: John Kacur <jkacur@redhat.com> - 0.7.4-1
changelog:
  - Rebase to upstream version 0.7.4
  - Convert to pyproject-based build using pyproject.toml
  - Remove python3-six dependency (no longer needed)
  - Remove distutils patch (no longer needed with pyproject build)
  Resolves: RHEL-114904


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Miro Hrončok <mhroncok@redhat.com> - 2.32.4-1
changelog:
  - Update to 2.32.4
  - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs
  Resolves: RHEL-105460


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-3
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-54012)
  - Fix potential use of uninitialized pgp struct (RHEL-54013)
  - Fix memory leak in rpmsign(8) (RHEL-37564)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Jiri Hnidek <jhnidek@redhat.com> 8-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Various fixes in state management (tomatus777@gmail.com)
  - Upgrade to Patternfly 6 (tomatus777@gmail.com)
  - make eslint happy (tomatus777@gmail.com)
  - test: mock-insights should have /host_exists endpoint (pkoprda@redhat.com)
  - build: switch to esbuild (tomatus777@gmail.com)
  - build: fix installation of sub-man with newer Fedora (ptoscano@redhat.com)
  - refactor: Remove system purpose status (pkoprda@redhat.com)
  - refactor: Display status consistent with subscription-manager
    (pkoprda@redhat.com)
  - refactor: Simplify displaying of installed products (pkoprda@redhat.com)
  - Stop using deprecated translatable for html (jvanderwaa@redhat.com)


author: mhorky <mhorky@redhat.com> 9-1
changelog:
  - remove src/po.js (tomatus777@tomatus.cz)
  - translate placeholder strings (tomatus777@tomatus.cz)
  - index.html: fix import order and make localization work again (tomatus777@tomatus.cz)
  - Fixes: RHEL-111937


author: Pino Toscano <ptoscano@redhat.com> 5-1
changelog:
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2077759: invoke cockpit.translate() after document loading
    (ptoscano@redhat.com)
  - test: Drop outdated copy of packagelib.py (martin@piware.de)
  - Added missing keys to react components (jhnidek@redhat.com)
  - Fix the issue, when it is not possible to install insights-client
    (jhnidek@redhat.com)
  - test: Sync packagelib.py with cockpit main (martin@piware.de)
  - New target and added one project directory to .gitignore (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: mhorky <mhorky@redhat.com> 9-1
changelog:
  - remove src/po.js (tomatus777@tomatus.cz)
  - translate placeholder strings (tomatus777@tomatus.cz)
  - index.html: fix import order and make localization work again (tomatus777@tomatus.cz)
  - Fixes: RHEL-111937

    (tomatus777@tomatus.cz)


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.4-1
changelog:
  - Allow systemd-coredump the sys_chroot capability
  Resolves: RHEL-97586
  - Add the rhcd_rw_fifo_files() interface
  Related: RHEL-99318
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-99318


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.5-1
changelog:
  - Confine nfs-server generator
  Resolves: RHEL-106119
  - Support virtqemud handle hotplug hostdev devices
  Resolves: RHEL-65266
  - Allow virtstoraged create qemu /var/run files
  Resolves: RHEL-104344
  - Allow virtqemud write to sysfs files
  Resolves: RHEL-104378
  - Allow unconfined_domain_type cap2_userns capabilities
  Resolves: RHEL-93656


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.6-1
changelog:
  - Apply generator template to selinux-autorelabel generator
  Resolves: RHEL-107516
  - Allow systemd-coredumpd capabilities in the user namespace
  Resolves: RHEL-97586
  - Allow virtqemud start a vm which uses nbdkit
  Resolves: RHEL-69118
  - Add nbdkit_signal() and nbdkit_signull() interfaces
  Resolves: RHEL-69118
  - Allow openvswitch read virtqemud process state
  Resolves: RHEL-65322
  - Add binsbin-convert.sh script
  Resolves: RHEL-69118


