# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-712.el9]
changelog:
  - selftests/x86: fix Makefile dependencies to work with clang (David Arcari) [RHEL-115163]
  - selftests/x86/apx: Add APX test (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Fix spelling mistake "hader" -> "header" (David Arcari) [RHEL-115163]
  - selftests/x86/avx: Add AVX tests (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Clarify supported xstates (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Consolidate test invocations into a single entry (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Introduce signal ABI test (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Refactor ptrace ABI test (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Refactor context switching test (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Enumerate and name xstate components (David Arcari) [RHEL-115163]
  - selftests/x86/xstate: Refactor XSAVE helpers for general use (David Arcari) [RHEL-115163]
  - selftests/x86: Consolidate redundant signal helper functions (David Arcari) [RHEL-115163]
  - selftests/x86: Fix error: variably modified 'altstack_data' at file scope (David Arcari) [RHEL-115163]
  - selftests/x86: remove (or use) unused variables and functions (David Arcari) [RHEL-115163]
  - x86/selftests: Skip the tests if prerequisites aren't fulfilled (David Arcari) [RHEL-115163]
  - selftests/x86/amx: Add a ptrace test (David Arcari) [RHEL-115163]
  - selftests/x86/amx: Update the ARCH_REQ_XCOMP_PERM test (David Arcari) [RHEL-115163]
  - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() (David Arcari) [RHEL-115163]
  - x86/fpu: Remove export of mxcsr_feature_mask (David Arcari) [RHEL-115163]
  - x86/pkeys: Simplify PKRU update in signal frame (David Arcari) [RHEL-115163]
  - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE (David Arcari) [RHEL-115163]
  - x86/fpu: Log XSAVE disablement consistently (David Arcari) [RHEL-115163]
  - x86/fpu/apx: Enable APX state support (David Arcari) [RHEL-115163]
  - x86/fpu/apx: Disallow conflicting MPX presence (David Arcari) [RHEL-115163]
  - x86/fpu/apx: Define APX state component (David Arcari) [RHEL-115163]
  - x86/cpufeatures: Add X86_FEATURE_APX (David Arcari) [RHEL-115163]
  - x86/fpu/xstate: Adjust xstate copying logic for user ABI (David Arcari) [RHEL-115163]
  - x86/fpu/xstate: Adjust XSAVE buffer size calculation (David Arcari) [RHEL-115163]
  - x86/fpu/xstate: Introduce xfeature order table and accessor macro (David Arcari) [RHEL-115163]
  - x86/fpu/xstate: Remove xstate offset check (David Arcari) [RHEL-115163]
  - x86/fpu/xstate: Simplify print_xstate_features() (David Arcari) [RHEL-115163]
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (David Arcari) [RHEL-115163]
  - x86/pkeys: Change caller of update_pkru_in_sigframe() (David Arcari) [RHEL-115163]
  - x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported (David Arcari) [RHEL-115163]
  - x86/pkeys: Update PKRU to enable all pkeys before XSAVE (David Arcari) [RHEL-115163]
  - x86/pkeys: Add helper functions to update PKRU on the sigframe (David Arcari) [RHEL-115163]
  - x86/pkeys: Add PKRU as a parameter in signal handling functions (David Arcari) [RHEL-115163]
  - Subject: net/iucv: Add missing kernel-doc return value descriptions (Ramesh Chhetri) [RHEL-136141]
  - s390/qeth: Handle ambiguous OSA RCs in s390dbf (Ramesh Chhetri) [RHEL-136141]
  - s390/qeth: Move all OSA RCs to single enum (Ramesh Chhetri) [RHEL-136141]
  - s390/ctcm: Fix double-kfree (Ramesh Chhetri) [RHEL-136141]
  - s390/ctcm: Use info level for handshake UC_RCRESET (Ramesh Chhetri) [RHEL-136141]
  - s390/iucv: Convert sprintf/snprintf to scnprintf (Ramesh Chhetri) [RHEL-136141]
  - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-113460]
  - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-113460]
  - Subject: s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-113460]
  - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-113460]
  - ALSA: update RHEL kconfigs for 7.0 upstream code (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Fix Kconfig dependencies for SND_SOC_ACPI_AMD_SDCA_QUIRKS (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: NVL-S: add platform name (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: NVL: add platform name (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: fix the warning 'rae_fw' from request_firmware() not released (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: do not use 'acquire' PM API (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2781: update i2c ops to match older API (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: additional fixes for move struct snd_soc_dapm_context (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/tas2781: Fix sound abnormal issue on some SPI device (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Exclude Scarlett 18i20 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Evaluate packsize caps at the right place (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Correct kernel doc for sdca_irq_cleanup() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: update DMI quirk and add ACP DMIC for Lenovo platforms (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Unregister IRQ handlers on module remove (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: mask Function_Status value (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Fix overwritten var within for loop (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: modify period size constraints for ACE4 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/intel: enforce stricter period-size alignment for Intel NVL (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8325: Add software reset during probe (Jaroslav Kysela) [RHEL-168091]
  - Revert "ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone" (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: avs: Fix memory leak in avs_register_i2s_test_boards() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: fix iteration in is_endpoint_present() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: Fix endpoint index if endpoints are missing (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Fix errors in IRQ cleanup (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: add Lenovo P16s G5 AMD quirk for legacy SDW machine (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: audioreach: explicitly enable speaker protection modules (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: ps: Fix missing leading zeros in subsystem_device SSID log (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for Acer Swift SFG14-73 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: boards: fix unmet dependency on PINCTRL (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: ehl_rt5660: Use the correct rtd->dev device in hw_params (Jaroslav Kysela) [RHEL-168091]
  - ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Slim 7 14AKP10 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for HP Laptop 15-fc0xxx (Jaroslav Kysela) [RHEL-168091]
  - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 16X OLED M7601RM (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ALSA: caiaq: fix stack out-of-bounds read in init_card (Jaroslav Kysela) [RHEL-168091]
  - ALSA: ctxfi: Check the error for index mapping (Jaroslav Kysela) [RHEL-168091]
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/intel: Add MSI X870E Tomahawk to denylist by DMI ID (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for Framework F111:000F (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop 16-bh0xxx (Jaroslav Kysela) [RHEL-168091]
  - Revert "ALSA: hda/intel: Add MSI X870E Tomahawk to denylist" (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB17X USB Audio (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add HP Laptop 15-fd0xxx mute LED quirk (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Exclude Scarlett 2i4 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek - Fixed Speaker Mute LED for HP EliteBoard G1a platform (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload (Jaroslav Kysela) [RHEL-168091]
  - ASoC: adau1372: Fix clock leak on PLL lock failure (Jaroslav Kysela) [RHEL-168091]
  - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: fix finding wrong entity (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: remove the max count of initialization table (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: wcd934x: fix typo in dt parsing (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Fix the device initialization (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: add ASUS HN7306EA quirk for legacy SDW machine (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: topology: reject invalid vendor array size in token parser (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2781: Add null check for calibration data (Jaroslav Kysela) [RHEL-168091]
  - ALSA: asihpi: avoid write overflow check warning (Jaroslav Kysela) [RHEL-168091]
  - ASoC: fsl: imx-card: initialize playback_only and capture_only (Jaroslav Kysela) [RHEL-168091]
  - ASoC: simple-card-utils: Check value of is_playback_only and is_capture_only (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: qcom: Fix the license marking (Jaroslav Kysela) [RHEL-168091]
  - ALSA:usb:qcom: add AUXILIARY_BUS to Kconfig dependencies (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA (Jaroslav Kysela) [RHEL-168091]
  - ALSA: firewire-lib: fix uninitialized local variable (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for ASUS Strix G16 G615JMR (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: add PX13 SoundWire machine link for rt721+tas2783x2 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: add DMI override for ACP70 flag (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sma1307: fix double free of devm_kzalloc() memory (Jaroslav Kysela) [RHEL-168091] {CVE-2026-31475}
  - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for Lenovo Yoga 7 2-in-1 16AKP10 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp-mach-common: Add missing error check for clock acquisition (Jaroslav Kysela) [RHEL-168091]
  - ASoC: detect empty DMI strings (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add iface reset and delay quirk for SPACETOUCH USB Audio (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces (Jaroslav Kysela) [RHEL-168091]
  - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-core: flush delayed work before removing DAIs and widgets (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-core: drop delayed_work_pending() check before flush (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tegra: Add support for Tegra238 soundcard (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for ASUS UM6702RC (Jaroslav Kysela) [RHEL-168091]
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start (Jaroslav Kysela) [RHEL-168091]
  - ALSA: us122l: drop redundant interface references (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/senary: Ensure EAPD is enabled during init (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/senary: Use codec->core.afg for GPIO access (Jaroslav Kysela) [RHEL-168091]
  - ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: tegra: Add compatible for Tegra238 sound card (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/hdmi: Add Tegra238 HDA codec device ID (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: Suppress pointless warning about number of GPIO pulls (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Add ACP6.3 match entries for Cirrus Logic parts (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCD SKU (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1321: fix DMIC ch2/3 mask issue (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: Only patch ASP registers if the DAI is part of a DAIlink (Jaroslav Kysela) [RHEL-168091]
  - ALSA: firewire: dice: Fix printf warning with W=1 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/tas2781: A workaround solution to lower-vol issue among lower calibrated-impedance micro-speaker on TAS2781 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for HP Pavilion 15-eh1xxx to enable mute LED (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/ca0132: Set HP/Speaker auto-detect default from headphone pin verb (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Fix comments for sdca_irq_request() (Jaroslav Kysela) [RHEL-168091]
  - ALSA: us144mkii: Drop kernel-doc markers (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Drop superfluous kernel-doc markers (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb: qcom: Correct parameter comment for uaudio_transfer_buffer_setup() (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Use correct version for UAC3 header validation (Jaroslav Kysela) [RHEL-168091] {CVE-2026-23318}
