# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-226.el10]
changelog:
  - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172216]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172216] {CVE-2026-31431}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172216] {CVE-2026-23060}
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172216]
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172216] {CVE-2026-31677}
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172216] {CVE-2026-31431}
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172216]
  - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171460]
  - drm/i915/dmc: Fix an unlikely NULL pointer deference at probe (Desnes Nunes) [RHEL-161592]
  - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Herbert Xu) [RHEL-154016]
  - s390/mm: Add missing secure storage access fixups for donated memory (Mete Durlu) [RHEL-168792]
  - timers/migration: Exclude isolated cpus from hierarchy (CKI Backport Bot) [RHEL-68981]
  - cpumask: Add initialiser to use cleanup helpers (CKI Backport Bot) [RHEL-68981]
  - sched/isolation: Force housekeeping if isolcpus and nohz_full don't leave any (CKI Backport Bot) [RHEL-68981]
  - cgroup/cpuset: Fail if isolated and nohz_full don't leave any housekeeping (CKI Backport Bot) [RHEL-68981]
  - cgroup/cpuset: Rename update_unbound_workqueue_cpumask() to update_isolation_cpumasks() (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Use scoped_guard on available flag set/clear (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Add mask for CPUs available in the hierarchy (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Rename 'online' bit to 'available' (CKI Backport Bot) [RHEL-68981]
  - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-145403]
  - audit: Use kzalloc() instead of kmalloc()/memset() in audit_krule_to_data() (Ricardo Robaina) [RHEL-145403]
  - audit: fix comment misindentation in audit.h (Ricardo Robaina) [RHEL-145403]
  - audit: fix skb leak when audit rate limit is exceeded (Ricardo Robaina) [RHEL-145403]
  - audit: init ab->skb_list earlier in audit_buffer_alloc() (Ricardo Robaina) [RHEL-145403]
  - audit: add record for multiple object contexts (Ricardo Robaina) [RHEL-145403]
  - audit: add record for multiple task security contexts (Ricardo Robaina) [RHEL-145403]
  - lsm: security_lsmblob_to_secctx module selection (Ricardo Robaina) [RHEL-145403]
  - audit: create audit_stamp structure (Ricardo Robaina) [RHEL-145403]
  - audit: add a missing tab (Ricardo Robaina) [RHEL-145403]
  - audit: fix typo in auditfilter.c comment (Ricardo Robaina) [RHEL-145403]
  - audit: Replace deprecated strcpy() with strscpy() (Ricardo Robaina) [RHEL-145403]
  - audit: fix indentation in audit_log_exit() (Ricardo Robaina) [RHEL-145403]
  - audit: mark audit_log_vformat() with __printf() attribute (Ricardo Robaina) [RHEL-145403]
  - fs: Fix filename init after recent refactoring (Ricardo Robaina) [RHEL-145403]
  - netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error (Ricardo Robaina) [RHEL-145403]
  - fs: dedup handling of struct filename init and refcounts bumps (Ricardo Robaina) [RHEL-145403]
  - audit: Initialize lsmctx to avoid memory allocation error (Ricardo Robaina) [RHEL-145403]
  - net: corrections for security_secid_to_secctx returns (Ricardo Robaina) [RHEL-145403]
  - lsm: replace context+len with lsm_context (Ricardo Robaina) [RHEL-145403]
  - lsm: ensure the correct LSM context releaser (Ricardo Robaina) [RHEL-145403]
  - lsm: remove lsm_prop scaffolding (Ricardo Robaina) [RHEL-145403]
  - netlabel,smack: use lsm_prop for audit data (Ricardo Robaina) [RHEL-145403]
  - audit: change context data from secid to lsm_prop (Ricardo Robaina) [RHEL-145403]
  - lsm: create new security_cred_getlsmprop LSM hook (Ricardo Robaina) [RHEL-145403]
  - audit: use an lsm_prop in audit_names (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_inode_getsecid (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_current_getsecid (Ricardo Robaina) [RHEL-145403]
  - audit: update shutdown LSM data (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_ipc_getsecid (Ricardo Robaina) [RHEL-145403]
  - audit: maintain an lsm_prop in audit_context (Ricardo Robaina) [RHEL-145403]
  - lsm: add lsmprop_to_secctx hook (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_audit_rule_match (Ricardo Robaina) [RHEL-145403]
  - lsm: add the lsm_prop data structure (Ricardo Robaina) [RHEL-145403]
  - KVM: arm64: Account for RESx bits in __compute_fgt() (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Fix typos and stale comments in kvm_util (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Move page_align() to shared header (Sebastian Ott) [RHEL-157318]
  - KVM: riscv: selftests: Fix incorrect rounding in page_align() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Fix incorrect rounding in page_align() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Disable unused TTBR1_EL1 translations (Sebastian Ott) [RHEL-157318]
  - tools headers: Sync UAPI KVM headers with kernel sources (Sebastian Ott) [RHEL-157318]
  - Documentation: KVM: Update GICv3 docs for GICv5 hosts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Discard PC update state on vcpu reset (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Don't reprobe for ICH_VTR_EL2.TDS on CPU hotplug (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Correct test for ICH_HCR_EL2_TDIR cap for GICv5 hosts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert ICH_HCR_EL2_TDIR cap to EARLY_LOCAL_CPU_FEATURE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic: Pick EOIcount deactivations from AP-list tail (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove the redundant ISB in __kvm_at_s1e2() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix vma_shift staleness on nested hwpoison path (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Inject a SEA if failed to read the descriptor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Report addrsz fault at level 0 with a bad VTTBR.BADDR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Check S2 limits based on implemented PA size (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2 fault (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Eagerly init vgic dist/redist on vgic creation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Deduplicate ASID retrieval code (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Revert accidental drop of kvm_uninit_stage2_mmu() for non-NV VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix protected mode handling of pages larger than 4kB (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic: Handle const qualifier from gic_kvm_info allocation type (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove redundant kern_hyp_va() in unpin_host_sve_state() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix ID register initialization for non-protected pKVM guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Optimise away S1POE handling when not supported by host (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Hide S1POE from guests when not supported by the host (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add debugfs file dumping computed RESx values (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add sanitisation to SCTLR_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove all traces of HCR_EL2.MIOCNCE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove all traces of FEAT_TME (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify handling of full register invalid constraint (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Get rid of FIXED_VALUE altogether (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify handling of HCR_EL2.E2H RESx (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Move RESx into individual register descriptors (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add RES1_WHEN_E2Hx constraints as configuration flags (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add REQUIRES_E2H1 constraint as configuration flags (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify FIXED_VALUE handling (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert HCR_EL2.RW to AS_RES1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Correctly handle SCTLR_EL1 RES1 bits for unsupported features (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Allow RES1 bits to be inferred from configuration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inherit RESx bits from FGT register descriptors (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Extend unified RESx handling to runtime sanitisation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce data structure tracking both RES0 and RES1 bits (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce standalone FGU computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove duplicate configuration for SCTLR_EL1.{EE,E0E} (Sebastian Ott) [RHEL-157318]
  - arm64: Convert SCTLR_EL2 to sysreg infrastructure (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Avoid NV stage-2 code when NV is not supported (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use standard seq_file iterator for vgic-debug debugfs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Reimplement vgic-debug XArray iteration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use standard seq_file iterator for idregs debugfs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Set vgic_model before initing private IRQs (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Drop ICH_HFGRTR_EL2.ICC_HAPR_EL1 and make RES1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v3: Switch vGIC-v3 to use generated ICH_VMCR_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix various comments (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Add trap config for DBGWCR<15>_EL1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Enable GICv3 CPUIF trapping on GICv5 hosts if required (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify PAGE_S2_MEMATTR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Kill KVM_PGTABLE_S2_NOFWB (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Switch pKVM host S2 over to KVM_PGTABLE_S2_AS_S1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add KVM_PGTABLE_S2_AS_S1 flag (Sebastian Ott) [RHEL-157318]
  - arm64: Add MT_S2{,_FWB}_AS_S1 encodings (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use kvm_has_mte() in pKVM trap initialization (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inject UNDEF when accessing MTE sysregs with MTE disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Trap MTE access and discovery when MTE is disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove dead code resetting HCR_EL2 for pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Return correct RES0 bits for FGT registers (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Always populate FGT masks at boot time (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix error checking for FFA_VERSION (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Prevent host from managing timer offsets for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Check whether a VM IOCTL is allowed in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Track KVM IOCTLs and their associated KVM caps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Do not allow KVM_CAP_ARM_MTE for any guest in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Include VM type when checking VM capabilities in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce helper to calculate fault IPA offset (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix MTE flag initialization for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix Trace Buffer trap polarity for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix Trace Buffer trapping for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Add a test for FEAT_IDST (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Report optional ID register traps with a 0x18 syndrome (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Add a generic synchronous exception injection primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Force trap of GMID_EL1 when the guest doesn't have MTE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle CSSIDR2_EL1 and SMIDR_EL1 in a generic way (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle FEAT_IDST for sysregs without specific handlers (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add a generic synchronous exception injection primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add trap routing for GMID_EL1 (Sebastian Ott) [RHEL-157318]
  - arm64: Repaint ID_AA64MMFR2_EL1.IDS description (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Honor UX/PX attributes for EL2 S1 mappings (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert VTCR_EL2 to config-driven sanitisation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Account for RES1 bits in DECLARE_FEAT_MAP() and co (Sebastian Ott) [RHEL-157318]
  - arm64: Convert VTCR_EL2 to sysreg infratructure (Sebastian Ott) [RHEL-157318]
  - arm64: Convert ID_AA64MMFR0_EL1.TGRAN{4,16,64}_2 to UnsignedEnum (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix missing <asm/stackpage/nvhe.h> include (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Calculate hyp VA size only once (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Don't blindly set set PSTATE.PAN on guest exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Respect stage-2 write permssion when setting stage-1 AF (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove unused vcpu_{clear,set}_wfx_traps() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove unused parameter in synchronize_vcpu_pstate() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove extra argument for __pvkm_host_{share,unshare}_hyp() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inject UNDEF for a register trap without accessor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Copy FGT traps to unprotected pKVM VCPU on VCPU load (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix EL2 S1 XN handling for hVHE setups (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Check for vGICv3 when clearing TWI (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove ISB after writing FPEXC32_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Shuffle KVM_HOST_DATA_FLAG_* indices (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix comment in fpsimd_lazy_switch_to_host() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: at: Update AF on software walk only if VM has FEAT_HAFDBS (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: at: Use correct HA bit in TCR_EL2 when regime is EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Document KVM_PGTABLE_PROT_{UX,PX} (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix spelling mistake "Unexpeced" -> "Unexpected" (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add break to default case in kvm_pgtable_stage2_pte_prot() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add endian casting to kvm_swap_s[12]_desc() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix compilation when CONFIG_ARM64_USE_LSE_ATOMICS=n (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Add test for AT emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Expose hardware access flag management to NV guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Implement HW access flag management in stage-2 SW PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Implement HW access flag management in stage-1 SW PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Propagate PTW errors up to AT emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add helper for swapping guest descriptor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Use pgtable definitions in stage-2 walk (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle endianness in read helper for emulated PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Stop passing vCPU through void ptr in S2 PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Call helper for reading descriptors directly (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Advertise support for FEAT_XNX (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Teach ptdump about FEAT_XNX permissions (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Consider all 7 possible levels of cache (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Remove ARM64_FEATURE_FIELD_BITS and its last user (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add timer deactivation test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add Group-0 enable test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add asymmetric SPI deaectivation test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Perform EOImode==1 deactivation in ack order (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Remove LR-bound limitation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Exclude timer-controlled interrupts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Change configuration before enabling interrupt (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Fix GUEST_ASSERT_IAR_EMPTY() helper (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: gic_v3: Disable Group-0 interrupts by default (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: gic_v3: Add irq group setting helper (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Always trap GICV_DIR register (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Handle deactivation via GICV_DIR traps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Handle LR overflow when EOImode==0 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Force exit to sync ICH_HCR_EL2.En (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: nv: Plug L1 LR sync into deactivation primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: nv: Resync LRs/VMCR/HCR early for better MI emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Avoid broadcast kick on CPUs lacking TDIR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle in-LR deactivation when possible (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Add SPI tracking to handle asymmetric deactivation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Set ICH_HCR_EL2.TDIR when interrupts overflow LR capacity (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Add GICv2 SGI handling to deactivation primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle deactivation via ICV_DIR_EL1 traps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle LR overflow when EOImode==0 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use MI to detect groups being enabled/disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Move undeliverable interrupts to the end of ap_list (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Invert ap_list sorting to push active interrupts out (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Make vgic_target_oracle() globally available (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Turn kvm_vgic_vcpu_enable() into kvm_vgic_vcpu_reset() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Revamp vgic maintenance interrupt configuration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Eagerly save VMCR on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Compute vgic state irrespective of the number of interrupts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Extract LR computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Extract LR folding primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Decouple GICH_HCR programming from LRs being loaded (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Preserve EOIcount on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Extract LR computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Extract LR folding primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Decouple ICH_HCR_EL2 programming from LRs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Preserve EOIcount on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Drop LPI active state when folding LRs (Sebastian Ott) [RHEL-157318]
  - irqchip/gic: Add missing GICH_HCR control bits (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add LR overflow handling documentation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add tracking of vgic_irq being present in a LR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Repack struct vgic_irq fields (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Detect and work around the lack of ICV_DIR_EL1 trapping (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic-v3: Fix GICv3 trapping in protected mode (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Turn vgic-v3 errata traps into a patched-in constant (Sebastian Ott) [RHEL-157318]
  - irqchip/gic: Expose CPU interface VA to KVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add support for FEAT_XNX stage-2 permissions (Sebastian Ott) [RHEL-157318]
  - arm64: Detect FEAT_XNX (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Reschedule as needed when destroying the stage-2 page-tables (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Split kvm_pgtable_stage2_destroy() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Only drop references on empty tables in stage2_free_walker (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Assert GICR_TYPER.Processor_Number matches selftest CPU number (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: SYNC after guest ITS setup in vgic_lpi_stress (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use kvzalloc() for kvm struct allocation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Drop useless __GFP_HIGHMEM from kvm struct allocation (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Add ICH_VMCR_EL2 (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Move generation of RES0/RES1/UNKN to function (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Support feature-specific fields with 'Prefix' descriptor (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Fix checks for incomplete sysreg definitions (Sebastian Ott) [RHEL-157318]
  - Documentation: kvm: new UAPI for handling SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: selftests: Test for KVM_EXIT_ARM_SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: arm64: VM exit to userspace to handle SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: arm64: vgic-v3: Trap all if no in-kernel irqchip (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v3: Only set ICH_HCR traps for v2-on-v3 or v3 guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Enable nested for GICv5 host with FEAT_GCIE_LEGACY (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use ARM64_HAS_GICV5_LEGACY for GICv5 probing (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v5: Probe for GICv5 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v5: Support GICv3 compat (Sebastian Ott) [RHEL-157318]
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Ricardo Robaina) [RHEL-144438]
