# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-250.el10]
changelog:
  - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189660] {CVE-2026-23168}
  - PCI/TPH: Expose pcie_tph_get_st_table_loc() (CKI Backport Bot) [RHEL-186643]
  - PCI/TPH: Expose pcie_tph_get_st_table_size() (CKI Backport Bot) [RHEL-186643]
  - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-179033]
  - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-183513]
  - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-183513] {CVE-2026-31554}
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-183513] {CVE-2026-31555}
  - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-183513] {CVE-2026-23415}
  - tools: ynl: cli: order set->list conversion in JSON output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-route sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-addr sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert ethtool sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert devlink sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add netdevsim wrapper library for YNL tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert tc and tc-filter-add samples to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-link sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert ovs sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert netdev sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: move samples to tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add uns-admin-perm to genetlink (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Fill out operation attributes (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Add sub-messages (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Update attribute sets (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Add definitions (Hangbin Liu) [RHEL-156508]
  - doc/netlink: netlink-raw: Add max check (Hangbin Liu) [RHEL-156508]
  - tools: ynl: produce kselftest-list.txt from tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: support INSTALL_PATH in the tests Makefile (Hangbin Liu) [RHEL-156508]
  - tools: ynl: don't install tests in /usr/bin/ (Hangbin Liu) [RHEL-156508]
  - tools: ynl: rename TESTS variable to TEST_PROGS (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: make the output compact (Hangbin Liu) [RHEL-156508]
  - tools/net/ynl: Makefile's install target now installs ynltool (Hangbin Liu) [RHEL-156508]
  - tools/net/ynl: suppress jobserver warning in ynltool version detection (Hangbin Liu) [RHEL-156508]
  - tools: ynl: render event op docs correctly (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: print reply in combined format if possible (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: extract the event/notify handling in --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: factor out --list-attrs / --doc handling (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: add --doc as alias to --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: improve --help (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: wrap the doc text if it's long (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: introduce formatting for attr names in --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: Fix remaining pylint warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: fix pylint None, type, dict, generators, init (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: fix pylint warnings for returns, unused, redefined (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: suppress unhelpful pylint messages (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint issues in ynl_gen_rst (Hangbin Liu) [RHEL-156508]
  - tools: ynl: ethtool: fix pylint issues (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix logic errors reported by pylint (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint global variable related warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint misc warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint dict, indentation, long lines, uninitialised (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint exception warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint redefinition, encoding errors (Hangbin Liu) [RHEL-156508]
  - tools: ynl: pylint suppressions and docstrings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: don't install tests (Hangbin Liu) [RHEL-156508]
  - netlink: specs: netdev: clarify the page pool API a little (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix build on systems with old kernel headers (Hangbin Liu) [RHEL-156508]
  - ynl: samples: Fix spelling mistake "failedq" -> "failed" (Hangbin Liu) [RHEL-156508]
  - ynl: fix schema check errors (Hangbin Liu) [RHEL-156508]
  - ynl: fix a yamllint warning in ethtool spec (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add a lint makefile target (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add schema checking (Hangbin Liu) [RHEL-156508]
  - netlink: specs: add big-endian byte-order for u32 IPv4 addresses (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add YNL test framework (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen: add function prefix argument (Hangbin Liu) [RHEL-156508]
  - ynl: samples: add tc filter example (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Display enum values in --list-attrs output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Parse nested attributes in --list-attrs output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Add --list-attrs option to show operation attributes (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: ignore *.d deps files (Hangbin Liu) [RHEL-156508]
  - netlink: specs: support ipv4-or-v6 for dual-stack fields (Hangbin Liu) [RHEL-156508]
  - tools: ynl: Add MAC address parsing support (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: remove -lmnl from link flags (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: correct install in Makefile (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add traffic distribution balance (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add qstats support (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add page-pool stats (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: create skeleton for the C command (Hangbin Liu) [RHEL-156508]
  - tools: ynl: call nested attribute free function for indexed arrays (Hangbin Liu) [RHEL-156508]
  - netlink: specs: netdev add missing stats to qstat-get (Hangbin Liu) [RHEL-156508]
  - tools: ynl: rework the string representation of NlError (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix indent issues in the main Python lib (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix string attribute length to include null terminator (Hangbin Liu) [RHEL-156508]
  - tools: ynl: avoid print_field when there is no reply (Hangbin Liu) [RHEL-156508]
  - netlink: specs: explicitly declare block scalar strings (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: fix if-idx attribute type (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fou: change local-v6/peer-v6 check (Hangbin Liu) [RHEL-156508]
  - netlink: specs: enforce strict naming of properties (Hangbin Liu) [RHEL-156508]
  - netlink: specs: tc: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: rt-link: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: ovs_flow: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: nfsd: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - docs: netlink: index.rst: add a netlink index file (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix a couple of yamllint warnings (Hangbin Liu) [RHEL-156508]
  - netlink: specs: wrap long doc lines (>80 chars) (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up indentation errors (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up truthy values (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up spaces before comments (Hangbin Liu) [RHEL-156508]
  - netlink: specs: clean up spaces in brackets (Hangbin Liu) [RHEL-156508]