  - ALSA: hda/realtek: add quirk for Acer Nitro ANV15-51 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/intel: increase default bdl_pos_adj for Nvidia controllers (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Check max frame size for implicit feedback mode, too (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Use inclusive terms (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Cap the packet size pre-calculations (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs42l43: Report insert for exotic peripherals (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Skip clock selector for Focusrite devices (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add QUIRK_FLAG_SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Improve Focusrite sample rate filtering (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add quirk for Samsung Galaxy Book Flex (NT950QCT-A38A) (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: fix model name typo for Samsung Galaxy Book Flex (NT950QCG-X716) (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Acer Aspire V3-572G (Jaroslav Kysela) [RHEL-168091]
  - ALSA: scarlett2: Fix DSP filter control array handling (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: amd_sdw: add machine driver quirk for Lenovo models (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Add ACP7.0 match entries for Realtek parts (Jaroslav Kysela) [RHEL-168091]
  - ALSA: echoaudio: Add SPDX ids to some files (Jaroslav Kysela) [RHEL-168091]
  - ALSA: isa: Add SPDX id lines to some files (Jaroslav Kysela) [RHEL-168091]
  - ALSA: core: Add SPDX license id to files (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: add explicit port prepare handling (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3405MA (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: sm8250: Add quinary MI2S support (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Avoid potentially repeated XRUN error messages (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Update the number of packets properly at receiving (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add iface reset and delay quirk for GHW-123P (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360 (NP965QFG) (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023) (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt721-sdca: Fix issue of fail to detect OMTP jack type (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add DSD support for iBasso DC04U (Jaroslav Kysela) [RHEL-168091]
  - ALSA: mixer: oss: Add card disconnect checkpoints (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-control: Set correct error code in refresh_bytes_control (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: select CONFIG_SND_HDA_EXT_CORE from SND_SOC_SOF_HDA_COMMON (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Jaroslav Kysela) [RHEL-168091]
  - ALSA: ctxfi: Add quirk for SE-300PCIE variant (160b:0102) (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/generic: fix typos in comments (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 (Jaroslav Kysela) [RHEL-168091]
  - ALSA: oss: delete self assignment (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56-test: Fix missing module namespace import (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56-shared: KUnit tests for onchip speaker ID gpios (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: Support for reading speaker ID from on-chip GPIOs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Limit values user can write to Selected Mode (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add regmap defaults for specification defined values (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Rearrange FDL file messages (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Still process most of the jack detect if control is missing (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Handle volatile controls correctly (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Remove outdated todo comment (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2781: Put three different calibrated data solution into the same data structure (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: fsl_rpmsg: Add compatible string for i.MX952 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: fsl_rpmsg: Add compatible string for i.MX94 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: Add a virtual CPU DAI (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: Fix NULL pointer dereference (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: sof-audio: Add support for loopback capture (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: sof-audio: Traverse paths with aggregated DAI widgets (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-topology: Add support for process modules with no input pins (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-topology: Add new tokens for pipeline direction (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: sof_sdw: Add a DAI link for loopback capture (Jaroslav Kysela) [RHEL-168091]
  - uapi: sound: sof: tokens: Add missing token for KCPS (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: pcm: Split up widget prepare and setup (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: sof-audio: Add a new op in struct sof_ipc_tplg_ops (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: Add quirk for Minisforum V3 SE (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: add SDCA property check (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: allow module parameter override BT link to 0 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: soc-acpi-intel-ptl-match: drop rt721 related match tables (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda-sdw-bpt: support simultaneous audio and BPT streams (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: add hda_dma_prepare/cleanup helpers (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: add hda_dsp_stream_pair_get/put helpers (Jaroslav Kysela) [RHEL-168091]
  - ASoC: wcd-mbhc-v2: remove unnecessary module_init/exit functions (Jaroslav Kysela) [RHEL-168091]