  - wifi: ath10k: fix station lookup failure during disconnect (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cw1200: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: correct use sequence of driver_data in skb->info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: pause TCM on fast resume (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: cancel mlo_scan_start_wk (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: correctly decode TTLM with default link map (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: ignore link disabled flag from userspace (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: apply advertised TTLM from association response (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: parse all TTLM entries (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't perform DA check on S1G beacon (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix wrong P2P device link id issue (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix dead lock while flushing management frames (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix scan state stuck in ABORTING after cancel_remain_on_channel (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: cancel scan only on active scan vdev (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: correctly check if CSA is active (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Fix bitrate calculation overflow for HE rates (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: don't force radio frequency check in freq_to_idx() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: collect station statistics earlier when disconnect (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: restore non-chanctx injection behaviour (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211_hwsim: disable BHs for hwsim_radio_lock (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't iterate not running interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: avoid kernel-infoleak from struct iw_point (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Remove blank line after mt792x firmware version dmesg (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: mt76: Strip whitespace from build ddate" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: do not use old MBSSID elements (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't WARN for connections on invalid channels (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: allow sharing identical chanctx for S1G interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: include s1g_primary_2mhz when comparing chandefs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: include s1g_primary_2mhz when sending chandef (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: correct FILS status codes (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Strip whitespace from build ddate (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: skip ieee80211_iter_keys() on scanning link remove (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: skip deflink accounting for offchannel links (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: move mt7996_update_beacons under mt76 mutex (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7925: ensure the 6GHz A-MPDU density cap from the hardware. (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix EMI rings for RRO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix MLO set key and group key issues (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix MLD group index assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: use correct link_id when filling TXD and TXP (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: set link_valid field when initializing wcid (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix teardown command for an MLD peer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: support fixed rate for link station (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix implicit beamforming support for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: no need to wait ACK event for SDO command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix max nss value when getting rx chainmask (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7925: cqm rssi low/high event notify (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: replace use of system_wq with system_percpu_wq (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: adjust BSS conf pointer handling (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: mt76: mt792x: improve monitor interface handling" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mmio_*_copy fix byte order and alignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Use of_reserved_mem_region_to_resource() for "memory-region" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix typos in comments (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Add the capability to set TX token start ID (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Add mt76_dev pointer in mt76_queue struct. (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Move Q_READ/Q_WRITE definitions in dma.h (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Remove useless check in mt7996_msdu_page_get_from_cache() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: relicense to BSD-3-Clause-Clear (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: fix license/copyright of util.h (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: use GFP_DMA32 for page_pool buffer allocation (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7915: add bf backoff limit table support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Fix DTS power-limits on little endian systems (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: connac: Replace memcpy + hard-coded size with strscpy (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Remove unnecessary link_id checks in mt7996_tx (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: stop radar detection in cfg80211_leave() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: use cfg80211_leave() in iftype change (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix channel switching code (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Enable 40 MHz width by default (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix RX channel width reported by RTL8192FU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix the 40 MHz subchannel for RTL8192EU, RTL8723BU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Make RTL8192CU, RTL8723AU TX with 40 MHz width (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852a: correct field mask of reset DAC/ADC FIFO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: refactor CMAC packet handlers (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: refactor CMAC crypt functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: utilize the newly defined CMAC constants (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add generic MMIE struct defines (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix CMAC functions not handling errors (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: replace use of system_unbound_wq with system_dfl_wq (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add support for 6GHz AP role not relevant AP type (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add default ID 0bda:b831 for RTL8831BU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: use separated function to set RX filter (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: correct user macid mask of RX info for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: update format of addr cam H2C command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: add addr cam H2C command v1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fill addr cam H2C command by struct (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: align RA H2C format v1 for RTL8922A (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: print band and port where beacon update on (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: ignore DCFO if not defined in chip_info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: consider type 15 in BB gain table (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: update wcpu_on to download firmware for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: remove undefined bit B_BE_PPDU_MAC_INFO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: calling BB pre-init by chips with/without BB MCU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: separate pre-init code before downloading firmware (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: part size to download firmware by header info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: flush TX queue before deleting key (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: rtw8852bu: Added dev id for ASUS AX57 NANO USB Wifi dongle (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: configure RX antenna if chips can support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: do RF calibration once setting channel when running pure monitor mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: consider data rate/bandwidth/GI for injected packets (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: fix out-of-bounds access in rtw89_phy_read_txpwr_limit() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: add compensation of thermal value from efuse calibration (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: debug: add parser to diagnose along DIAG_MAC fw element (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: parse firmware element of DIAG_MAC (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: pci: add to read PCI configuration space from common code (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: make monitor link info check more specific (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: track MU-MIMO configuration on disabled interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: Add fallback mechanism for INDOOR_SP connection (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: clean up duplicate ap_power handling (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: use a C99 initializer in wiphy_register (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: rtl8188ee: correct allstasleep in P2P PS H2C command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Enable the new rtw89_8852au module (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852au.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852a: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852a_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852a_dle_mem_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Use the correct power sequences for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: fix doc of struct key_params (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove unnecessary vlan NULL check (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: pass frame type to element parsing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove "disabling VHT" message (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add and use chanctx usage iteration (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: simplify ieee80211_recalc_chanctx_min_def() API (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove chanctx to link back-references (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: make link iteration safe for 'break' (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split NAN definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split P2P definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split S1G definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split EHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split HE definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split VHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split HT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split mesh definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix timeout error during beacon stats retrieval (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Make firmware stats reset caller-driven (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: process TX wait skbs for USB via C2H handler (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: provide TX reports for management frames (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: handle IEEE80211_TX_CTL_REQ_TX_STATUS frames for USB (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: anchor TX URBs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fill TX descriptor of FWCMD in shortcut (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: implement C2H TX report handler (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: refine rtw89_core_tx_wait_complete() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: use ieee80211_free_txskb() where appropriate (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: fix leak in rtw89_usb_write_port() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: Add BUFFALO WI-U3-866DHP to the USB ID list (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: 8822c: use fixed rate and bandwidth to reply CSI packets (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Enable the new rtw89_8852cu module (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852cu.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852c_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852c_dle_mem_usb{2,3} (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: Fix rtw8852c_pwr_{on,off}_func() for USB (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Fix rtw89_mac_dmac_func_pre_en_ax() for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_post_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_pre_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Move bulk out map to new struct rtw89_usb_info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw89_core_get_ch_dma_v2() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8832cu: turn off TX partial mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: use = {} to initialize bmi_target_info instead of memset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: use = {} to initialize pm_qos_request instead of memset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: unassign arvif on scan vdev create failure (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: enforce vdev limit in ath12k_mac_vdev_create() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Set EHT fixed rates for associated STAs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add EHT rates to ath12k_mac_op_set_bitrate_mask() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add EHT fixed GI/LTF (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add EHT MCS/NSS rates to Peer Assoc (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add EHT rate handling to existing set rate functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: generalize GI and LTF fixed rate functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix error handling in creating hardware group (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix reusing m3 memory (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: Allow HT Action frame processing on 6 GHz when HE is supported (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rt2x00: add nvmem eeprom support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add RX flag to report radiotap VHT information (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: check for NULL pointer after kmalloc (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: cfg: fix a few device names (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: Move EMLSR prints to IWL_DL_EHT (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: disable EHT if the device doesn't allow it (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: use FW_CHECK on bad ROC notification (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm/mld: report non-HT frames as 20 MHz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fix build when mvm/mld not configured (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: check the validity of noa_len (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: stop checking the firmware's error pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: be more chatty when we fail to find a wifi7 device (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fw: remove support of several iwl_lari_config_change_cmd versions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: include raw PHY notification in radiotap (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: update to new sniffer API (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: set wiphy::iftype_ext_capab dynamically (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: support get/set_antenna (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: cleanup unsupported phy command versions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fix remaining kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: tests: check listed PCI IDs have configs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: cfg: add new device names (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: iwlmld is always used for wifi7 devices (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: move rate conversions to utils.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: reschedule check_tpt_wk also not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: remove support from of alive notif version 6 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: align the name of iwl_alive_ntf_v6 to the convention (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: improve scan time on 6 GHz band (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: restart hardware to recover firmware if power-save becomes abnormal (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: fix ADC oscillation in 160MHz affecting RX performance (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: regd: apply ACPI policy even if country code is programmed (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: support EHT rate pattern via bitrate mask (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mlo: handle needed H2C when link switching is requested by stack (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: use skb_dequeue() for queued ROC packets to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: splice C2H events queue to local to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add parameters to radio-specific debugfs directories (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add debugfs support for multi-radio wiphy (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: default S1G chandef width to 1MHz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: get probe response chan via ieee80211_get_channel_khz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: reset CRC valid after CSA (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211_hwsim: advertise puncturing feature support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: validate radio frequency range for monitor mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rt2x00: check retval for of_get_mac_address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Assert base_lock is held before allocating REO update element (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add support for BSS color change (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: Correctly use "ab" macro parameter (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: advertise NL80211_FEATURE_TX_POWER_INSERTION (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: add support for Tx Power insertion in RRM action frame (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: wrap ath11k_mac_op_get_txpower() with lock-aware internal helper (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: relocate some Tx power related functions in mac.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: fix peer HE MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: Support for FTM TLV test commands (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Use correct power off sequence for RTL8192CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Dump the efuse right after reading it (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Report the signal strength only if it's known (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Replace hardcoded strings with helper functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add MODULE_FIRMWARE() entries (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix TX and RX MCS rate configurations in HE mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix NSS value update in ext_rx_stats (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Defer vdev bring-up until CSA finalize to avoid stale beacon (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: track dropped MSDU buffer type packets in REO exception ring (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix MSDU buffer types handling in RX error path (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: move recovery check logic into a new work (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - selftests: net: unify the Makefile formats (Hangbin Liu) [RHEL-155384]
  - selftests: net: sort configs (Hangbin Liu) [RHEL-155384]
  - lib/test_vmalloc.c: minor fixes to test_vmalloc.c (Audra Mitchell) [RHEL-151432]
  - kselftest: mm: fix typos in test_vmalloc.sh (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc: remove xfail condition check (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc: add no_block_alloc_test case (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: introduce xfail for failing tests (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: restrict default test mask to avoid test warnings (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: use late_initcall() if built-in for init ordering (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: allow built-in execution (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: replace RWSEM to SRCU for setup (Audra Mitchell) [RHEL-151432]
  - bus: mhi: host: pci_generic: Add Foxconn T99W760 modem (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: ep: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: ep: Make mhi_ep_bus_type const (Jose Ignacio Tornos Martinez) [RHEL-151312]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-227.el10]
changelog:
  - PCI/PTM: Drop pci_enable_ptm() granularity parameter (CKI Backport Bot) [RHEL-172222]
  - x86/mce: Remove the redundant mce_hygon_feature_init() (Steve Best) [RHEL-130026]
  - x86/mce: Ensure user polling settings are honored when restarting timer (Steve Best) [RHEL-130026]
  - x86/mce/amd: Fix threshold limit reset (Steve Best) [RHEL-130026]
  - x86/mce/apei: Handle variable SMCA BERT record size (Steve Best) [RHEL-130026]
  - x86/mce/mcelog: Use xchg() to get and clear the flags (Steve Best) [RHEL-130026]
  - x86/mce/inject: Remove call to mce_notify_irq() (Steve Best) [RHEL-130026]
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Steve Best) [RHEL-130026]
  - x86/mce/threshold: Remove the redundant this_cpu_dec_return() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Filter bogus hardware errors on Zen3 clients (Steve Best) [RHEL-130026]
  - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs (Steve Best) [RHEL-130026]
  - x86/mce: Handle AMD threshold interrupt storms (Steve Best) [RHEL-130026]
  - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Add support for physical address valid bit (Steve Best) [RHEL-130026]
  - EDAC/mce_amd: Add support for FRU text in MCA (Steve Best) [RHEL-130026]
  - x86/mce: Save and use APEI corrected threshold limit (Steve Best) [RHEL-130026]
  - x86/mce/amd: Define threshold restart function for banks (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove redundant reset_block() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Support SMCA Corrected Error Interrupt (Steve Best) [RHEL-130026]
  - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD DFR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD THR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/mce: Add a clear_bank() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' (Steve Best) [RHEL-130026]