  - netlink: specs: add doc start markers to yaml (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: fix missing doc (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen: use big-endian netlink attribute types (Hangbin Liu) [RHEL-156508]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-251.el10]
changelog:
  - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188089]
  - riscv: mm: Fix conflict in arch_tlbbatch_add_pending() (Jennifer Berringer) [RHEL-212287]
  - arm64: dts: s32g3: Fix SWT8 watchdog address (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Jared Kangas) [RHEL-212089]
  - iio: core: fix uninitialized data in debugfs (Jared Kangas) [RHEL-212089]
  - iio: buffer: Move from int64_t to s64 for timestamp (Jared Kangas) [RHEL-212089]
  - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Jared Kangas) [RHEL-212089]
  - iio: Replace 'sign' field with union in struct iio_scan_type (Jared Kangas) [RHEL-212089]
  - iio: buffer: ensure repeat alignment is a power of two (Jared Kangas) [RHEL-212089]
  - iio: buffer: cache timestamp offset in scan buffer (Jared Kangas) [RHEL-212089]
  - iio: buffer: check return value of iio_compute_scan_bytes() (Jared Kangas) [RHEL-212089]
  - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Jared Kangas) [RHEL-212089]
  - iio: core: Simplify IIO core managed APIs (Jared Kangas) [RHEL-212089]
  - iio: inkern: call iio_device_put() only on mapped devices (Jared Kangas) [RHEL-212089]
  - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Jared Kangas) [RHEL-212089]
  - dmaengine: of_dma: Add devm_of_dma_controller_register() (Jared Kangas) [RHEL-212089]
  - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: drop unused module alias (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Jared Kangas) [RHEL-212089]
  - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Jared Kangas) [RHEL-212089]
  - i2c: imx: zero-initialize dma_slave_config for eDMA (Jared Kangas) [RHEL-212089]
  - i2c: imx: ensure no clock is generated after last read (Jared Kangas) [RHEL-212089]
  - i2c: imx: fix i2c issue when reading multiple messages (Jared Kangas) [RHEL-212089]
  - i2c: imx: preserve error state in block data length handler (Jared Kangas) [RHEL-212089]
  - vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155388]
  - ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-191988]
  - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193520] {CVE-2026-52973}
  - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-193670]
  - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-193670]
  - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-193670]
  - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-193670]
  - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-193670]
  - hwmon: Add label support for 64-bit energy attributes (Jared Kangas) [RHEL-193670]
  - hwmon: Introduce 64-bit energy attribute support (Jared Kangas) [RHEL-193670]
  - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Jared Kangas) [RHEL-210979]
  - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Jared Kangas) [RHEL-210979]
  - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-210979]
  - pwm: Add the S32G support in the Freescale FTM driver (Jared Kangas) [RHEL-210979]
  - pwm: fsl-ftm: Drop driver local locking (Jared Kangas) [RHEL-210979]
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Jared Kangas) [RHEL-210979]
  - selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-189741]
  - Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-189741]
  - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-190427]
  - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-190428]
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189607] {CVE-2025-71147}
  - gpio: pca953x: propagate regulator_enable() error from resume (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: mask interrupts in irq shutdown (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: pca953x: clarify interrupt source detection (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for TCAL6408 TCAL6416 (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: gpio-pca95xx: Add tcal6408 and tcal6416 (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: add TCAL6408 and TCAL6416 (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: Add a compatibility and feature list for PCA953x (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: clarify log messages about auto increment feature (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-190842]
  - gpio: Kconfig: Update help for GPIO_PCA953X (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: use regmap_update_bits() to improve performance (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for TI TCA6418 (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: pca95xx: add TI TCA6418 (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: pca95xx: add Toradex ecgpiol16 (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: use value returning setters (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-190842]
  - crypto: testmgr - Ignore EEXIST on shash allocation (Thomas Huth) [RHEL-153093]
  - crypto: api - Redo lookup on EEXIST (Thomas Huth) [RHEL-153093]
  - sched_ext: Convert scx_dump_state() spinlock to raw spinlock (Herton R. Krzesinski) [RHEL-184683]
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179292] {CVE-2026-46099}
  - dt-bindings: rtc: pcf85063: remove quartz-load-femtofarads restriction for nxp,pcf85063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: scope pcf85063_config structures (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: convert from round_rate() to determine_rate() (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: fix incorrect maximum clock rate handling (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: add support for RV8063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: create pcf85063_i2c_probe (CKI Backport Bot) [RHEL-190843]
  - dt-bindings: rtc: pcf85063: add binding for RV8063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: replace dev_err+return with return dev_err_probe (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: do a SW reset if POR failed (CKI Backport Bot) [RHEL-190843]
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188778] {CVE-2025-54518}
  - cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185959]
  - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189653] {CVE-2026-23110}
  - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-183433]
  - iommu: Warn on premature unblock during DMA aliased sibling reset (Eder Zulian) [RHEL-188931]
  - iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset (Eder Zulian) [RHEL-188931] {CVE-2026-52952}
  - iommu: Fix ATS invalidation timeouts during __iommu_remove_group_pasid() (Eder Zulian) [RHEL-188931]
  - iommu: Fix nested pci_dev_reset_iommu_prepare/done() (Eder Zulian) [RHEL-188931]
  - iommu: Fix pasid attach in pci_dev_reset_iommu_prepare/done() (Eder Zulian) [RHEL-188931]
  - iommu: Replace per-group resetting_domain with per-gdev blocked flag (Eder Zulian) [RHEL-188931]
  - iommu: Fix kdocs of pci_dev_reset_iommu_done() (Eder Zulian) [RHEL-188931]
  - iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() (Eder Zulian) [RHEL-188931]
  - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188552] {CVE-2026-53059}
  - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188465] {CVE-2026-53016}
  - crypto: qat - clear AES key schedule from stack (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - cancel work on re-enable SR-IOV timeout (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use 2-arg strscpy where destination size is known (Vladislav Dronov) [RHEL-115836]
  - PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - validate RSA CRT component lengths (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - simplify adf_service_mask_to_string helper (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add KPT support for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use pci logging variants for PCI-specific messages (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - protect service table iterations with service_lock (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix restarting state leak on allocation failure (Vladislav Dronov) [RHEL-115836]