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.7-1
changelog:
  - Revert "Add policy for insights-core"
  Resolves: RHEL-110651
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110651


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.8-1
changelog:
  - Reapply "Add insights_core interfaces"
  Resolves: RHEL-112368
  - Reapply "Add policy for insights-core"
  Resolves: RHEL-112368


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.9-1
changelog:
  - Allow systemd-oomd watch tmpfs dirs
  Resolves: RHEL-106998
  - Allow systemd-oomd watch dbus pid sock files
  Resolves: RHEL-106998
  - Allow userdomain to connect to systemd-oomd over a unix socket
  Resolves: RHEL-106998
  - Allow 'oomctl dump' to interact with systemd-oomd
  Resolves: RHEL-106998
  - Basic functionality for systemd-oomd
  Resolves: RHEL-106998
  - Basic enablement for systemd-oomd
  Resolves: RHEL-106998
  - Remove permissive domains
  Resolves: RHEL-107038
  - Allow iptables manage its private fifo_files in /tmp
  Resolves: RHEL-83775
  - Allow ras-mc-ctl write to sysfs files
  Resolves: RHEL-86926
  - Allow nfs generator create and use netlink sockets
  Resolves: RHEL-111556
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.10-1
changelog:
  - Allow sshd-auth read generic proc files
  Resolves: RHEL-107732
  - Allow sshd-auth read and write user domain ptys
  Resolves: RHEL-107732
  - Allow sshd-session get attributes of sshd vsock socket
  Resolves: RHEL-107732
  - Adjust guest and xguest users policy for sshd-session
  Resolves: RHEL-107732
  - Update files_search_base_file_types()
  Resolves: RHEL-107732
  - Allow sshd-session read cockpit pid files
  Resolves: RHEL-107732
  - Add default contexts for sshd-seesion
  Resolves: RHEL-107732
  - Define types for new openssh executables
  Resolves: RHEL-107732
  - Allow ras-mc-ctl get attributes of the kmod executable
  Resolves: RHEL-102535
  - Define file equivalency for /var/opt
  Resolves: RHEL-116512
  - Update specfile triggers for DSP modules
  Resolves: RHEL-116044


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.11-1
changelog:
  - Allow iotop stream connect to systemd-userdbd
  Resolves: RHEL-105481
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-107589
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-124855
  - Allow nfsidmapd search virt lib directories
  Resolves: RHEL-68722
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.12-1
changelog:
  - Update kernel_secretmem_use()
  Resolves: RHEL-116154
  - Allow system_mail_t read apache system content conditionally
  Resolves: RHEL-114970
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-119619
  - Update specfile trigger for smartmontools
  Resolves: RHEL-113167


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.35-1
changelog:
  - Remove duplicate summary header
  Related: RHEL-87742
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-54019
  - virt: allow QEMU use of the qgs daemon for attestation
  Resolves: RHEL-87742
  - qgs: add contrib module for TDX "qgs" daemon
  Resolves: RHEL-87742
  - kernel: add interfaces for using SGX enclaves
  Resolves: RHEL-87742


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.3-1
changelog:
  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-104069
  - Allow virtqemud handle virt_content_t chr files
  Resolves: RHEL-76104
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-77047
  - All sblim-sfcbd the dac_read_search capability
  Resolves: RHEL-98287
  - Allow sblim domain read systemd session files
  Resolves: RHEL-98287
  - Allow sblim-sfcbd execute dnsdomainname
  Resolves: RHEL-98287
  - Allow systemd-importd create and unlink init pid socket
  Resolves: RHEL-98490


author: Martin Osvald <mosvald@redhat.com> - 2.14.2-1
changelog:
  - sysusers.d: add script and configuration fragments for groups
  - passwd: align 'nologin' shell path with systemd defaults
  - uidgid: assign GID 101 for 'ssh_keys' group
  - uidgid: assign UID/GID 114 for 'polkitd'
  - passwd: update GECOS field for 'root' user
  - services: remove commas from aliases for ircu-3
  - setup.spec: throw away newaliases output again


author: Martin Osvald <mosvald@redhat.com> - 2.14.3-1
changelog:
  - sysusers.d: add script and generate configuration fragment for users
  - Add fallback to hostname determination for csh.login (rhbz#2079768)
  - Remove ancient Conflicts
  - files: mark /run/motd as an ephemeral ghost entry