  - x86/mce: Move machine_check_poll() status checks to helper functions (Steve Best) [RHEL-130026]
  - x86/mce: Separate global and per-CPU quirks (Steve Best) [RHEL-130026]
  - x86/mce: Convert family/model mixed checks to VFM-based checks (Steve Best) [RHEL-130026]
  - x86/mce: Do 'UNKNOWN' vendor check early (Steve Best) [RHEL-130026]
  - x86/mce: Break up __mcheck_cpu_apply_quirks() (Steve Best) [RHEL-130026]
  - x86/mce: Make four functions return bool (Steve Best) [RHEL-130026]
  - x86/mce: Add wrapper for struct mce to export vendor specific info (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only SMCA init (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only init (Steve Best) [RHEL-130026]
  - x86/mce: Set CR4.MCE last during init (Steve Best) [RHEL-130026]
  - x86/mce: Remove __mcheck_cpu_init_early() (Steve Best) [RHEL-130026]
  - x86/mce: Cleanup bank processing on init (Steve Best) [RHEL-130026]
  - x86/mce/amd: Put list_head in threshold_bank (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove smca_banks_map (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Rename threshold restart function (Steve Best) [RHEL-130026]
  - x86/msr: Convert __rdmsr() uses to native_rdmsrq() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Convert __wrmsr() uses to native_wrmsr{,q}() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Add the native_rdmsrq() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'native_wrmsrl()' to 'native_wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' (Steve Best) [RHEL-130026]
  - x86/msr: Add explicit includes of <asm/msr.h> [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_on_cpu()' to 'rdmsrq_on_cpu()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl()' to 'wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl()' to 'rdmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on 'u32' MSR indices in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on u64 in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Harmonize the prototype and definition of do_trace_rdpmc() (Steve Best) [RHEL-130026]
  - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161187]
  - io_uring/kbuf: limit legacy provided buffer lists to USHRT_MAX (Jeff Moyer) [RHEL-161187]
  - redhat/configs: Enable FFA for TPM on AArch64 (Marcin Juszkiewicz) [RHEL-167985]
  - platform/x86/intel/pmc: Remove double empty line (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Enable substate residencies for multiple PMCs (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Move LPM mode attributes to PMC (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Change LPM mode fields to u8 (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Wildcat Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Add Wildcat Lake support to Intel PMC SSRAM Telemetry (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Remove redundant has_die_c6 variable (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Rename PMC index variable to pmc_idx (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add DMU GUID to Arrow Lake U/H (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add support for multiple DMU GUIDs (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Replace dev_warn() with dev_dbg() (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Panther Lake (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Show substate requirement for S0ix blockers (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Improve function to show substate header (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Move telemetry endpoint register handling (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Lunar Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: use kcalloc() instead of kzalloc() (Steve Best) [RHEL-129781]
  - redhat: configs: Enable CONFIG_SENSORS_SPD5118 (Jennifer Berringer) [RHEL-168906]
  - i3c: master: dw-i3c: Balance PM runtime usage count on probe failure (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Detect and support 16-bit register addressing (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Support 16-bit addressing for NVMEM accesses (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Name chips taking the specification literally (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Split into common and I2C specific code (Jennifer Berringer) [RHEL-168906]
  - hwmon: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Disable runtime PM on Agilex5 to avoid bus hang on IBI (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add shutdown support to dw_i3c_master driver (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add quirk to address OD/PP timing issue on AMD platform (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add support for AMDI0015 ACPI ID (Jennifer Berringer) [RHEL-168906]
  - i3c: simplify combined i3c/i2c dependencies (Jennifer Berringer) [RHEL-168906]
  - i3c: Move device name assignment after i3c_bus_init (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Simplify with scoped for each OF child loop (Jennifer Berringer) [RHEL-168906]
  - i3c: fix refcount inconsistency in i3c_master_register (Jennifer Berringer) [RHEL-168906]
  - device property: Add scoped fwnode child node iterators (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Drop duplicate check before calling OF APIs (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Improve initialization of numbered I2C adapters (Jennifer Berringer) [RHEL-168906]
  - thermal: intel: int340x: soc_slider: Set offset only for balanced mode (Steve Best) [RHEL-130009]
  - thermal: int340x: Fix sysfs group leak on DLVR registration failure (Steve Best) [RHEL-130009]
  - drivers: thermal: intel: tcc_cooling: Drop redundant local variable (Steve Best) [RHEL-130009]
  - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature (Steve Best) [RHEL-130009]
  - thermal: intel: Use sysfs_emit() in a sysfs show function (Steve Best) [RHEL-130009]
  - thermal: intel: fix typo "nagative" in comment for cpu argument (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use sysfs_emit{_at}() in sysfs show functions (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Enable slow workload type hints (Steve Best) [RHEL-130009]
  - thermal: intel: intel_pch_thermal: Drop explicit driver data clearing (Steve Best) [RHEL-130009]
  - thermal: intel: intel_tcc_cooling: Add CPU models in the support list (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Wildcat Lake (Steve Best) [RHEL-130009]
  - ACPI: DPTF: Support Nova Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add DLVR support for Nova Lake (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Add Nova Lake processor thermal device (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use symbolic constant for UUID comparison (Steve Best) [RHEL-130009]
  - thermal: intel: Select INT340X_THERMAL from INTEL_SOC_DTS_THERMAL (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Power Slider: Validate slider_balance range (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter to change slider offset (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter for balanced Slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Panther Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add support for power slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Remove redundant acpi_has_method() call (Steve Best) [RHEL-130009]
  - tools/power/x86/intel-speed-select: v1.25 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Allow non root users (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Optimize suspend/resume callbacks (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Check for admin capability for write commands (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Store and restore all domains data (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Add missing write block check (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Use pkg-config for libnl-3.0 detection (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: v1.24 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Reset isst_turbo_freq_info for invalid buckets (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Check feature status (Krzysztof Pawlinski) [RHEL-133093]
  - rh_message.h: update support status of mlx5 devices (Scott Weaver) [RHEL-142605 RHEL-142608 RHEL-166116]
  - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults (Charles Mirabile) [RHEL-154155]
  - x86/resctrl: Fix SNC detection (Phil Auld) [RHEL-147186]
  - x86/topo: Fix SNC topology mess (Phil Auld) [RHEL-147186]
  - x86/topo: Replace x86_has_numa_in_package (Phil Auld) [RHEL-147186]
  - x86/topo: Add topology_num_nodes_per_package() (Phil Auld) [RHEL-147186]
  - x86/numa: Store extra copy of numa_nodes_parsed (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Phil Auld) [RHEL-145610]
  - sched/core: Fix wakeup_preempt's next_class tracking (Phil Auld) [RHEL-147186]
  - sched/fair: Only set slice protection at pick time (Phil Auld) [RHEL-147186]
  - sched/eevdf: Update se->vprot in reweight_entity() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix lag clamp (Phil Auld) [RHEL-147186]
  - sched/fair: Fix zero_vruntime tracking (Phil Auld) [RHEL-147186]
  - sched/clock: Avoid false sharing for sched_clock_irqtime (Phil Auld) [RHEL-147186]
  - sched/rt: Skip currently executing CPU in rto_next_cpu() (Phil Auld) [RHEL-147186]
  - sched/cpufreq: Use %pe format for PTR_ERR() printing (Phil Auld) [RHEL-147186]
  - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups (Phil Auld) [RHEL-147186]
  - sched/debug: Fix dl_server (re)start conditions (Phil Auld) [RHEL-147186]
  - sched/debug: Add support to change sched_ext server params (Phil Auld) [RHEL-147186]
  - sched_ext: Add a DL server for sched_ext tasks (Phil Auld) [RHEL-147186]
  - sched/debug: Stop and start server based on if it was active (Phil Auld) [RHEL-147186]
  - sched/deadline: Clear the defer params (Phil Auld) [RHEL-147186]
  - sched/debug: Fix updating of ppos on server write ops (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix 'stuck' dl_server (Phil Auld) [RHEL-147186]
  - sched/fair: Revert force wakeup preemption (Phil Auld) [RHEL-147186]
  - sched/fair: Disable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched: Update rq->avg_idle when a task is moved to an idle CPU (Phil Auld) [RHEL-147186]
  - sched/debug: Convert copy_from_user() + kstrtouint() to kstrtouint_from_user() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix pelt clock sync when entering idle (Phil Auld) [RHEL-147186]
  - sched/fair: Remove nohz.nr_cpus and use weight of cpumask instead (Phil Auld) [RHEL-147186]
  - sched/fair: Change likelyhood of nohz.nr_cpus (Phil Auld) [RHEL-147186]
  - sched/fair: Fix math notation errors in avg_vruntime comment (Phil Auld) [RHEL-147186]
  - sched/fair: Move checking for nohz cpus after time check (Phil Auld) [RHEL-147186]
  - sched: Audit MOVE vs balance_callbacks (Phil Auld) [RHEL-147186]
  - sched: Deadline has dynamic priority (Phil Auld) [RHEL-147186]
  - sched/deadline: Use ENQUEUE_MOVE to allow priority change (Phil Auld) [RHEL-147186]
  - sched/deadline: Ensure get_prio_dl() is up-to-date (Phil Auld) [RHEL-147186]
  - sched/deadline: Avoid double update_rq_clock() (Phil Auld) [RHEL-147186]
  - sched: Fold rq-pin swizzle into __balance_callbacks() (Phil Auld) [RHEL-147186]
  - sched: Provide idle_rq() helper (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix server stopping with runnable tasks (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix potential race in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/deadline: Remove unnecessary comment in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Drop useless cpumask_empty() in find_energy_efficient_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Simplify task_numa_find_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Use cpumask_weight_and() in sched_balance_find_dst_group() (Phil Auld) [RHEL-147186]
  - sched: Reorder some fields in struct rq (Phil Auld) [RHEL-147186]
  - sched/fair: Fix sched_avg fold (Phil Auld) [RHEL-147186]
  - sched: Fix faulty assertion in sched_change_end() (Phil Auld) [RHEL-147186]
  - sched/core: Rework sched_class::wakeup_preempt() and rq_modified_*() (Phil Auld) [RHEL-147186]
  - sched_ext: Rename pnt_seq to kick_sync (Phil Auld) [RHEL-147186]
  - sched_ext: Don't kick CPUs running higher classes (Phil Auld) [RHEL-147186]
  - sched_ext: Fix SCX_KICK_WAIT to work reliably (Phil Auld) [RHEL-147186]
  - sched_ext: Allow forcibly picking an scx task (Phil Auld) [RHEL-147186]
  - sched_ext: fix flag check for deferred callbacks (Phil Auld) [RHEL-147186]
  - sched/ext: Fold balance_scx() into pick_task_scx() (Phil Auld) [RHEL-147186]
  - sched_ext: defer queue_balance_callback() until after ops.dispatch (Phil Auld) [RHEL-147186]
  - sched_ext: Move internal type and accessor definitions to ext_internal.h (Phil Auld) [RHEL-147186]
  - sched_ext: Make explicit scx_task_iter_relock() calls unnecessary (Phil Auld) [RHEL-147186]
  - sched/fair: Join two #ifdef CONFIG_FAIR_GROUP_SCHED blocks (Phil Auld) [RHEL-147186]
  - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics (Phil Auld) [RHEL-147186]
  - sched/fair: Sort out 'blocked_load*' namespace noise (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight (Phil Auld) [RHEL-147186]
  - sched/fair: Clean up comments in 'struct cfs_rq' (Phil Auld) [RHEL-147186]
  - sched/fair: Fold the sched_avg update (Phil Auld) [RHEL-147186]
  - <linux/compiler_types.h>: Add the __signed_scalar_typeof() helper (Phil Auld) [RHEL-147186]
  - sched/fair: Remove superfluous rcu_read_lock() (Phil Auld) [RHEL-147186]
  - sched/fair: Avoid rq->lock bouncing in sched_balance_newidle() (Phil Auld) [RHEL-147186]
  - sched/fair: Switch to rcu_dereference_all() (Phil Auld) [RHEL-147186]
  - sched/headers: Rename rcu_dereference_check_sched_domain() => rcu_dereference_sched_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Limit hrtick work (Phil Auld) [RHEL-147186]
  - sched/core: Add assertions to QUEUE_CLASS (Phil Auld) [RHEL-147186]
  - sched/core: Fix psi_dequeue() for Proxy Execution (Phil Auld) [RHEL-147186]
  - sched/headers: Remove whitespace noise from kernel/sched/sched.h (Phil Auld) [RHEL-147186]
  - sched/rt: Remove a preempt-disable section in rt_mutex_setprio() (Phil Auld) [RHEL-147186]
  - sched/deadline: Walk up cpuset hierarchy to decide root domain when hot-unplug (Phil Auld) [RHEL-147186]
  - cgroup/cpuset: Introduce cpuset_cpus_allowed_locked() (Phil Auld) [RHEL-147186]
  - sched/fair: Enable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched/fair: Reimplement NEXT_BUDDY to align with EEVDF goals (Phil Auld) [RHEL-147186]
  - sched/deadline: Use cpumask_weight_and() in dl_bw_cpus (Phil Auld) [RHEL-147186]
  - sched/deadline: Minor cleanup in select_task_rq_dl() (Phil Auld) [RHEL-147186]
  - sched/deadline: Document dl_server (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server stop condition (Phil Auld) [RHEL-147186]
  - sched/eevdf: Fix min_vruntime vs avg_vruntime (Phil Auld) [RHEL-147186]
  - sched: Fix proxy/current (push,pull)ability (Phil Auld) [RHEL-147186]
  - sched: Start blocked_on chain processing in find_proxy_task() (Phil Auld) [RHEL-147186]
  - sched: Add an initial sketch of the find_proxy_task() function (Phil Auld) [RHEL-147186]
  - sched: Fix runtime accounting w/ split exec & sched contexts (Phil Auld) [RHEL-147186]
  - sched: Move update_curr_task logic into update_curr_se (Phil Auld) [RHEL-147186]
  - configs: Make sure PROXY_EXEC is off (Phil Auld) [RHEL-147186]
  - sched: Add CONFIG_SCHED_PROXY_EXEC & boot argument to enable/disable (Phil Auld) [RHEL-147186]
  - locking/mutex: Rework task_struct::blocked_on (Phil Auld) [RHEL-147186]
  - sched/core: Remove double update_rq_clock() in __set_cpus_allowed_ptr_locked() (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-147186]
  - sched/core: Optimize core cookie matching check (Phil Auld) [RHEL-147186]
  - sched/core: Add comment explaining force-idle vruntime snapshots (Phil Auld) [RHEL-147186]
  - sched/proxy: Yield the donor task (Phil Auld) [RHEL-147186]
  - sched: Fix the do_set_cpus_allowed() locking fix (Phil Auld) [RHEL-147186]
  - sched: Remove never used code in mm_cid_get() (Phil Auld) [RHEL-147186]
  - sched: Detect per-class runqueue changes (Phil Auld) [RHEL-147186]
  - sched: Add support to pick functions to take rf (Phil Auld) [RHEL-147186]
  - sched: Match __task_rq_{,un}lock() (Phil Auld) [RHEL-147186]
  - sched: Mandate shared flags for sched_change (Phil Auld) [RHEL-147186]
  - sched: Cleanup the sched_change NOCLOCK usage (Phil Auld) [RHEL-147186]
  - sched: Make __do_set_cpus_allowed() use the sched_change pattern (Phil Auld) [RHEL-147186]
  - sched: Rename do_set_cpus_allowed() (Phil Auld) [RHEL-147186]
  - sched: Add locking comments to sched_class methods (Phil Auld) [RHEL-147186]
  - sched: Move sched_class::prio_changed() into the change pattern (Phil Auld) [RHEL-147186]
  - sched: Fix do_set_cpus_allowed() locking (Phil Auld) [RHEL-147186]
  - sched: Fix migrate_disable_switch() locking (Phil Auld) [RHEL-147186]
  - sched/deadline: Prepare for switched_from() change (Phil Auld) [RHEL-147186]
  - sched: Cleanup sched_delayed handling for class switches (Phil Auld) [RHEL-147186]
  - sched: Fold sched_class::switch{ing,ed}_{to,from}() into the change pattern (Phil Auld) [RHEL-147186]
  - sched/fair: Only update stats for allowed CPUs when looking for dst group (Phil Auld) [RHEL-147186]
  - sched: Employ sched_change guards (Phil Auld) [RHEL-147186]
  - cleanup: Fix documentation build error for ACQUIRE updates (Phil Auld) [RHEL-147186]
  - tools/testing: add linux/args.h header and fix radix, VMA tests (Phil Auld) [RHEL-147186]
  - cleanup: Introduce ACQUIRE() and ACQUIRE_ERR() for conditional locks (Phil Auld) [RHEL-147186]
  - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Phil Auld) [RHEL-147186]
  - sched: Re-arrange the {EN,DE}QUEUE flags (Phil Auld) [RHEL-147186]
  - sched/topology,x86: Fix build warning (Phil Auld) [RHEL-147186]
  - sched/topology: Fix sched domain build error for GNR, CWF in SNC-3 mode (Phil Auld) [RHEL-147186]
  - sched/fair: Forfeit vruntime on yield (Phil Auld) [RHEL-147186]
  - sched/deadline: only set free_cpus for online runqueues (Phil Auld) [RHEL-147186]
  - sched: Create architecture specific sched domain distances (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix race in push_dl_task() (Phil Auld) [RHEL-147186]
  - vfio/nvgrace-gpu: register device memory for poison handling (Aristeu Rozanski) [RHEL-73608]
  - mm: add stubs for PFNMAP memory failure registration functions (Aristeu Rozanski) [RHEL-73608]
  - mm: fixup pfnmap memory failure handling to use pgoff (Aristeu Rozanski) [RHEL-73608]
  - mm: handle poisoning of pfn without struct pages (Aristeu Rozanski) [RHEL-73608]
  - mm: change ghes code to allow poison of non-struct pfn (Aristeu Rozanski) [RHEL-73608]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-228.el10]
changelog:
  - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - s390/barrier: Make array_index_mask_nospec() __always_inline (Ramesh Chhetri) [RHEL-174629]
  - s390/entry: Scrub r12 register on kernel entry (Ramesh Chhetri) [RHEL-174629]
  - bitmap: introduce bitmap_weighted_xor() (Michal Schmidt) [RHEL-174745]
  - bitmap: add test_zero_nbits() (Michal Schmidt) [RHEL-174745]
  - bitmap: exclude nbits == 0 cases from bitmap test (Michal Schmidt) [RHEL-174745]
  - bitmap: test bitmap_weight() for more (Michal Schmidt) [RHEL-174745]
  - bitmap: add bitmap_weight_from() (Michal Schmidt) [RHEL-174745]
  - bitmap: align test_bitmap output (Michal Schmidt) [RHEL-174745]
  - bitmap: switch test to scnprintf("%*pbl") (Michal Schmidt) [RHEL-174745]
  - bitmap: Add test for out-of-boundary modifications for scatter & gather (Michal Schmidt) [RHEL-174745]
  - cpumask: Introduce cpumask_weighted_or() (Michal Schmidt) [RHEL-174745]
  - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Michal Schmidt) [RHEL-174745]
  - bitmap: remove _check_eq_u32_array (Michal Schmidt) [RHEL-174745]
  - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-172305]
  - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-172305]
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172748] {CVE-2026-43051}
  - redhat/configs: Enable MPAM options (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Make resctrl_mon_ctx_waiters static (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix the check for no monitor components found (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix MBA CDP alloc_capable handling on unmount (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add initial MPAM documentation (Gavin Shan) [RHEL-164228]
  - arm_mpam: Quirk CMN-650's CSU NRDY behaviour (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-6 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-4 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-1 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add quirk framework (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Call resctrl_init() on platforms that can support resctrl (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Select ARCH_HAS_CPU_RESCTRL (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add empty definitions for assorted resctrl functions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Update the rmid reallocation limit (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_rmid_read() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Allow resctrl to allocate monitors (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for csu counters (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add monitor initialisation and domain boilerplate (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add kunit test for control format conversions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for 'MB' resource (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Wait for cacheinfo to be ready (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add rmid index helpers (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Convert to/from MPAMs fixed-point formats (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Hide CDP emulation behind CONFIG_EXPERT (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add CDP emulation (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add plumbing against arm64 task and cpu hooks (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement helpers to update configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_get_config() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement resctrl_arch_reset_all_ctrls() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Pick the caches we will use as resctrl resources (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add boilerplate cpuhp and domain allocation (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Force guest EL1 to use user-space's partid configuration (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add helpers to change a task or cpu's MPAM PARTID/PMG values (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Initialise and context switch the MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Advertise the CPUs MPAM limits to the driver (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Drop the CONFIG_EXPERT restriction (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Re-initialise MPAM regs when CPU comes online (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Context switch the MPAM registers (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Make MPAMSM_EL1 accesses UNDEF (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Preserve host MPAM configuration when changing traps (Gavin Shan) [RHEL-164228]