  - Documentation: qat_rl: make rate limiting wording clearer (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - handle sysfs-triggered reset callbacks (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - factor out AER reset helpers (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - skip restart for down devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - centralize bus master enable (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - notify fatal error before AER reset preparation (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - keep VFs enabled during reset (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - remove MODULE_VERSION (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - rename adf_ctl_drv.c to adf_module.c (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - remove unused character device and IOCTLs (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix heartbeat error injection (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix IRQ cleanup on 6xxx probe failure (Vladislav Dronov) [RHEL-115836] {CVE-2026-46060}
  - crypto: qat - use swab32 macro (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - replace scnprintf() with sysfs_emit() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix type mismatch in RAS sysfs show functions (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix compression instance leak (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use acomp_tfm_ctx() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - disable 420xx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - disable 4xxx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add anti-rollback support for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add wireless mode support for QAT GEN6 (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix firmware loading failure for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix indentation of macros in qat_hal.c (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - Drop redundant local variables (Vladislav Dronov) [RHEL-115836]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [partial] (Vladislav Dronov) [RHEL-115836]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [partial] (Vladislav Dronov) [RHEL-115836]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [partial] (Vladislav Dronov) [RHEL-115836]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [partial] (Vladislav Dronov) [RHEL-115836]
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Vladislav Dronov) [RHEL-115836]
  - zstd: Import upstream v1.5.7 (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - convert to common field_get() helper (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - #undef field_get() before local definition (Vladislav Dronov) [RHEL-115836]
  - bitfield: Add non-constant field_{prep,get}() helpers (Vladislav Dronov) [RHEL-115836]
  - bitfield: Add less-checking __FIELD_{GET,PREP}() (Vladislav Dronov) [RHEL-115836]
  - bitfield: Ensure the return values of helper functions are checked (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - Remove dst_null support (Vladislav Dronov) [RHEL-115836]
  - qat: don't mess with ->d_name (Vladislav Dronov) [RHEL-115836]
  - lib/string_choices: Rearrange functions in sorted order (Vladislav Dronov) [RHEL-115836]
  - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178253]
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178253]
  - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178253] {CVE-2026-31635}
  - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-31633}
  - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-31632}
  - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178253] {CVE-2026-31631}
  - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178253] {CVE-2026-46039}
  - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178253] {CVE-2026-46085}
  - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-46012}
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178253]
  - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178253] {CVE-2026-43500}
  - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178253] {CVE-2026-46000}
  - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178253] {CVE-2026-31676}
  - Revert "Disable CET when calling tboot shutdown procedure." (Tony Camuso) [RHEL-177961]
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179862] {CVE-2026-46227}
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172678] {CVE-2026-43038}
  - efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175660]
  - workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175660]
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174199] {CVE-2026-43186}
  - redhat: disable XEN_PRIVCMD and XENFS (Vitaly Kuznetsov) [RHEL-172496] {CVE-2026-31788 CVE-2026-31787}
  - selftests: fib_nexthops: test stale has_v4 on nexthop replace (Guillaume Nault) [RHEL-152711]
  - nexthop: fix IPv6 route referencing IPv4 nexthop (Guillaume Nault) [RHEL-152711]
  - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() (Guillaume Nault) [RHEL-152711]
  - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (Guillaume Nault) [RHEL-152711]
  - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump (Guillaume Nault) [RHEL-152711]
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152711]
  - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152711]
  - net: ipv4: fix ARM64 alignment fault in multipath hash seed (Guillaume Nault) [RHEL-152711]
  - selftests: net: add ICMP error source address test over xfrm tunnel (Guillaume Nault) [RHEL-152711]
  - icmp: fix ICMP error source address when xfrm policy matches (Guillaume Nault) [RHEL-152711]
  - icmp: prevent possible overflow in icmp_global_allow() (Guillaume Nault) [RHEL-152711]
  - ping: annotate data-races in ping_lookup() (Guillaume Nault) [RHEL-152711]
  - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (Guillaume Nault) [RHEL-152711]
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152711]
  - inet: ping: Fix icmp out counting (Guillaume Nault) [RHEL-152711]
  - selftests: fib_nexthops: Add test cases for error routes deletion (Guillaume Nault) [RHEL-152711]
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152711]
  - inet: frags: flush pending skbs in fqdir_pre_exit() (Guillaume Nault) [RHEL-152711]
  - inet: frags: add inet_frag_queue_flush() (Guillaume Nault) [RHEL-152711]
  - inet: frags: avoid theoretical race in ip_frag_reinit() (Guillaume Nault) [RHEL-152711]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168076] {CVE-2026-31419}
  - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names (David Thompson) [RHEL-167064]
  - page_pool: store detach_time as ktime_t to avoid false-negatives (Paolo Abeni) [RHEL-152734]
  - net: Fix rcu_tasks stall in threaded busypoll (Paolo Abeni) [RHEL-152734]
  - net: consume xmit errors of GSO frames (Paolo Abeni) [RHEL-152734]
  - net: Drop the lock in skb_may_tx_timestamp() (Paolo Abeni) [RHEL-152734]
  - net: remove WARN_ON_ONCE when accessing forward path array (Paolo Abeni) [RHEL-152734]
  - net: gro: fix outer network offset (Paolo Abeni) [RHEL-152734]
  - net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152734]
  - linkwatch: use __dev_put() in callers to prevent UAF (Paolo Abeni) [RHEL-152734]
  - net: fix segmentation of forwarding fraglist GRO (Paolo Abeni) [RHEL-152734]
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Paolo Abeni) [RHEL-152734]
  - net: update netdev_lock_{type,name} (Paolo Abeni) [RHEL-152734]
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates (Paolo Abeni) [RHEL-152734]
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152734]
  - net: gro: clear skb_shinfo(skb)->hwtstamps in napi_reuse_skb() (Paolo Abeni) [RHEL-152734]
  - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS (Paolo Abeni) [RHEL-152734]
  - net: dst_metadata: fix IP_DF bit not extracted from tunnel headers (Paolo Abeni) [RHEL-152734]
  - netlink: support dumping IPv4 multicast addresses (Hangbin Liu) [RHEL-123730]