  - docs: fix 're-use' -> 'reuse' in documentation (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Add ACP7.0 match entries for Cirrus Logic parts (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Sort Cirrus Logic match entries (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Rename Cirrus Logic component match entries to include link and uid (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: Sort match table into most specific first (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Add error unwind in resume (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Use cached regmap on resume (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Check errors in set_dai_fmt() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Propagate errors in set_bias_level() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Fix DAC deemphasis control handling (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: aw87390: Add Anbernic RG-DS amp driver (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: aw87390: Add Anbernic RG-DS Amplifier (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sdca: Fix missing regmap dependencies in Kconfig (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-core: add lockdep_assert_held() at snd_soc_unregister_dai() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tegra: set reg_default_cb callback (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tegra: Add AHUB writeable_reg for RX holes (Jaroslav Kysela) [RHEL-168091]
  - ASoC: wm8962: add .set_tdm_slot callback function (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sun4i-spdif: Add missing check for devm_regmap_init_mmio (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: add mixer support for Focusrite Forte (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: fix LG Gram Style 14 speakers (Jaroslav Kysela) [RHEL-168091]
  - ALSA: jack: Improve string handling in jack_kctl_name_gen (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/tas2781: Add tas2781_hda::catlog_id init (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: fsl,mqs: make gpr optional for SM-based SoCs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: wm8731: Remove unnecessary NULL check before clk_prepare_enable/clk_disable_unprepare (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: rt1320-sdw: Refactor to reduce stack frames (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sdw_utils: Add quirk to ignore RT722 DMIC DAI (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: tidyup function naming (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: move struct snd_soc_dapm_context (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: add snd_soc_dapm_alloc() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: remove dev from snd_soc_dapm_context() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-dapm: remove compatibility definition for dapm (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-component: remove compatibility definition for component (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-component: remove snd_soc_component_xxx() wrapper (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tlv320adcx140: don't use snd_soc_component_get_bias_level() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: rt56*: Remove IRQF_ONESHOT (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/tas2781: Drop the unused macro definition (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add NO_DIRECT_COMPLETE flag to class driver (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: Add KUnit testing of cs35l56_set_fw_suffix() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs-amp-lib: Add a Kconfig symbol for enabling test hooks (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs-amp-lib-test: Tests for reading SSIDExV2 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs35l56: Use vendor-specific qualifier in firmware file search (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs-amp-lib: Support Dell SSIDExV2 UEFI variable (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda: controllers: intel: add support for Nova Lake (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda: core: intel-dsp-config: Add support for NVL (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: add support for Nova Lake NVL (Jaroslav Kysela) [RHEL-168091]
  - PCI: Add Intel Nova Lake audio Device ID (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: Remove MODULE_SOFTDEP for snd-hda-codec-hdmi (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: fw loading for devices without pci bus (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sdw_utils: remove dai registered check (Jaroslav Kysela) [RHEL-168091]
  - ASoC: realtek: fix misspelling of "minimum" in comments (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-acpi-intel-ptl-match: use aggregated endpoint in ptl_rt722_l0_rt1320_l23 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to aggregated (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/cirrus_scodec_test: Use faux_device instead of platform_device (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Propagate error codes from regmap updates (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-168091]
  - dt-bindings: sound: google,goldfish-audio: Convert to DT schema (Jaroslav Kysela) [RHEL-168091]
  - ASoC: intel: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add lock to serialise the Function initialisation (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Device boot into the system suspend process (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add basic system suspend support (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add SDCA IRQ enable/disable helpers (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: aw88261: use dvdd-supply regulator (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: document dvdd-supply property for awinic,aw88261 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tlv320adcx140: add channel sum control (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tlv320adcx140: add kcontrol for num biquads (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: add avdd and iovdd supply (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: clarify areg-supply documentation (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tlv320adcx140: add avdd and iovdd supply (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tlv320adcx140: power on/off the device on demand (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: clean up presonus s1810 consts (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: presonus s18xx uses little-endian (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/cs8409: Add quirk for CDB35L56-FOUR-HD (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp: soc-acpi: add is_device_rt712_vb() helper (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: drop unused Kconfig symbols (Jaroslav Kysela) [RHEL-168091]