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: Jan Macku <jamacku@redhat.com> - 257-1
changelog:
  - Rebase to new upstream release v257 (RHEL-71409)
  - netif-naming-scheme: introduce rhel-10.0 scheme (RHEL-44417)


author: John Kacur <jkacur@redhat.com> - 0.19-7
changelog:
  - Add missing patch to prevents tuna gui from starting if display not available
  - remove oscilloscope which is unsupported in rhel
  - Add rpmsinpect.yaml and gating.yaml
  - Add tests dir
  - update the current version of python-linux-procfs as a requires
  Resolves: RHEL-30171


author: John B. Wyatt IV <jwyatt@redhat.com> - 0.19-11
changelog:
  - Fix syntax warnings
  - Switch RHEL10 pkg to use autosetup like c9s does in tuna, -v makes it more verbose
  Resolves: RHEL-106288


author: John B. Wyatt IV <jwyatt@redhat.com> - 0.19-12
changelog:
  - Reverting the previous syntax warnings fix patch and replacing it with the
  tuna-Fix-string-syntax-warnings-with-raw-strings patch.
  Resolves: RHEL-106288


author: John B. Wyatt IV <jwyatt@redhat.com> - 0.19-13
changelog:
  - Applied tuna: Fix help.py syntax warnings and tuna: help.py
  - Requested to remove resolves statement from previous entry.
  Resolves: RHEL-106290


author: John Kacur <jkacur@redhat.com> - 0.19-14
changelog:
  - Update man page with cpu_power command
  - Fix show_threads -t and show_irqs -q to not match everything if no match
  - Fix run command failing to apply BATCH policy
  - Add -U and -K to the move command
  Resolves: RHEL-107914 RHEL-106070 RHEL-93776 RHEL-106068


author: John Kacur <jkacur@redhat.com> - 0.20-1
changelog:
  - Update to upstream version 0.20
  - Convert spec file to use pyproject-rpm-macros
  - Use %pyproject_buildrequires, %pyproject_build, %pyproject_install
  - Use %pyproject_save_files for automatic file list generation
  - Remove oscilloscope (unsupported in RHEL)
  Resolves: RHEL-114902, RHEL-83080


author: John Kacur <jkacur@redhat.com> - 0.20-2
changelog:
  - Add python3-pip, python3-setuptools, python3-wheel BuildRequires
  - Delete setup.py in %prep so pyproject.toml build is used
  - Compress man page during %prep similar to rteval
  - Install tuna script and compressed man page explicitly
  Resolves: RHEL-114902


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94809
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
    - functions: make calc_isolated_cores return CPU ranges
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: disable appropriate P-State drivers
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    - gui: fix the profile deleter script


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <pats@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84740)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 6.0-67
changelog:
  - zipinfo: remove the extra %c that caused invalid reads
  - zipinfo: fix the whitespaces in the output
  - Zipbombs: Port Another patch, orinally made by Mark Adler
  - https://github.com/madler/unzip/commit/af0d07f95809653b669d88aa0f424c6d5aa48ba0
    Resolves: RHEL-59972
    Resolves: RHEL-6286


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fixc causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fix causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-1
changelog:
  - Update to version 2.11 (RHEL-59010)
  - backport fix for known regression on brcmfmac (rhbz#2302577)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-4
changelog:
  - Use pkcs11 provider to resolve PKCS11 URIs (RHEL-86951)
  - De-clutter syslog from CTRL-EVENT-SIGNAL-CHANGE messages (RHEL-71344)


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