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-9
changelog:
  - backport documentation change for CVE-2023-52355 (RHEL-179103)
  - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-11
changelog:
  - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189377)
  - make sure documentation is updated during build for CVE-2023-52355 (RHEL-179103)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-74200, RHEL-80679, RHEL-104216, RHEL-104427, RHEL-113843
      RHEL-118671, RHEL-122751, RHEL-126854, RHEL-126945, RHEL-128105
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-104238)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 12.2.0-1
changelog:
  - Rebased to libvirt-12.2.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-147660
      RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832, RHEL-154252
      RHEL-154292, RHEL-154549, RHEL-156689, RHEL-156800, RHEL-156804
      RHEL-159134


author: Jiri Denemark <jdenemar@redhat.com> - 12.4.0-1
changelog:
  - Rebased to libvirt-12.4.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-145937
      RHEL-147660, RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832
      RHEL-154252, RHEL-154292, RHEL-154549, RHEL-155804, RHEL-155809
      RHEL-156689, RHEL-156800, RHEL-156804, RHEL-159134, RHEL-164023
      RHEL-169588, RHEL-170773, RHEL-170993, RHEL-174300, RHEL-176438


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-1
changelog:
  - Rebased to libvirt-12.5.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-180448, RHEL-181350, RHEL-185108, RHEL-186015, RHEL-187057