  - ASoC: pxa: drop unused Kconfig symbol (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: rtq9128: Add compatible changes for rtq9154 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: rtq9128: Add rtq9154 backward compatible (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: rtq9128: Modify the chip initial setting (Jaroslav Kysela) [RHEL-168091]
  - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug (Jaroslav Kysela) [RHEL-168091]
  - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sof ipc4: Add sof_ipc4_widget_setup_msg_payload() and call it (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4: sof_ipc4_module_init_ext_init structs and macros (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sof: ipc4-topology: Add topology tokens domain_in stack & heap_bytes (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sof: Add domain_id, heap_bytes and stack_bytes to snd_sof_widget (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc/ops: Use guard() for spinlocks (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: Use guard() for spinlocks where it makes sense (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: imx: imx-common: Use guard() for spinlock_irqsafe() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: amd: acp-ipc: Use guard() for spinlock_irq() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Use guard()/scoped_guard() for mutex locks where it makes sense (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: Use guard()/scoped_guard() for mutex locks where it makes sense (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: rt1320-sdw: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: dt-bindings: Convert realtek,rt5651 to DT schema (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: aw88261: Add devicetree support (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: aw88261: Remove AW88261_I2C_NAME macro (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: da7213: Move comma operator at the end of the line (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda - fix function names & missing function parameter (Jaroslav Kysela) [RHEL-168091]
  - ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Replace use of system_wq with system_dfl_wq (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Sort #include directives (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Drop unneeded braces in nau8821_hw_params() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Simplify conditional in nau8821_get_osr() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Drop superfluous return statement (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Cancel delayed work on component remove (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Cancel pending work before suspend (Jaroslav Kysela) [RHEL-168091]
  - ASoC: nau8821: Fixup nau8821_enable_jack_detect() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: es8328: Remove duplicate DAPM routes (Jaroslav Kysela) [RHEL-168091]
  - firmware: cs_dsp: Handle long-offset data blocks (Jaroslav Kysela) [RHEL-168091]
  - ALSA: echoaudio: adjust function name (Jaroslav Kysela) [RHEL-168091]
  - ALSA: ice1724: adjust function name reference (Jaroslav Kysela) [RHEL-168091]
  - ALSA: mixart: adjust field name reference (Jaroslav Kysela) [RHEL-168091]
  - soundwire: intel_ace2x: add SND_HDA_CORE dependency (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: fix the remainder calculation of r0 value (Jaroslav Kysela) [RHEL-168091]
  - ASoC: alc5623: tidyup clock inversion in alc5623_set_dai_fmt() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: fix size_t format string (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: fix 32-bit link failure (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: avs: replace strcmp with sysfs_streq (Jaroslav Kysela) [RHEL-168091]
  - soundwire: Use bus methods for .probe(), .remove() and .shutdown() (Jaroslav Kysela) [RHEL-168091]
  - soundwire: Make remove function return no value (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: fix the warning the string may be truncated (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: Fix retry checking in rt1320_rae_load() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: Change return type of rt1320_t0_load() to void (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: audioreach: Constify function arguments (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: topology: Constify pointed snd_soc_tplg_dapm_widget (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: topology: Constify pointed DAPM widget structs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: topology: Constify pointed ar control structs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: topology: Constify pointed topology and vendor structs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add ASoC jack hookup in class driver (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Add ability to connect SDCA jacks to ASoC jacks (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Factor out jack handling into new c file (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda/cm9825: Add GENE_TWL7 support for AAEON (Jaroslav Kysela) [RHEL-168091]
  - soc: qcom: apr: Use typedef for GPR callback member (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: Constify APR/GPR result structs (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: Constify GPR callback response data (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: Constify APR callback response data (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: wcd939x-sdw: use devres for regmap allocation (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codec: rt286: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: read slave properties from acpi table (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: use acpi initialisation table (Jaroslav Kysela) [RHEL-168091]
  - ASoc: tas2783A: acpi match for 4 channel for mtl (Jaroslav Kysela) [RHEL-168091]