  - arm64/sysreg: Add MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm_mpam: Reset when feature configuration bit unset (Gavin Shan) [RHEL-164228]
  - arm_mpam: Ensure in_reset_state is false after applying configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: Force __iomem casts (Gavin Shan) [RHEL-100932]
  - arm_mpam: Disable preemption when making accesses to fake MSC in kunit test (Gavin Shan) [RHEL-100932]
  - arm_mpam: Fix null pointer dereference when restoring bandwidth counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use non-atomic bitops when modifying feature bitmap (Gavin Shan) [RHEL-100932]
  - arm_mpam: Remove duplicate linux/srcu.h header (Gavin Shan) [RHEL-100932]
  - arm_mpam: Stop using uninitialized variables in __ris_msmon_read() (Gavin Shan) [RHEL-100932]
  - MAINTAINERS: new entry for MPAM Driver (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit tests for props_mismatch() (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit test for bitmap reset (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helper to reset saved mbwu state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use long MBWU counters if supported (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe for long/lwd mbwu counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Consider overflow in bandwidth counter state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Track bandwidth counter state for power management (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add mpam_msmon_read() to read monitor value (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers to allocate monitors (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe and reset the rest of the features (Gavin Shan) [RHEL-100932]
  - arm_mpam: Allow configuration to be applied and restored during cpu online (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use a static key to indicate when mpam is enabled (Gavin Shan) [RHEL-100932]
  - arm_mpam: Register and enable IRQs (Gavin Shan) [RHEL-100932]
  - arm_mpam: Extend reset logic to allow devices to be reset any time (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add a helper to touch an MSC from any CPU (Gavin Shan) [RHEL-100932]
  - arm_mpam: Reset MSC controls from cpuhp callbacks (Gavin Shan) [RHEL-100932]
  - arm_mpam: Merge supported features during mpam_enable() into mpam_class (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe the hardware features resctrl supports (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers for managing the locking around the mon_sel registers (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe hardware to find the supported partid/pmg values (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add cpuhp callbacks to probe MSC hardware (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add MPAM MSC register layout definitions (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add the class and component structures for firmware described ris (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate (Gavin Shan) [RHEL-100932]
  - ACPI / MPAM: Parse the MPAM table (Gavin Shan) [RHEL-100932]
  - ACPI: Define acpi_put_table cleanup handler and acpi_get_table_pointer() helper (Gavin Shan) [RHEL-100932]
  - platform: Define platform_device_put cleanup handler (Gavin Shan) [RHEL-100932]
  - arm64: kconfig: Add Kconfig entry for MPAM (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Find cache level by cache-id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add acpi_pptt_cache_v1_full to use pptt cache as one structure (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Stop acpi_count_levels() expecting callers to clear levels (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (Gavin Shan) [RHEL-100932]
  - s390/pfault: Fix virtual vs physical address confusion (Mircea Dragan) [RHEL-170908]
  - lib/vsprintf: Add specifier for printing struct timespec64 (CKI Backport Bot) [RHEL-172105]
  - RDMA/rw: Fix MR pool exhaustion in bvec RDMA READ path (Kamal Heib) [RHEL-163515]
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Import DMA-BUF module in uverbs_std_types_dmabuf file (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check id_priv->restricted_node_type in cma_listen_on_dev() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: select CONFIG_DMA_SHARED_BUFFER (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add DMABUF object type and operations (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Support external FD uobjects (Kamal Heib) [RHEL-163515]
  - RDMA/core: introduce rdma_restrict_node_type() (Kamal Heib) [RHEL-163515]
  - RDMA/umem: don't abuse current->group_leader (Kamal Heib) [RHEL-163515]
  - IB/core: Extend rate limit support for RC QPs (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Kamal Heib) [RHEL-163515]
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Kamal Heib) [RHEL-163515]
  - RDMA/core: add MR support for bvec-based RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: use IOVA-based DMA mapping for bvec RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: add bio_vec based RDMA read/write API (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Kamal Heib) [RHEL-163515]
  - RDMA/iwcm: Fix workqueue list corruption by removing work_list (Kamal Heib) [RHEL-163515]
  - RDMA/core: Avoid exporting module local functions and remove not-used ones (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Remove redundant DMABUF ops check (Kamal Heib) [RHEL-163515]
  - IB/core: Add query_port_speed verb (Kamal Heib) [RHEL-163515]
  - IB/core: Refactor rate_show to use ib_port_attr_to_rate() (Kamal Heib) [RHEL-163515]
  - IB/core: Add helper to convert port attributes to data rate (Kamal Heib) [RHEL-163515]
  - IB/core: Add async event on device speed change (Kamal Heib) [RHEL-163515]
  - IB/cache: update gid cache on client reregister event (Kamal Heib) [RHEL-163515]
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Fix rdma_ucm_query_ib_service_resp struct padding (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Fix leaking the multicast GID table reference (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Kamal Heib) [RHEL-163515]
  - RDMA/core: Reduce cond_resched() frequency in __ib_umem_release (Kamal Heib) [RHEL-163515]
  - RDMA/core: Add new IB rate for XDR (8x) support (Kamal Heib) [RHEL-163515]
  - RDMA/core: Prevent soft lockup during large user memory region cleanup (Kamal Heib) [RHEL-163515]
  - RDMA/restrack: Fix typos in the comments (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Correct typedef and bad line warnings (Kamal Heib) [RHEL-163515]
  - IB/isert: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/iser: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/rdmavt: rdmavt_qp.h: clean up kernel-doc comments (Kamal Heib) [RHEL-163515]
  - RDMA/core: WQ_PERCPU added to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Base cm_id destruction timeout on CMA values (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: fix some kernel-doc warnings (Kamal Heib) [RHEL-163515]
  - RDMA/core: let rdma_connect_locked() call lockdep_assert_held(&id_priv->handler_mutex) (Kamal Heib) [RHEL-163515]
  - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-163515]
  - IB/ipoib: Ignore L3 master device (Kamal Heib) [RHEL-163515]
  - RDMA/core: Use route entry flag to decide on loopback traffic (Kamal Heib) [RHEL-163515]
  - RDMA/core: Squash a single user static function (Kamal Heib) [RHEL-163515]
  - RDMA/core: fix "truely"->"truly" (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support write an event into a CM (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support query resolved service records (Kamal Heib) [RHEL-163515]
  - RDMA/cma: Support IB service record resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Support IB service records resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Add RMPP support for SA queries (Kamal Heib) [RHEL-163515]
  - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-165161]
  - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-171979]
  - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-159000]
  - iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement (Jerry Snitselaar) [RHEL-160189]
  - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (Jerry Snitselaar) [RHEL-160189]
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169737] {CVE-2025-68183}
  - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-147247]
  - x86/platform/uv: Handle deconfigured sockets (Krzysztof Pawlinski) [RHEL-158967]
  - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-164699]
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-164699]
  - net/ipv6: Remove HBH helpers (Michal Schmidt) [RHEL-156515]
  - net: mana: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - gve: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - bnxt_en: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - ice: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx4: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx5e: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on RX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on TX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Introduce payload_len helpers (Michal Schmidt) [RHEL-156515]
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-161120] {CVE-2025-68741}
  - selftests/bpf: Add test to verify the fix of kprobe_write_ctx abuse (Ines Qian) [RHEL-78291]
  - bpf: Fix abuse of kprobe_write_ctx via freplace (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix kprobe multi stacktrace_ips test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace ips test for kprobe_multi/kretprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove hexdump dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove xxd util dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Skip livepatch test when prerequisites are missing (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for livepatch + bpf trampoline (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for exclusive maps (Ines Qian) [RHEL-78291]
  - bpf: Require frozen map for calculating map hash (Ines Qian) [RHEL-78291]
  - bpf: Limit bpf program signature size (Ines Qian) [RHEL-78291]
  - bpf: Fix exclusive map memory leak (Ines Qian) [RHEL-78291]
  - selftests/bpf: Allow selftests to build with older xxd (Ines Qian) [RHEL-78291]
  - bpftool: Allow bpftool to build with openssl < 3 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Update test_tag to use sha256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test widen_imprecise_scalars() with different stack depth (Ines Qian) [RHEL-78291]
  - bpf: account for current allocated stack depth in widen_imprecise_scalars() (Ines Qian) [RHEL-78291]
  - bpf: add _impl suffix for bpf_stream_vprintk() kfunc (Ines Qian) [RHEL-78291]
  - bpf:add _impl suffix for bpf_task_work_schedule* kfuncs (Ines Qian) [RHEL-78291]
  - bpf: Conditionally include dynptr copy kfuncs (Ines Qian) [RHEL-78291]
  - libbpf: Fix powerpc's stack register definition in bpf_tracing.h (Ines Qian) [RHEL-78291]
  - bpf: Sync pending IRQ work before freeing ring buffer (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix redefinition of 'off' as different kind of symbol (Ines Qian) [RHEL-78291]
  - bpf: Fix memory leak in __lookup_instance error path (Ines Qian) [RHEL-78291]
  - selftests: arg_parsing: Ensure data is flushed to disk before reading. (Ines Qian) [RHEL-78291]
  - selftests/bpf: make arg_parsing.c more robust to crashes (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for unpinning htab with internal timer struct (Ines Qian) [RHEL-78291]
  - bpf: Avoid RCU context warning when unpinning htab with internal structs (Ines Qian) [RHEL-78291]
  - libbpf: Fix undefined behavior in {get,put}_unaligned_be32() (Ines Qian) [RHEL-78291]
  - bpf: Finish constification of 1st parameter of bpf_d_path() (Ines Qian) [RHEL-78291]
  - libbpf: Fix missing #pragma in libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for rejection of ALU ops with negative offsets (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - bpf: Reject negative offsets for ALU ops (Ines Qian) [RHEL-78291]
  - libbpf: remove linux/unaligned.h dependency for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_sha256() implementation into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_errstr() into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: remove unused libbpf_strerror_r and STRERR_BUFSIZE (Ines Qian) [RHEL-78291]
  - libbpf: make libbpf_errno.c into more generic libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix realloc size in bpf_get_addrs (Ines Qian) [RHEL-78291]
  - libbpf: Replace AF_ALG with open coded SHA-256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stress test for rqspinlock in NMI (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test case for different expected_attach_type (Ines Qian) [RHEL-78291]
  - bpf: Enforce expected_attach_type for tailcall compatibility (Ines Qian) [RHEL-78291]
  - bpftool: Remove duplicate string.h header (Ines Qian) [RHEL-78291]
  - bpf: Remove duplicate crypto/sha2.h header (Ines Qian) [RHEL-78291]
  - libbpf: Fix error when st-prefix_ops and ops from differ btf (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace map lookup_and_delete_elem test case (Ines Qian) [RHEL-78291]
  - selftests/bpf: Refactor stacktrace_map case with skeleton (Ines Qian) [RHEL-78291]
  - bpf: Add lookup_and_delete_elem for BPF_MAP_STACK_TRACE (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix flaky bpf_cookie selftest (Ines Qian) [RHEL-78291]
  - selftests/bpf: Task_work selftest cleanup fixes (Ines Qian) [RHEL-78291]
  - bpf: Mark kfuncs as __noclone (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe multi write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context ip register change test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context registers changes test (Ines Qian) [RHEL-78291]
  - uprobe: Do not emulate/sstep original instruction when ip is changed (Ines Qian) [RHEL-78291]
  - bpf: Allow uprobe program to change context registers (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for program signing options (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add union argument tests using fexit programs (Ines Qian) [RHEL-78291]
  - bpf: Allow union argument in trampoline based programs (Ines Qian) [RHEL-78291]
  - selftests: bpf: Add tests for signed loads from arena (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - bpf, x86: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - selftests/bpf: add bpf task work stress tests (Ines Qian) [RHEL-78291]
  - selftests/bpf: BPF task work scheduling tests (Ines Qian) [RHEL-78291]
  - bpf: task work scheduling kfuncs (Ines Qian) [RHEL-78291]
  - bpf: extract map key pointer calculation (Ines Qian) [RHEL-78291]
  - bpf: bpf task work plumbing (Ines Qian) [RHEL-78291]
  - bpf: verifier: permit non-zero returns from async callbacks (Ines Qian) [RHEL-78291]
  - bpf: htab: extract helper for freeing special structs (Ines Qian) [RHEL-78291]
  - bpf: extract generic helper from process_timer_func() (Ines Qian) [RHEL-78291]
  - bpf: refactor special field-type detection (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable signature verification for some lskel tests (Ines Qian) [RHEL-78291]
  - bpftool: Add support for signing BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Embed and verify the metadata hash in the loader (Ines Qian) [RHEL-78291]
  - libbpf: Update light skeleton for signing (Ines Qian) [RHEL-78291]
  - bpf: Implement signature verification for BPF programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix selftest verifier_arena_large failure (Ines Qian) [RHEL-78291]
  - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 (Ines Qian) [RHEL-78291]
  - bpftool: Fix UAF in get_delegate_value (Ines Qian) [RHEL-78291]
  - bpftool: Add HELP_SPEC_OPTIONS in token.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: test cases for callchain sensitive live stack tracking (Ines Qian) [RHEL-78291]
  - selftests/bpf: __not_msg() tag for test_loader framework (Ines Qian) [RHEL-78291]
  - bpf: table based bpf_insn_successors() (Ines Qian) [RHEL-78291]
  - bpf: disable and remove registers chain based liveness (Ines Qian) [RHEL-78291]
  - bpf: signal error if old liveness is more conservative than new (Ines Qian) [RHEL-78291]
  - bpf: enable callchain sensitive stack liveness tracking (Ines Qian) [RHEL-78291]
  - bpf: callchain sensitive stack liveness tracking using CFG (Ines Qian) [RHEL-78291]
  - bpf: compute instructions postorder per subprogram (Ines Qian) [RHEL-78291]
  - bpf: declare a few utility functions as internal api (Ines Qian) [RHEL-78291]
  - bpf: remove redundant REG_LIVE_READ check in stacksafe() (Ines Qian) [RHEL-78291]
  - bpf: use compute_live_registers() info in clean_func_state (Ines Qian) [RHEL-78291]
  - bpf: bpf_verifier_state->cleaned flag instead of REG_LIVE_DONE (Ines Qian) [RHEL-78291]
  - bpf: Move the signature kfuncs to helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Return hashes of maps in BPF_OBJ_GET_INFO_BY_FD (Ines Qian) [RHEL-78291]
  - libbpf: Support exclusive map creation (Ines Qian) [RHEL-78291]
  - libbpf: Implement SHA256 internal helper (Ines Qian) [RHEL-78291]
  - bpf: Implement exclusive map creation (Ines Qian) [RHEL-78291]
  - bpf: Update the bpf_prog_calc_tag to use SHA256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf: Enforce RCU protection for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() (Ines Qian) [RHEL-78291]
  - bpf...d_path(): constify path argument (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a test for bpf_cgroup_from_id lookup in non-root cgns (Ines Qian) [RHEL-78291]
  - bpf: Do not limit bpf_cgroup_from_id to current's namespace (Ines Qian) [RHEL-78291]
  - bpftool: Search for tracefs at /sys/kernel/tracing first (Ines Qian) [RHEL-78291]
  - selftests/bpf: More open-coded gettid syscall cleanup (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for arena fault reporting (Ines Qian) [RHEL-78291]
  - selftests: bpf: use __stderr in stream error tests (Ines Qian) [RHEL-78291]
  - selftests: bpf: introduce __stderr and __stdout (Ines Qian) [RHEL-78291]
  - bpf: Report arena faults to BPF stderr (Ines Qian) [RHEL-78291]
  - bpf: core: introduce main_prog_aux for stream access (Ines Qian) [RHEL-78291]
  - bpf: arm64: simplify exception table handling (Ines Qian) [RHEL-78291]
  - bpf: WQ_PERCPU added to alloc_workqueue users (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_unbound_wq with system_dfl_wq (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_wq with system_percpu_wq (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix the issue where the error code is 0 (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_ATOMIC instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Introduce bpf_jit_emit_atomic_ops() to emit atomic instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement bpf_addr_space_cast instruction (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_MEM32 pseudo instructions (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add BPF program dump in veristat (Ines Qian) [RHEL-78291]
  - libbpf: Remove unused args in parse_usdt_note (Ines Qian) [RHEL-78291]
  - bpf, arm64: Remove duplicated bpf_flush_icache() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test kfunc bpf_strcasecmp (Ines Qian) [RHEL-78291]
  - bpf: add bpf_strcasecmp kfunc (Ines Qian) [RHEL-78291]
  - selftests/bpf: add benchmark testing for kprobe-multi-all (Ines Qian) [RHEL-78291]
  - selftests/bpf: skip recursive functions for kprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: move get_ksyms and get_addrs to trace_helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpftool: Add CET-aware symbol matching for x86_64 architectures (Ines Qian) [RHEL-78291]
  - bpftool: Refactor kernel config reading into common helper (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add LPM trie microbenchmarks (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto tests for arm64 (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enrich subtest_basic_usdt case in selftests to cover SIB handling logic (Ines Qian) [RHEL-78291]
  - libbpf: Fix USDT SIB argument handling causing unrecognized register error (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix typos and grammar in test sources (Ines Qian) [RHEL-78291]
  - bpf: Add selftest to check the verifier's abstract multiplication (Ines Qian) [RHEL-78291]
  - bpf: Improve the general precision of tnum_mul (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove may_goto tests from DENYLIST.s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto verifier tests on s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add __arch_s390x macro (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a missing newline to the "bad arch spec" message (Ines Qian) [RHEL-78291]
  - s390/bpf: Add s390 JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove entries from config.{arch} already present in config (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for trampoline.c (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_prog_run_array_cg() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_task_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_iter_run_prog() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_inode_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_cgrp_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: Use sha1() instead of sha1_transform() in bpf_prog_calc_tag() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Tests for is_scalar_branch_taken tnum logic (Ines Qian) [RHEL-78291]
  - bpf: Use tnums for JEQ/JNE is_branch_taken logic (Ines Qian) [RHEL-78291]
  - selftests/bpf: Use vmlinux.h for BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Add documentation to version and error API functions (Ines Qian) [RHEL-78291]
  - s390/bpf: Use direct calls and jumps where possible (Ines Qian) [RHEL-78291]
  - bpftool: Add kernel.kptr_restrict hint for no instructions (Ines Qian) [RHEL-78291]
  - bpf: Add a verbose message when the BTF limit is reached (Ines Qian) [RHEL-78291]
  - bpf: Replace get_next_cpu() with cpumask_next_wrap() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for DEVMAP reuse (Ines Qian) [RHEL-78291]
  - libbpf: Fix reuse of DEVMAP (Ines Qian) [RHEL-78291]
  - bpf: Remove migrate_disable in kprobe_multi_link_prog_run (Ines Qian) [RHEL-78291]
  - selftests/bpf: Copy test_kmods when installing selftest (Ines Qian) [RHEL-78291]
  - bpf: Don't use %pK through printk (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpf: Remove redundant __GFP_NOWARN (Ines Qian) [RHEL-78291]
  - bpf: Standardize function declaration style (Ines Qian) [RHEL-78291]
  - bpf: removed unused 'env' parameter from is_reg64 and insn_has_def32 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test multi_st_ops and calling kfuncs from different programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add multi_st_ops that supports multiple instances (Ines Qian) [RHEL-78291]
  - bpf: Allow struct_ops to get map id by kdata (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for token argument (Ines Qian) [RHEL-78291]
  - bpftool: Add bpftool-token manpage (Ines Qian) [RHEL-78291]
  - bpftool: Add bpf_token show (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test concurrent task local data key creation (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test basic task local data operations (Ines Qian) [RHEL-78291]
  - selftests/bpf: Introduce task local data (Ines Qian) [RHEL-78291]
  - bpf: Allow syscall bpf programs to call non-recur helpers (Ines Qian) [RHEL-78291]
  - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (Charles Haithcock) [RHEL-154387]