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
changelog:
  - Update to 2.82.2
  - RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
  - RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.0-1
changelog:
  - Update to 2.87.0
  - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.5-1
changelog:
  - RHEL-159874 - Rebase mingw-glib2 to 2.87.5
  - RHEL-159187 - CVE-2025-14087 mingw-glib2: GLib: Buffer underflow in GVariant parser leads to heap corruption
  - Drop 0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch see https://bugzilla.redhat.com/show_bug.cgi?id=2431179


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.89.2-1
changelog:
  - Rebase mingw-glib2 to 2.89.2
  - RHEL-212173 - CVE-2026-58010
  - RHEL-212180 - CVE-2026-58011
  - RHEL-212207 - CVE-2026-58012
  - RHEL-212231 - CVE-2026-58013
  - RHEL-190607 - CVE-2026-58014
  - RHEL-212243 - CVE-2026-58015
  - RHEL-190612 - CVE-2026-58016


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 5.2.0-5
changelog:
  - Fix remote code execution via buffer over-read in Marshal deserialization
    CVE-2026-28364
    Resolves: RHEL-152488


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.9-1
changelog:
  - Rebase to libguestfs 1.59.9
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.60.1-1
changelog:
  - Rebase to libguestfs 1.60.1
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.6-1
changelog:
  - Rebase to libnbd 1.25.6
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.7-1
changelog:
  - Rebase to libnbd 1.25.7
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057
  - Fix regression in nbd+ssh URIs caused by preceding change
    resolves: RHEL-217012


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010 (rhbz#2138013)
    - Re-release with updated ppport.h for 5.8.5 compatibility
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 7:6.0.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/releases/tag/v6.0.2
  - Related: RHEL-185733


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladislav Dronov <vdronov@redhat.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0 @ 686d209b (RHEL-91079)
  - Add autoconf-archive as a dependency
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code
  - Add sysusers.d config file to allow rpm to create users/groups automatically


author: Vladislav Dronov <vdronov@redhat.com> - 26.02.0-1
changelog:
  - Update to qatlib 26.02.0 @ fe4bb4b6 (RHEL-115466)
  - Add patch to force 32 bit MMIO CSR reads for GCC 16.1


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Andreas Schneider <asn@redhat.com> - 1.3.4-1
changelog:
  - Update to version 1.3.4
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.3.4/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit <hello@packit.dev> - 0.17.17-1
changelog:
  - Fix race with worker thread accessing $UMOCKDEV_DIR
  - Disable -Wincompatible-function-pointer-types for clang


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