  - ASoc: tas2783A: fw name based on system details (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: fix error log for calibration data (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: update default init writes (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: use custom firmware (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tas2783A: sdw_utils: support ch 3 & 4 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-control: Add support for generic bytes control (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4: Add definition for generic bytes control (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-topology: Set initial param_id for bytes control type (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-control: Keep the payload size up to date (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-control: If there is no data do not send bytes update (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: tas2780: tidyup format check in tas2780_set_fmt() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: audioreach: Add support for VI Sense module (Jaroslav Kysela) [RHEL-168091]
  - ASoC: cs-amp-lib: Replace __free(kfree) with normal kfree() cleanup (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: audioreach: Add support for Speaker Protection module (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: support RAE parameters loading (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: Allow sample width wild cards in set_usage() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: rt1320: support calibration and temperature/r0 loading (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codec: rt298: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: ti-common: support tas2563 amplifier (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: sof_rt5682: add tas2563 speaker amp support (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: ES8326: Add kcontrol for DRE (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: ES8326: Add a kcontrol for PGAGAIN (Jaroslav Kysela) [RHEL-168091]
  - ALSA: oss: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: oss: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: timer: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: vmaster: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: hda: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usx2y: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: usb-audio: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: compress_offload: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: control: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - ALSA: pcm: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168091]
  - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) (Jaroslav Kysela) [RHEL-168091]
  - soundwire: qcom: Use guard to avoid mixing cleanup and goto (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda: Only check SSP MCLK mask in case of IPC3 (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Fix acronym for Intel Gemini Lake (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: pci-nvl: Set on_demand_dsp_boot for NVL-S (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: pci-ptl: Set on_demand_dsp_boot for PTL and WCL (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: pci-lnl: Set on_demand_dsp_boot for LNL (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Intel: hda-sdw-bpt: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: sof-client: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: control: skip rpm calls in ext_volatile_get if not implemented (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SOF: ipc4-loader: Remove redundant rpm resume_and_get from load_library (Jaroslav Kysela) [RHEL-168091]
  - ASoC: sdw-mockup: Drop dummy remove function (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codecs: wm0010: Replace cpu_to_be64 + le64_to_cpu with swab64 (Jaroslav Kysela) [RHEL-168091]
  - ASoc: qcom: q6afe: use guards consistently (Jaroslav Kysela) [RHEL-168091]
  - ASoC: davinci-mcasp: remove unneeded #ifdef (Jaroslav Kysela) [RHEL-168091]
  - ASoC: codec: rt274: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Specify image names in the device descriptor (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Drop superfluous space in PCM code (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Simplify catpt_stream_read_position() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Update CATPT_IPC_ERROR macro (Jaroslav Kysela) [RHEL-168091]
  - ASoC: Intel: catpt: Move IPC error messages one level down (Jaroslav Kysela) [RHEL-168091]
  - ASoC: SDCA: functions: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp-sdw-sof: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-168091]
  - ASoC: amd: acp-sdw-legacy: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-168091]
  - ASoC: qcom: Minor readability improve with new lines (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: Refuse to probe seq drivers with non-bus probe or remove (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: Use bus specific probe and remove (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: midi: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: ump: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: opl3: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: opl4: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: sb: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: emu10k1: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ALSA: seq: oss: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168091]
  - ASoC: asoc.h: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: audio_topology: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: audio_codec: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: arizona-micsupp: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: arizona-haptics: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168091]
  - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (Jaroslav Kysela) [RHEL-168091]
  - scsi: qla2xxx: Add support to report MPI FW state (Nilesh Javali) [RHEL-157284]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-713.el9]
changelog:
  - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-180190]
  - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-166727]
  - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-166727]
  - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-166727]
  - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-166727]
  - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-166727]
  - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-166727]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-714.el9]
changelog:
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181932] {CVE-2026-46244}
  - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179443]
  - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179443]
  - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179443]
  - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178945] {CVE-2026-46243}
  - x86/mce, EDAC/mce_amd: Add new SMCA bank types (David Arcari) [RHEL-100952]
  - x86/mce, EDAC/mce_amd: Update CS bank type naming (David Arcari) [RHEL-100952]
  - x86/mce, EDAC/mce_amd: Reorder SMCA bank type enums (David Arcari) [RHEL-100952]
  - x86/mce/amd: Filter bogus hardware errors on Zen3 clients (David Arcari) [RHEL-100952]
  - tracing: Make trace_define_field_ext() static (Gregory Bell) [RHEL-180602]
  - tracing: Have type enum modifications copy the strings (Gregory Bell) [RHEL-180602]
  - tracing: Fix TASK_COMM_LEN in trace event format file (Gregory Bell) [RHEL-180602]
  - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (Gregory Bell) [RHEL-180602]
  - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177522]
  - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173996] {CVE-2026-43125}
  - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173996] {CVE-2026-43125}
  - i2c: tegra: Add support for Tegra410 (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add logic to support different register offsets (Mark Salter) [RHEL-143332]
  - i2c: tegra: Introduce tegra_i2c_variant to identify DVC and VI (Mark Salter) [RHEL-143332]
  - i2c: tegra: Don't mark devices with pins as IRQ safe (Mark Salter) [RHEL-143332]
  - i2c: tegra: remove unused rst (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add Tegra264 support (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add support for SW mutex register (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add HS mode support (Mark Salter) [RHEL-143332]
  - i2c: tegra: Update Tegra256 timing parameters (Mark Salter) [RHEL-143332]
  - i2c: tegra: Use separate variables for fast and fastplus (Mark Salter) [RHEL-143332]
  - i2c: tegra: Do not configure DMA if not supported (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add Tegra256 support (Mark Salter) [RHEL-143332]
  - i2c: tegra: Remove dma_sync_*() calls (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add missing kernel-doc for dma_dev member (Mark Salter) [RHEL-143332]
  - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-144630]
  - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-144630]
  - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-144630]
  - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-144630]
  - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-144630]
  - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172970] {CVE-2026-31581}
  - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172769] {CVE-2026-43056}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-715.el9]
changelog:
  - Updates for IBMVFC_MAX_REQUESTS_DEFAULT (Mamatha Inamdar) [RHEL-174571]
  - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180008] {CVE-2026-46173}
  - net: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-175788]
  - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170760] {CVE-2026-31532}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-716.el9]
changelog:
  - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-183463]
  - tools/power turbostat: Fix unrecognized option '-P' (Dennis Chen) [RHEL-140922]
  - mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs (David Arcari) [RHEL-117326]
  - crypto: krb5 - filter out async aead implementations at alloc (Ilya Dryomov) [RHEL-182254]
  - crypto: krb5enc - fix async decrypt skipping hash verification (Ilya Dryomov) [RHEL-182254]
  - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (Ilya Dryomov) [RHEL-182254]
  - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (Ilya Dryomov) [RHEL-182254]
  - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function (Desnes Nunes) [RHEL-147793]
  - xhci: sideband: don't dereference freed ring when removing sideband endpoint (Desnes Nunes) [RHEL-147793] {CVE-2026-23009}
  - phy: freescale: imx8m-pcie: assert phy reset during power on (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable (Desnes Nunes) [RHEL-147793]
  - USB: serial: option: add Telit LE910 MBIM composition (Desnes Nunes) [RHEL-147793]
  - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: Check for USB4 IP_NAME (Desnes Nunes) [RHEL-147793]
  - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 (Desnes Nunes) [RHEL-147793]
  - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Update UCSI structure to have message in and message out fields" (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Add support for message out data structure" (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Enable debugfs for message_out data structure" (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Add support for SET_PDOS command" (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Fix null pointer dereference in ucsi_sync_control_common" (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Get connector status after enable notifications" (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Get connector status after enable notifications (Desnes Nunes) [RHEL-147793]
  - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Fix null pointer dereference in ucsi_sync_control_common (Desnes Nunes) [RHEL-147793]
  - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: keep susphy enabled during exit to avoid controller faults (Desnes Nunes) [RHEL-147793]
  - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt (Desnes Nunes) [RHEL-147793]
  - USB: serial: option: move Telit 0x10c7 composition in the right place (Desnes Nunes) [RHEL-147793]
  - USB: serial: option: add Telit Cinterion FE910C04 new compositions (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: core: Remove redundant comment in core init (Desnes Nunes) [RHEL-147793]