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Julien Rische <jrische@redhat.com> - 1.21.3-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145356
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-145358
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145397


author: Julien Rische <jrische@redhat.com> - 1.21.3-11
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171587 RHEL-171595


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Ales Matej <amatej@redhat.com> - 0.73.1-14
changelog:
  - Mark all protected packages as user installed for all transactions (RHEL-128445)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-146507)
  - Clearer error for protected package broken dependencies


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.11-1
changelog:
  - fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Added translation using Weblate (Czech) (pavel.borecki@gmail.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore: Removed getSyspurposeCompliance (jhnidek@redhat.com)
  - chore: Do not call candlepin from GetSyspurposeStatus (jhnidek@redhat.com)
  - chore: Removed SyspurposeComplianceStatusCache (jhnidek@redhat.com)
  - fix: Require findutils in .spec file (jhnidek@redhat.com)
  - feat: Try to cache candlepin server capabilities (jhnidek@redhat.com)
  - solved a conflict in utils.py (jstavel@redhat.com)
  - CCT-744: integration tests for DBus Config object (jstavel@redhat.com)
  - CCT-1029: tests for Register with environment option (jstavel@redhat.com)
  - chore: Small changes in integration-tests/test_syspurpose.py
    (jhnidek@redhat.com)
  - chore: Small fixes in test_register_get_orgs.py (jhnidek@redhat.com)
  - chore: Small fixes of integration-tests/test_register.py (jhnidek@redhat.com)
  - chore: Small tweaks of bash script of integration tests (jhnidek@redhat.com)
  - chore(doc): Improved README.md for integration tests (jhnidek@redhat.com)
  - CCT-743: rebased (jstavel@redhat.com)
  - CCT-1600: fix applied, unified settings.toml to use the same name of
    valid_fields.json (jstavel@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CCT-742: integration tests for DBus Syspurpose object (jstavel@redhat.com)
  - CCT-1029: test for dbus method GetEnvironments (jstavel@redhat.com)
  - CCT-1097: added enable_content for registration tests (jstavel@redhat.com)
  - CCT-745: multi org credentials added (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.12-1
changelog:
  - feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Added translation using Weblate (Finnish) (noreply-addon-
    languages@weblate.org)
  - Translated using Weblate (Czech) (jsefler@redhat.com)
  - fix(test): Fix unit tests of "sub-man status" (jhnidek@redhat.com)
  - RHEL-126153: Update GCP to Google Cloud in log messages (crag@redhat.com)
  - fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
  - ci: bump actions/upload-artifact from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix profile upload because of missing self.cp (suttner@atix.de)
  - feat: added signature type log in TLS handshake (macano@redhat.com)
  - feat: added internal method to get tls handshake info
    (manuelcanorojo@gmail.com)
  - fix: Print list of environments without --set/--list (jhnidek@redhat.com)
  - fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
  - fix(test): Fix unit test of aws (jhnidek@redhat.com)
  - fix(ci): Fixed integration tests of syspurpose (jhnidek@redhat.com)
  - chore: Removed deprecated information from setup.py (jhnidek@redhat.com)
  - chore(ci): Specify permissions for Actions (mhorky@redhat.com)
  - feat: check if --set arg is empty when the environments module is called
    (manuelcanorojo@gmail.com)
  - docs: added missing gettext building dependency (manuelcanorojo@gmail.com)
  - docs: improved man content related to subscription-manager environment
    variables for proxy configuration (manuelcanorojo@gmail.com)
  - ci: bump actions/checkout from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix gobject python package name of sles (suttner@atix.de)
  - Fix SLES build on OBS (suttner@atix.de)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.13-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - chore: Make black-26.* happy again (./) (jhnidek@redhat.com)
  - chore: Update black to 26.3.1 in GitHub action yml file (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./integration-tests) (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./test) (jhnidek@redhat.com)
  - test: Fixed one unit test related to inotify (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./src) (jhnidek@redhat.com)
  - chore: style formatting fixes in rhsmcertd worker (jajerome@redhat.com)
  - fix: updated rhsmcertd to detect when auto-registration is terminated early
    (jajerome@redhat.com)
  - fix: updated rhsmcertd to detect when system is already registered
    (jajerome@redhat.com)
  - chore(deps): bump black from 24.3.0 to 26.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore(deps): bump black from 24.3.0 to 26.3.1 in /integration-tests
    (49699333+dependabot[bot]@users.noreply.github.com)
  - fix: allow system to be registered with broken insights-client
    (jlocash@redhat.com)
  - fix: skip package profile upload when disabled in config
    (jajerome@redhat.com)
  - fix(unit-tests): mock isdir so rhsm_debug tests are env agnostic
    (csnyder@redhat.com)
  - ci: bump actions/upload-artifact from 6 to 7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - fix: Handle non-existence of /var/cache/cloud-what gracefully
    (jhnidek@redhat.com)
  - fix(unit-tests): Fixed unit tests for rhsm-debug (jhnidek@redhat.com)
  - feat: Add /var/cache/cloud-what/ to sos-report (jhnidek@redhat.com)


author: Jason Jerome <jajerome@redhat.com> 1.30.14-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Automatic commit of package [subscription-manager] release [1.30.13-1].
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.0-1
changelog:
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - chore: Format register.py (mhorky@redhat.com)
  - feat: Require SCA for registration (mhorky@redhat.com)
  - doc: Update install and testing guide (stomsa@redhat.com)
  - Fixed spec file to list packages twice (suttner@atix.de)
  - code review comments fixes - update metadata and test. (chambrid@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - Collect Azure VM Name and Resource Group Name as a cloud fact.
    (chambrid@redhat.com)
  - fix: Improve wording in redhat.repo template (glutexo@icloud.com)
  - Remove commands moved to syspurpose (glutexo@icloud.com)
  - doc: drop references to "activate" (ptoscano@redhat.com)
  - feat: Remove import command (zpetrace@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Add option to run smoke tests with fake IMDS servers.
    (jhnidek@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat(ci): Update testing matrix (mhorky@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-7
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
  - nfsrahead: zero-initialise device_info struct (RHEL-158528)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Phil Sutter <psutter@redhat.com> [1.3.0-3.el10]
changelog:
  - src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
  - Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
  - udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
  - data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
  - data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
  - Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
  - expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
  - expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
  - set_elem: Review debug output (Phil Sutter) [RHEL-119650]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.0-1
changelog:
  - Rebase to 0.12.0
    Resolves: RHEL-133421, RHEL-70825, RHEL-130042
  - Add a Requires for crypto-policies instead of a Recommends
    Resolves: RHEL-139045


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Paul Evans <pevans@redhat.com> - 0.32-16
changelog:
  - lsscsi: Fixes for SBP (Firewire) host in transport_h_init() (RHEL-48228)
  - lsscsi: Change default output trailing space after each device entry (RHEL-70371)
  - lsscsi: Transport type FC and FCOE output inconsistencies (RHEL-155569)
  - lsscsi: Device name spacing before major:minor dev dev names exceeds 9 chars (RHEL-157252)


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Patsy Griffin <pfrankli@redhat.com> - 6.06-7
changelog:
  - Break up man-pages-additional-20140218.tar.xz (RHEL-101696)
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.


author: Jakub Čajka <jcajka@redhat.com> - 3:200-1
changelog:
  - Update to latest upstream version
  - Resolves: RHEL-20091, RHEL-20085, RHEL-20556, RHEL-47461 and RHEL-37248


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-58
changelog:
  - Update to upstream 2.1-42. 20231114
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xac up to 0xb4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode from revision 0x2e
      up to 0x32.
  - Addresses CVE-2023-23583


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
    CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58058):
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb6 up to 0xb8;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
      revision 0xf4 up to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfa up to 0xfc;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20241112-1
changelog:
  - Update Intel CPU microcode to microcode-20241112 release, addresses
    CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67335):
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20250211-1
changelog:
  - Update Intel CPU microcode to microcode-20250211 release, addresses
    CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
    CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79184,
    RHEL-79185, RHEL-79188, RHEL-79189, RHEL-79191, RHEL-79193, RHEL-79203):
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
    - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
      revision 0x12c;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000390;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode at revision 0x2b000603;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c000390;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000390;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c000390;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c000390;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000390;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode at revision 0x2b000603;
    - Removal of 06-8f-06/0x10 microcode at revision 0x2c000390;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000390;
    - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4123;
    - Removal of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4123;
    - Removal of 06-ba-08/0xe0 microcode at revision 0x4123;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
      up to 0xd0003f5;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
      up to 0x10002c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
      up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
      up to 0x436;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
      to 0x9;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0x100 up to 0x102;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
      to 0x63;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
      to 0x12c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
      up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4123 up to 0x4124;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
      up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
      up to 0x21000291.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250512-1
changelog:
  - Add a caveat to provide ability to persistently disable SPR-EE updates
    beyond 0x2b0005c0 on systems where absence of latency spikes
    is more important than lack of the latest CVE mitigations.
    (RHEL-94853)
  - Update Intel CPU microcode to microcode-20250512 release, addresses
    CVE-2024-28956, CVE-2025-20103, CVE-2025-20054, CVE-2024-43420,
    CVE-2025-20623, CVE-2024-45332, CVE-2025-24495, CVE-2025-20012
    (RHEL-91227, RHEL-91242, RHEL-91234):
    - Addition of 06-8f-04/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-06/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision
      0xa0000d1;
    - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision
      0x10003a2;
    - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
    - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) at revision 0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in
      intel-ucode/06-c6-02) at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision
      0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003707 up to 0x5003901;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904
      up to 0x7002b01;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5
      up to 0xd000404;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0
      up to 0x10002d0;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up
      to 0x26;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6
      up to 0xca;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb8 up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up
      to 0x3c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up
      to 0x56;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfc up to 0x100;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38
      up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x436 up to 0x437;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up
      to 0xa;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436
      up to 0x437;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0x102 up to 0x104;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up
      to 0x100;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe
      up to 0x102;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up
      to 0x64;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20
      up to 0x24;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330
      up to 0x3000341;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up
      to 0x12f;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12c up to 0x12f;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124
      up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4124 up to 0x4128;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up
      to 0x1d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000291
      up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291
      up to 0x210002a9;


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250812-1
changelog:
  - Update Intel CPU microcode to microcode-20250812 release
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000404
      up to 0xd000410;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002d0
      up to 0x10002e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x24
      up to 0x25;
    - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
      0xa0000d1 up to 0xa000100;
    - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
      0x10003a2 up to 0x10003d0;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000341
      up to 0x3000362;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4128 up to 0x4129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4128
      up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4128 up to 0x4129;
    - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x11f up
      to 0x123;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x118 up
      to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) from revision 0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
      from revision 0x118 up to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
      0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x210002a9 up to 0x210002b3;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002a9
      up to 0x210002b3.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20251111-1
changelog:
  - Fix typo in /usr/share/microcode_ctl/ucode_with_caveats/intel-06-8f-08/config
    (RHEL-123517)
  - Update Intel CPU microcode to microcode-20251111 release (RHEL-128195)
    - Addition of 06-ae-01/0x97 microcode at revision 0x1000273;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000643 up to 0x2b000650;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000401 up to 0x2c000410;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000401 up to 0x2c000410;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000401 up to 0x2c000410;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000401 up to 0x2c000410;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000643 up to 0x2b000650;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x3a up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x3a
      up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x437 up to 0x43a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x437 up to 0x43a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x437 up to 0x43a;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0xa up
      to 0xb;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x437
      up to 0x43a;
    - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
      0xa000100 up to 0xa000124;
    - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
      0x10003d0 up to 0x10003f0;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000362
      up to 0x3000382;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12f up
      to 0x132;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12f up to 0x132;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4129 up to 0x6133;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4129 up to 0x6133;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4129 up to 0x6133;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4129 up to 0x6133;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4129
      up to 0x6133;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4129 up to 0x6133;
    - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x123 up
      to 0x125;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1d up
      to 0x1e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x3a up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x3a up
      to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x3a up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x3a up
      to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x119 up
      to 0x11a;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) from revision 0x119 up to 0x11a;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
      from revision 0x119 up to 0x11a;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
      0x119 up to 0x11a;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x210002b3 up to 0x210002c0;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002b3
      up to 0x210002c0.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20260210-1
changelog:
  - Update Intel CPU microcode to microcode-20260210 release (RHEL-150997)
  - Microcode files (/platform_mask shown) with revision updates (in hex):
    06-6a-06/87: Ice Lake-X: d000410 to d000421
    06-6c-01/10: Ice Lake-D: 10002e0 to 10002f1
    06-7e-05/80: Ice Lake-L: 00ca to 00cc
    06-8c-01/80: Tiger Lake: 00bc to 00be
    06-8c-02/c2: Tiger Lake: 003c to 003e
    06-8d-01/c2: Tiger Lake-H: 0056 to 0058
    06-8f-07/87: Sapphire Rapids: 2b000650 to 2b000661
    06-8f-08/10: Sapphire Rapids with HBM: 2c000410 to 2c000421
    06-8f-08/87: Sapphire Rapids: 2b000650 to 2b000661
    06-97-02/07: Alder Lake: 003d to 003e
    06-97-05/07: Alder Lake: 003d to 003e
    06-9a-03/80: Alder Lake-L: 043a to 043b
    06-9a-04/80: Alder Lake-L: 043a to 043b
    06-9a-04/40: Arizona Beach (Atom C11xx): 000b to 000c
    06-9a-04/80: Alder Lake-L: 043a to 043b
    06-a7-01/02: Rocket Lake: 0064 to 0065
    06-aa-04/e6: Meteor Lake-L: 0025 to 0028
    06-ad-01/20: Granite Rapids-X: a000124 to a000133
    06-ad-01/95: Granite Rapids-X: 10003f0 to 1000405
    06-ae-01/97: Granite Rapids-D: 1000273 to 10002f3
    06-b5-00/80: Arrow Lake-U: 000a to 000d
    06-b7-01/32: Raptor Lake: 0132 to 0133
    06-ba-02/e0: Raptor Lake-P: 6133 to 6134
    06-ba-03/e0: Raptor Lake-P: 6133 to 6134
    06-be-00/19: Gracemont (Alder Lake-N): 001e to 0021
    06-bf-02/07: Raptor Lake-S: 003d to 003e
    06-bf-05/07: Raptor Lake-S: 003d to 003e
    06-c5-02/82: Arrow Lake-H: 011a to 011b
    06-c6-02/82: Arrow Lake: 011a to 011b
    06-cf-02/87: Emerald Rapids: 210002c0 to 210002d3
  Resolves: RHEL-150997


author: Jaroslav Rohel <jrohel@redhat.com> - 3.9.0-1
changelog:
  - Update to 3.9.0
  - Add leaves command - List installed packages not required by other installed packages


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Leo Sandoval <lsandova@redhat.com> - 0.7.2-2
changelog:
  - Rebase several patches from upstream which:
    - Introduce --is-sb-enabled parameter and better return codes
    - Remove unused int_to_b64()
    - Show help on unsupported systems
  - Resolves: #RHEL-90836
  - Resolves: #RHEL-90839


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Vit Mojzis <vmojzis@redhat.com> - 0.30.0-21
changelog:
  - Improve "help/usage" message (RHEL-38477)
  - libnetlabel: fix a header file guard typo
  - netlabel-config: Fix IPv4/IPv6 addresses parsing in nlbl_reset_unlbl()
  - netlabel: Update man page to clarify SELinux labeling
  - tests: add a basic CALIPSO pass through test
  - doc: fix a typo in the netlabel-config man page


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
changelog:
  - Rebase to OpenSC 0.27.1 fixing outstanding security reports and bring in new PQC features (RHEL-151598)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-21
changelog:
  - Implement obtaining Kerberos tickets on behalf of user on SSH authentication
    Resolves: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
changelog:
  - Remove recommendation of p11-kit
    Resolves: RHEL-139070
  - Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
    in sshd_config should count when defined multiple times
    Resolves: RHEL-150365
  - Fix mistracking of MaxStartups process exits in some situations
    Resolves: RHEL-121768
  - Fix GSSAPI authentication indicator issues found by AI
    Resolves: RHEL-154309
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155813


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
changelog:
  - Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
    Resolves: RHEL-88565
  - Fix duplicate audit log entry when destroying ed25519 private keys
    Resolves: RHEL-46782
  - Fix typo in GSSAPIProxyS4U2Services
    Related: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-25
changelog:
  - Fix static analysis issues
    Resolves: RHEL-163365
  - Ssh should refuse connection when mlkem kex is specified in FIPS
    Resolves: RHEL-155178
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164740
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166239
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166223
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166191
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166207


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-26
changelog:
  - Improve keytab detection when obtaining Kerberos tickets on behalf of user on SSH authentication
    Related: RHEL-92932
  - Add missing NULL check for server key generation in ML-KEM hybrids
    Resolves: RHEL-168106


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-122599
    Resolves: RHEL-141987
    Resolves: RHEL-142009
    Resolves: RHEL-142022
    Resolves: RHEL-142026
    Resolves: RHEL-142030
    Resolves: RHEL-142034
    Resolves: RHEL-142038
    Resolves: RHEL-142042
    Resolves: RHEL-142046
    Resolves: RHEL-142050
    Resolves: RHEL-142054


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.81-1
changelog:
  - Update to latest upstream version with better support for latest OSes,
    closes rhbz#2090942
  - Remove 'which' dependency, closes rhbz#2111531
  - Add support for detecting EFI shell binary (shell.efi), closes rhbz#2101953
  - Add support for Win 11 on ARM 64 systems


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.9.0-4
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Paul Howarth <paul@city-fan.org> - 1:0.240-1
changelog:
  - Update to 0.240
    - Use Test::More::isnt() instead of Test::More::isn't in tests, which is
      deprecated, as ' isn't allowed as package separator in an upcoming version
      of Perl (GH#13)


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Jan Rybar <jrybar@redhat.com> - 4.0.4-11
changelog:
  - ps: etime overflow reappeared with rewritten library
  - uptime, w: report user sessions only; upstream backport of 734930e47
  - Resolves: RHEL-60826
  - Resolves: RHEL-141839


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat
  Related: RHEL-167886, RHEL-168120


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-167886, RHEL-168120


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: John Kacur <jkacur@redhat.com> - 0.7.4-1
changelog:
  - Rebase to upstream version 0.7.4
  - Convert to pyproject-based build using pyproject.toml
  - Remove python3-six dependency (no longer needed)
  - Remove distutils patch (no longer needed with pyproject build)
  Resolves: RHEL-114904


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Miro Hrončok <mhroncok@redhat.com> - 2.32.4-1
changelog:
  - Update to 2.32.4
  - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs
  Resolves: RHEL-105460


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Miro Hrončok <mhroncok@redhat.com> - 1.26.19-3
changelog:
  - Security fix for CVE-2025-66471
  - Security fix for CVE-2025-66418
  - Security fix for CVE-2026-21441
  Resolves: RHEL-142737, RHEL-137215, RHEL-142755


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Jiri Hnidek <jhnidek@redhat.com> 8-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Various fixes in state management (tomatus777@gmail.com)
  - Upgrade to Patternfly 6 (tomatus777@gmail.com)
  - make eslint happy (tomatus777@gmail.com)
  - test: mock-insights should have /host_exists endpoint (pkoprda@redhat.com)
  - build: switch to esbuild (tomatus777@gmail.com)
  - build: fix installation of sub-man with newer Fedora (ptoscano@redhat.com)
  - refactor: Remove system purpose status (pkoprda@redhat.com)
  - refactor: Display status consistent with subscription-manager
    (pkoprda@redhat.com)
  - refactor: Simplify displaying of installed products (pkoprda@redhat.com)
  - Stop using deprecated translatable for html (jvanderwaa@redhat.com)


author: mhorky <mhorky@redhat.com> 9-1
changelog:
  - remove src/po.js (tomatus777@tomatus.cz)
  - translate placeholder strings (tomatus777@tomatus.cz)
  - index.html: fix import order and make localization work again (tomatus777@tomatus.cz)
  - Fixes: RHEL-111937


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: mhorky <mhorky@redhat.com> 9-1
changelog:
  - remove src/po.js (tomatus777@tomatus.cz)
  - translate placeholder strings (tomatus777@tomatus.cz)
  - index.html: fix import order and make localization work again (tomatus777@tomatus.cz)
  - Fixes: RHEL-111937

    (tomatus777@tomatus.cz)


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-5
changelog:
  - Resolves: RHEL-169137 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Jakub Martisko <jamartis@redhat.com> - 4.9-5
changelog:
  - lib/dfa.c: Increase the maximum size of the transitions table
  - After changes introduced between sed 4.2 and 4.4, some regexps
    started to hit the table size limits. This lead to repeated deletion
    and rebuilding of the table, leading to massive performance drops.
    While the core issue is still present, this change should at least
    help by moving the threshold of the regexp complexity that triggers the 
    table rebuilds.
  - Resolves: RHEL-144027


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.9-1
changelog:
  - Allow systemd-oomd watch tmpfs dirs
  Resolves: RHEL-106998
  - Allow systemd-oomd watch dbus pid sock files
  Resolves: RHEL-106998
  - Allow userdomain to connect to systemd-oomd over a unix socket
  Resolves: RHEL-106998
  - Allow 'oomctl dump' to interact with systemd-oomd
  Resolves: RHEL-106998
  - Basic functionality for systemd-oomd
  Resolves: RHEL-106998
  - Basic enablement for systemd-oomd
  Resolves: RHEL-106998
  - Remove permissive domains
  Resolves: RHEL-107038
  - Allow iptables manage its private fifo_files in /tmp
  Resolves: RHEL-83775
  - Allow ras-mc-ctl write to sysfs files
  Resolves: RHEL-86926
  - Allow nfs generator create and use netlink sockets
  Resolves: RHEL-111556
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.10-1
changelog:
  - Allow sshd-auth read generic proc files
  Resolves: RHEL-107732
  - Allow sshd-auth read and write user domain ptys
  Resolves: RHEL-107732
  - Allow sshd-session get attributes of sshd vsock socket
  Resolves: RHEL-107732
  - Adjust guest and xguest users policy for sshd-session
  Resolves: RHEL-107732
  - Update files_search_base_file_types()
  Resolves: RHEL-107732
  - Allow sshd-session read cockpit pid files
  Resolves: RHEL-107732
  - Add default contexts for sshd-seesion
  Resolves: RHEL-107732
  - Define types for new openssh executables
  Resolves: RHEL-107732
  - Allow ras-mc-ctl get attributes of the kmod executable
  Resolves: RHEL-102535
  - Define file equivalency for /var/opt
  Resolves: RHEL-116512
  - Update specfile triggers for DSP modules
  Resolves: RHEL-116044


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.11-1
changelog:
  - Allow iotop stream connect to systemd-userdbd
  Resolves: RHEL-105481
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-107589
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-124855
  - Allow nfsidmapd search virt lib directories
  Resolves: RHEL-68722
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.12-1
changelog:
  - Update kernel_secretmem_use()
  Resolves: RHEL-116154
  - Allow system_mail_t read apache system content conditionally
  Resolves: RHEL-114970
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-119619
  - Update specfile trigger for smartmontools
  Resolves: RHEL-113167


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.13-1
changelog:
  - Add the rpm_signal() interface
  Related: RHEL-107589
  - Allow tuned_t use its private tmpfs files
  Related: RHEL-107589
  - Allow samba-bgqd send to smbd over a unix datagram socket
  Resolves: RHEL-93731
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041
  - Confine redfish_finder - host api discovery service
  Resolves: RHEL-50299
  - Update policy for dhcpc_hook_t
  Resolves: RHEL-113937
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  Resolves: RHEL-113937
  - Allow systemd to map files under /sys
  Resolves: RHEL-132638


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.14-1
changelog:
  - Update ktls policy
  Resolves: RHEL-123737
  - Update policy for redfish-finder
  Resolves: RHEL-50299
  - Allow sshd-session read, write, and map ica tmpfs files
  Resolves: RHEL-138247
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  Resolves: RHEL-127721
  - Allow stalld map sysfs files
  Resolves: RHEL-135512
  - Allow aide get attributes of a filesystem with extended attributes
  Resolves: RHEL-121479
  - Label miscellaneous /dev/papr-* devices
  Resolves: RHEL-129839
  - Allow KDE Plasma Login Manager to function as a display manager
  Resolves: RHEL-135676
  - Update specfile trigger for openwsmand
  Resolves: RHEL-133024


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.15-1
changelog:
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-77047
  - Allow stap server read virtual memory sysctls
  Resolves: RHEL-114104
  - Allow sshd-session inherit limits from its parent process
  Resolves: RHEL-136673
  - Allow sshd noatsecure on sshd-session execution
  Resolves: RHEL-138247
  - Allow sshd-net read and write to sshd vsock socket
  Related: RHEL-138247


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.16-1
changelog:
  - Allow sshd-session inherit limits from its parent sshd process
  Resolves: RHEL-136673
  - Revert "Allow sshd-session inherit limits from its parent process"
  Resolves: RHEL-136673
  - Allow tlshd write generic certificates
  Resolves: RHEL-123737
  - Allow systemd-hostnamed to create its Varlink socket
  Resolves: RHEL-139385
  - Update gpg_role() interface with unix_stream_socket permissions
  Resolves: RHEL-128555
  - Label /etc/aliases.cdb with etc_aliases_t
  Resolves: RHEL-109976
  - Add aliases.lmdb to mta_filetrans_named_content()
  Resolves: RHEL-140884
  - Update policy for bootupd
  Resolves: RHEL-141391


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.17-1
changelog:
  - Allow rhsmcertd read anaconda run files
  Resolves: RHEL-141391
  - Allow mdadm to use CAP_BPF during RAID monitoring
  Resolves: RHEL-135765
  - Allow mdadm the CAP_SYS_PTRACE capability
  Resolves: RHEL-135765
  - Allow staff and sysadm execute iotop using sudo
  Resolves: RHEL-134940
  - Allow kernel_t to read/write all domains' pipes
  Resolves: RHEL-124442
  - Allow nfsd_t domain setuid and setgid capability for rpc.mountd
  Resolves: RHEL-148107


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.18-1
changelog:
  - Allow NetworkManager list bpf directories
  Resolves: RHEL-142171
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  Resolves: RHEL-114886
  - Allow pkcsslotd read files in /proc and /sys
  Resolves: RHEL-130812
  - Allow pkcsslotd map its private tmpfs files
  Resolves: RHEL-130812
  - Allow tlshd communication to unconfined_t over a tcp socket
  Resolves: RHEL-125106
  - Label /run/insights-client.ppid with insights_client_run_t
  Resolves: RHEL-146687
  - Allow NM nvme dispatcher script start systemd services
  Resolves: RHEL-140760
  - Allow tlshd write generic certificate dirs
  Resolves: RHEL-127023
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  Resolves: RHEL-121479
  - Allow plasma login manager stop login services
  Resolves: RHEL-140911
  - Rebuild selinux policy after installation of the extra package
  Resolves: RHEL-135875
  Resolves: RHEL-143926
  - Move triggerin scriptlets to the parent packages
  Resolves: RHEL-141813
  - Rebuild policy before running {binsbin|varrun}-convert.sh
  Resolves: RHEL-141813


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.19-1
changelog:
  - Label the greetd login manager framework as a display manager
  Resolves: RHEL-147638
  - Allow sysadm user connect to lvm over a unix stream socket
  Resolves: RHEL-153729
  - Allow virtqemud map vhost net device
  Resolves: RHEL-141541
  - Allow virtqemud_t send kill signal to svirt_tcg_t
  Resolves: RHEL-69913
  - Allow virtqemud_t get priority of a svirt_t process
  Resolves: RHEL-69920
  - Dontaudit tlshd write generic certificate dirs
  Resolves: RHEL-152619
  - Allow redis_t to create netlink_rdma_socket
  Resolves: RHEL-154814
  - Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
  Resolves: RHEL-140212


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.20-1
changelog:
  - Do not backslash-escape underscores in file context specifications
  Resolves: RHEL-140921
  - Policy for go-fdo-server
  Resolves: RHEL-145754
  - Allow iptables_t read state of some processes
  Resolves: RHEL-164304
  - Allow iptables read firewalld process state
  Resolves: RHEL-164304
  - Allow systemd-machined read virtd process state
  Resolves: RHEL-164304
  - Allow systemd-machined read svirt process state
  Resolves: RHEL-164304
  - Label /dev/HID-SENSOR-.* with hid_sensor_device_t
  Resolves: RHEL-168417
  - Allow NetworkManager_dispatcher_nvme_t check status of systemd services
  Resolves: RHEL-164864
  - Dontaudit setroubleshootd read root's home files like .rpmmacros
  Resolves: RHEL-142548
  - Allow systemd-tmpfiles to adjust resource limits
  Resolves: RHEL-139855


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.21-1
changelog:
  - Allow sys_resource on execution of generic executables conditionally
  Resolves: RHEL-141858
  - Label bootloader-migrate-generator with coreos_bootloader_migrate_generator_exec_t
  Resolves: RHEL-156457
  - Label /run/coreos with coreos_installer_var_run_t
  Resolves: RHEL-156456
  - Add systemd_create_generator_unit_file() and systemd_write_generator_unit_file()
  Resolves: RHEL-156456
  - Allow setroubleshoot_fixit_t to touch /.autorelabel and reboot
  Resolves: RHEL-170267
  - Remove 14 permissive domains
  Resolves: RHEL-166039
  - Do not audit iptables attempts to read other process state
  Resolves: RHEL-164304


author: Martin Osvald <mosvald@redhat.com> - 2.14.2-1
changelog:
  - sysusers.d: add script and configuration fragments for groups
  - passwd: align 'nologin' shell path with systemd defaults
  - uidgid: assign GID 101 for 'ssh_keys' group
  - uidgid: assign UID/GID 114 for 'polkitd'
  - passwd: update GECOS field for 'root' user
  - services: remove commas from aliases for ircu-3
  - setup.spec: throw away newaliases output again


author: Martin Osvald <mosvald@redhat.com> - 2.14.3-1
changelog:
  - sysusers.d: add script and generate configuration fragment for users
  - Add fallback to hostname determination for csh.login (rhbz#2079768)
  - Remove ancient Conflicts
  - files: mark /run/motd as an ephemeral ghost entry


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Paul Evans <pevans@redhat.com> - 1.48-8
changelog:
  - rescan-scsi-bus.sh: Correctly read RMB bit on enquiry (RHEL-153277)
  - rescan-scsi-bus.sh: Replace 'which' with build in 'command -v' (RHEL-70693)
  - sg_safte: update short option of version (RHEL-125869)
  - sg_rdac: accept --help or -h without error (RHEL-69439)
  - sg_inq: fix issing output fields in --export format (RHEL-119246, RHEL-123748)
  - sg_inq: re-add Unit serial number field (RHEL-119246, RHEL-123748)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-11
changelog:
  - passwd.c: lock, open, close and unlock passwd database
    Resolves: RHEL-151055
    Resolves: RHEL-150955


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Alejandro López <allopez@redhat.com> - 1.9.17-3.p2
changelog:
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-4.p2
changelog:
  - Bump release number
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Leo Sandoval <lsandova@redhat.com> - 6.04-0.32
changelog:
  - Bump version and include previous resolves ticket number on commit message
  - Resolves: #RHEL-51170


author: Josue Hernandez <josherna@redhat.com> - 6.04-0.35
changelog:
  - Update zlib version to zlib-1.2.11
  - Resolves: #RHEL-156979
  - Resolves: CVE-2022-37434 CVE-2018-25032 CVE-2016-9840
  - Resolves: CVE-2016-9841 CVE-2016-9842 CVE-2016-9843


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-22
changelog:
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
  - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
  - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
  - hwdb: update rules (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - Add Razer Cobra mouse to hwdb (RHEL-72702)
  - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
  - hwdb: sort SDR devices by vendor name (RHEL-72702)
  - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
  - hwdb: run "update-hwdb" (RHEL-72702)
  - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
  - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
  - hwdb: add Airspy devices (RHEL-72702)
  - hwdb: add more devices (RHEL-72702)
  - hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
  - hwdb: add missing Ettus Research B200 rule (RHEL-72702)
  - hwdb: add LimeSDR XTRX devices (RHEL-72702)
  - hwdb: add HydraSDR RFOne (RHEL-72702)
  - hwdb: add SDRplay devices (RHEL-72702)
  - hwdb: update (RHEL-72702)
  - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
  - Add Nulea M501 trackball to hwdb (RHEL-72702)
  - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
  - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
  - remove bonus line (RHEL-72702)
  - hwdb: drop trailing whitespace (RHEL-72702)
  - remove Nulea M501 usb entry from hwdb (RHEL-72702)
  - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702)
  - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702)
  - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702)
  - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702)
  - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702)
  - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702)
  - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702)
  - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702)
  - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702)
  - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702)
  - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702)
  - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702)
  - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702)
  - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702)
  - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702)
  - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702)
  - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702)
  - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702)
  - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702)
  - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702)
  - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702)
  - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702)
  - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702)
  - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702)
  - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard   device as set 1 (appears as raw set 2) or as set 2 (appears as   translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for   posterity. (RHEL-72702)
  - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702)
  - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702)
  - hwdb: keyboard: uppercase apple id (RHEL-72702)
  - integritysetup: Add support for hmac-sha512 (RHEL-27852)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852)
  - core: increment start limit counter only when we can start the unit (RHEL-115032)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032)
  - test: extend start limit interval (RHEL-115032)
  - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029)
  - man: fix typo (RHEL-143029)
  - test: fix test with -Dnetworkd=false (RHEL-143029)
  - ci: run apt-get update before running mkosi (RHEL-115001)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-23
changelog:
  - test-journal-dump: dump the headers of journal files (RHEL-106795)
  - journal: store counts, not byte sizes, in table size constants (RHEL-106795)
  - journal: treble field hash table size (RHEL-106795)
  - nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
  - user-classification: add new "foreign" UID range (RHEL-143036)
  - userdb: synthesize stub user records for the foreign UID (RHEL-143036)
  - dissect: add new --shift command (RHEL-143036)
  - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
  - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
  - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
  - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
  - sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
  - user-record: add helper for dispatching a disposition mask (RHEL-143036)
  - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036)
  - user-record: add some helpers for working with UserDBMatch (RHEL-143036)
  - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
  - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
  - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
  - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
  - update TODO (RHEL-143036)
  - JSON User/Group records: Add properties for UUIDs (RHEL-143036)
  - userdb: add support for printing the UUID from user and group records (RHEL-143036)
  - userdb: add support for looking up users or groups by uuid. (RHEL-143036)
  - userdbctl: add --uuid filtering option (RHEL-143036)
  - userdbctl: add missing --uuid= to --help text (RHEL-143036)
  - userdb: fix typo (RHEL-143036)
  - man/userdbctl: fixup version info (RHEL-143036)
  - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
  - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
  - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
  - logind: support deserializing session leader through pidfdid (RHEL-53112)
  - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
  - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
  - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219)
  - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-24
changelog:
  - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-155454)
  - ci: add bpftool workaround to codeql job too (RHEL-155454)
  - ci: fix workaround about bpftool for codeql (RHEL-155454)
  - ci: add bpftool workaround to coverity too (RHEL-155454)
  - Revert "man: mention RHEL documentation in systemctl's man page" (RHEL-155805)
  - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-155396)
  - cgroup: port some code over to path_startswith_full() (RHEL-155396)
  - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-155396)
  - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-155396)
  - core/cgroup: avoid one unnecessary strjoina() (RHEL-155396)
  - core: validate input cgroup path more prudently (RHEL-155396)
  - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-158303)
  - nspawn: normalize pivot_root paths (RHEL-158303)
  - udev: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-158354)
  - udev: ensure tag parsing stays within bounds (RHEL-158354)
  - udev: fix review mixup (RHEL-158354)
  - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev-builtin-net-id: print cescaped bad attributes (RHEL-158354)
  - core: only activate transaction that contain useful jobs (RHEL-143728)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-168098)
  - string-util: introduce strprepend() helper (RHEL-143028)
  - missing: add quotactl_fd() wrapper (RHEL-143028)
  - homed: always use quotactl_fd() if its available (RHEL-143028)
  - pid1: add GracefulOptions= setting to .mount units (RHEL-143028)
  - pid1: enable usrquota support on /dev/shm (RHEL-143028)
  - units: enable usrquota support on /tmp/ (RHEL-143028)
  - nspawn: enable usrquota support on /tmp/ and /dev/shm/ (RHEL-143028)
  - nspawn: downgrade log message about usrquota to debug (RHEL-143028)
  - mount-setup: drop outdated comment (RHEL-143028)
  - mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too (RHEL-143028)
  - devnum-util: add macros to safely convert dev_t to pointers and back (RHEL-143028)
  - user-record: add fields for setting limits on /tmp/ and /dev/shm/ (RHEL-143028)
  - user-runtime-dir: some smaller modernizations/refactorings (RHEL-143028)
  - user-runtime-dir: enforce /tmp/ and /dev/shm/ quota (RHEL-143028)
  - homectl: add support for configuring tmpfs limits (RHEL-143028)
  - test: add test case for tmpfs quota logic + PAMName= ask-password logic (RHEL-143028)
  - update TODO (RHEL-143028)
  - core/dbus-service: fix alignment (RHEL-143028)
  - core/mount: filter out "fail" option as well (RHEL-143028)
  - core/mount: check parameters_fragment first in mount_enter_(re)mounting() (RHEL-143028)
  - core/mount: report accurate can_start and can_reload (RHEL-143028)
  - core/mount: trivial coding style cleanups (RHEL-143028)
  - core/dbus-mount: add missing ReloadResult and CleanResult properties (RHEL-143028)
  - bus-unit-util: add missing assertions (RHEL-143028)
  - core/mount: rework GracefulOptions= to be just x-systemd.graceful-option= (RHEL-143028)
  - mountpoint-util: assume fsopen() works in mount_option_supported() (RHEL-143028)
  - core/mount: log only once about fs not supporting new mount API (RHEL-143028)
  - user-runtime-dir: correct quota size calculation (RHEL-143028)
  - test-display-quota: add a little helper binary to show quota on tmpfs (RHEL-143028)
  - TEST-46-HOMED: check for support on /dev/shm and /tmp separately (RHEL-143028)
  - TEST-46-HOMED: conditionally skip usrquota tests (RHEL-143028)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-25
changelog:
  - core: cleanup unit's dropin directories from global cache (RHEL-171097)
  - libsystemd: drop "const" decorators on public inline functions (RHEL-155454)
  - sd-id128: Drop _sd_const_ from sd_id128_in_setv() (RHEL-155454)
  - test: wrap mount/umount when running with sanitizers (RHEL-155454)
  - test: wrap even more binaries when running with sanitizers (RHEL-155454)
  - test: temporarily ignore sanitizer warning about blocked ptrace() (RHEL-155454)
  - test: slightly reduce the performance/memory overhead for wrapped binaries (RHEL-155454)
  - fstab-generator: support swap on network block devices (RHEL-128058)
  - man: add tags for the next few versions (RHEL-128058)
  - test: drop some extraneous whitespaces (RHEL-155021)
  - shared: fix segfault when processing matchHostname field (RHEL-155021)
  - shared: don't exclude valid min/max values for cgroup weight fields (RHEL-155021)
  - shared: don't leak memory from array fields (RHEL-155021)
  - man: fix short option for userdbctl's --from-file= (RHEL-155021)
  - fuzz: add a fuzzer for user records (RHEL-155021)
  - user-record: extract user_record_image_is_blockdev() common helper (RHEL-155021)
  - udev/net_id: introduce naming scheme for RHEL-9.9 (RHEL-72814)
  - udev/net_id: introduce naming scheme for RHEL-10.3 (RHEL-72814)
  - Tag accel devices for uaccess-render (RHEL-153030)
  - udev: tag kfd devices for xaccess-render (#40888) (RHEL-153030)


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-8
changelog:
  - Backport upstream changes to jailify extraction directory
    Includes related gnulib changes to add openat2
    Fixes CVE-2025-45582


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-10
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)
  - upstream fix for savannah bug 64581, commit 51142180
    (crash with TAR_OPTIONS)
  - Backport fix for regression in the --no-overwrite-dir option
    Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
    in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-11
changelog:
  - Add upstream patch to improve error message for --one-top-level
    with absolute path (unsupported as a result of CVE-2025-45582 fix)


author: David Cantrell <dcantrell@redhat.com> - 1:1.11.1-3
changelog:
  - Use %license for the COPYING file in the %files section
  - Convert the License tag to an SPDX expression


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1:1.6.0-8
changelog:
  - migrated to SPDX license
  - resolves: rhbz#2219549* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.6.0-5

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild


author: John B. Wyatt IV <jwyatt@redhat.com> - 0.19-11
changelog:
  - Fix syntax warnings
  - Switch RHEL10 pkg to use autosetup like c9s does in tuna, -v makes it more verbose
  Resolves: RHEL-106288


author: John B. Wyatt IV <jwyatt@redhat.com> - 0.19-12
changelog:
  - Reverting the previous syntax warnings fix patch and replacing it with the
  tuna-Fix-string-syntax-warnings-with-raw-strings patch.
  Resolves: RHEL-106288


author: John Kacur <jkacur@redhat.com> - 0.19-14
changelog:
  - Update man page with cpu_power command
  - Fix show_threads -t and show_irqs -q to not match everything if no match
  - Fix run command failing to apply BATCH policy
  - Add -U and -K to the move command
  Resolves: RHEL-107914 RHEL-106070 RHEL-93776 RHEL-106068


author: John Kacur <jkacur@redhat.com> - 0.20-1
changelog:
  - Update to upstream version 0.20
  - Convert spec file to use pyproject-rpm-macros
  - Use %pyproject_buildrequires, %pyproject_build, %pyproject_install
  - Use %pyproject_save_files for automatic file list generation
  - Remove oscilloscope (unsupported in RHEL)
  Resolves: RHEL-114902, RHEL-83080


author: John Kacur <jkacur@redhat.com> - 0.20-2
changelog:
  - Add python3-pip, python3-setuptools, python3-wheel BuildRequires
  - Delete setup.py in %prep so pyproject.toml build is used
  - Compress man page during %prep similar to rteval
  - Install tuna script and compressed man page explicitly
  Resolves: RHEL-114902


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94809
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
    - functions: make calc_isolated_cores return CPU ranges
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: disable appropriate P-State drivers
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    - gui: fix the profile deleter script


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.27.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-123608
    - cpu-partitioning: autodetect dracut hook directory, systemd workaround
      resolves: RHEL-40619
    - openshift: optimize TCP settings for high throughput and low latency
    - profiles: Set boost=1 in *-performance profiles
    - sap-hana: force latency to 70 us, not to C-states
      resolves: RHEL-142285
    - man: fixed instance_acquire_devices example in tuned-adm man
      resolves: RHEL-90575
    - spec: use correct python interpreter for documentation installation
    - sysctl: add reapply_sysctl_exclude option
    - ppd: ask tuned recommend for base profile


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84740)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Patsy Griffin <patsy@redhat.com> - 2026a-1
changelog:
  - Update to tzdata-2026a (RHEL-154023)
    - Correct the transition times for Moldova.
    - The POSIXRULES option is now obsolete.


author: Patsy Griffin <patsy@redhat.com> - 2026b-1
changelog:
  - Update to tzdata-2026b (RHEL-170780)
    - British Columbia’s 2026-03-08 spring forward is expected
      to be its last transition as it moves to permanent -07.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 6.0-67
changelog:
  - zipinfo: remove the extra %c that caused invalid reads
  - zipinfo: fix the whitespaces in the output
  - Zipbombs: Port Another patch, orinally made by Mark Adler
  - https://github.com/madler/unzip/commit/af0d07f95809653b669d88aa0f424c6d5aa48ba0
    Resolves: RHEL-59972
    Resolves: RHEL-6286


author: - Chung Chung <cchung@redhat.com> - 8.3.2.1-1
changelog:
  - Add vdocalculatesize utility.
  - Improve handling of corrupt index metadata.
  - Resolves: RHEL-129392


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-10
changelog:
  - Resolves: RHEL-159617 vim: Vim: Arbitrary code execution via command injection
    in glob() function


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fixc causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fix causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-1
changelog:
  - Update to version 2.11 (RHEL-59010)
  - backport fix for known regression on brcmfmac (rhbz#2302577)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-4
changelog:
  - Use pkcs11 provider to resolve PKCS11 URIs (RHEL-86951)
  - De-clutter syslog from CTRL-EVENT-SIGNAL-CHANGE messages (RHEL-71344)


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