  - usb: phy: Initialize struct usb_phy list_head (Desnes Nunes) [RHEL-147793]
  - USB: serial: option: add Foxconn T99W760 (Desnes Nunes) [RHEL-147793]
  - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. (Desnes Nunes) [RHEL-147793]
  - USB: add WQ_PERCPU to alloc_workqueue users (Desnes Nunes) [RHEL-147793]
  - USB: mon: make mon_bin_class a static const structure (Desnes Nunes) [RHEL-147793]
  - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (Desnes Nunes) [RHEL-147793]
  - USB: gadget: f_hid: Add GET_REPORT via userspace IOCTL (Desnes Nunes) [RHEL-147793]
  - usb: gadget: f_hid: fix report descriptor allocation (Desnes Nunes) [RHEL-147793]
  - USB: gadget: f_hid: make hidg_class a static const structure (Desnes Nunes) [RHEL-147793]
  - usb: gadget: f_hid: tidy error handling in hidg_alloc (Desnes Nunes) [RHEL-147793]
  - usb: gadget: f_hid: fix refcount leak on error path (Desnes Nunes) [RHEL-147793] {CVE-2022-50514}
  - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (Desnes Nunes) [RHEL-147793] {CVE-2022-50568}
  - drivers/usb/storage: use min() instead of min_t() (Desnes Nunes) [RHEL-147793]
  - usb: uas: reduce time under spinlock (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: Fix EIC7700 USB reset's issue (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: eic7700: Add EIC7700 USB driver (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: Add ESWIN EIC7700 USB controller (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Add support for SET_PDOS command (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Enable debugfs for message_out data structure (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Add support for message out data structure (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Update UCSI structure to have message in and message out fields (Desnes Nunes) [RHEL-147793]
  - uapi: cdc.h: cleanly provide for more interfaces and countries (Desnes Nunes) [RHEL-147793]
  - usb: Remove redundant pm_runtime_mark_last_busy() calls (Desnes Nunes) [RHEL-147793]
  - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget (Desnes Nunes) [RHEL-147793] {CVE-2025-40314}
  - scsi: pm: Drop unneeded call to pm_runtime_mark_last_busy() (Desnes Nunes) [RHEL-147793]
  - redhat/configs: Adding CONFIG_PM_RUNTIME_KUNIT_TEST (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Update kerneldoc return codes (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Make put{,_sync}() return 1 when already suspended (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Add basic kunit tests for API contracts (Desnes Nunes) [RHEL-147793]
  - Documentation: PM: *_autosuspend() functions update last busy time (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Mark last busy stamp in pm_request_autosuspend() (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Mark last busy stamp in pm_runtime_autosuspend() (Desnes Nunes) [RHEL-147793]
  - Documentation: PM: runtime: Fix a reference to pm_runtime_autosuspend() (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Mark last busy stamp in pm_runtime_put_sync_autosuspend() (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Mark last busy stamp in pm_runtime_put_autosuspend() (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Document return values of suspend-related API functions (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Add pm_runtime_put_autosuspend() replacement (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Remove unsued extern declaration of pm_runtime_update_max_time_suspended() (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Fix pm_runtime_active() kerneldoc comment (Desnes Nunes) [RHEL-147793]
  - usb: host: ehci-platform: Call reset assert/deassert on suspend/resume (Desnes Nunes) [RHEL-147793]
  - usb: host: Do not check priv->clks[clk] (Desnes Nunes) [RHEL-147793]
  - usb: typec: tipd: mark as orientation aware (Desnes Nunes) [RHEL-147793]
  - usb: uas: add WQ_PERCPU to alloc_workqueue users (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Set orientation_aware if UCSI version is 2.x and above (Desnes Nunes) [RHEL-147793]
  - usb: chaoskey: fix locking for O_NONBLOCK (Desnes Nunes) [RHEL-147793]
  - xhci: Fix NULL pointer dereference when reading portli debugfs files (Desnes Nunes) [RHEL-147793] {CVE-2026-43431}
  - usb: xhci: Add debugfs support for xHCI Port Link Info (PORTLI) register. (Desnes Nunes) [RHEL-147793]
  - usb: xhci: standardize single bit-field macros (Desnes Nunes) [RHEL-147793]
  - usb: xhci: drop xhci-caps.h dependence on xhci-ext-caps.h (Desnes Nunes) [RHEL-147793]
  - usb: xhci: simplify Max Scratchpad buffer macros (Desnes Nunes) [RHEL-147793]
  - usb: xhci: simplify Isochronous Scheduling Threshold handling (Desnes Nunes) [RHEL-147793]
  - usb: xhci: improve xhci-caps.h comments (Desnes Nunes) [RHEL-147793]
  - usb: xhci: limit number of interrupts to 128 (Desnes Nunes) [RHEL-147793]
  - usb: xhci: limit number of ports to 127 (Desnes Nunes) [RHEL-147793]
  - usb: xhci: simplify handling of Structural Parameters 1 values (Desnes Nunes) [RHEL-147793]
  - usb: xhci: use cached HCSPARAMS1 value (Desnes Nunes) [RHEL-147793]
  - usb: xhci: remove unused trace operation and argument (Desnes Nunes) [RHEL-147793]
  - usb: xhci: remove deprecated TODO comment (Desnes Nunes) [RHEL-147793]
  - usb: xhci: replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147793]
  - usb: xhci: Don't unchain link TRBs on quirky HCs (Desnes Nunes) [RHEL-147793]
  - usb: xhci: Assume that endpoints halt as specified (Desnes Nunes) [RHEL-147793]
  - usb: xhci: implement USB Port Register Set struct (Desnes Nunes) [RHEL-147793]
  - usb: xhci: add USB Port Register Set struct (Desnes Nunes) [RHEL-147793]
  - usb: xhci: add helper to read PORTSC register (Desnes Nunes) [RHEL-147793]
  - usb: xhci: add tracing for PORTSC register writes (Desnes Nunes) [RHEL-147793]
  - usb: xhci: rework xhci_decode_portsc() (Desnes Nunes) [RHEL-147793]
  - xhci: simplify and rework trb_in_td() (Desnes Nunes) [RHEL-147793]
  - xhci: Add helper to find trb from its dma address (Desnes Nunes) [RHEL-147793]
  - usb: xhci: limit run_graceperiod for only usb 3.0 devices (Desnes Nunes) [RHEL-147793]
  - phy: fsl-imx8mq-usb: support alternate reference clock (Desnes Nunes) [RHEL-147793]
  - dt-bindings: phy: imx8mq-usb: add alternate reference clock (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: imx8mp: Set out of band wakeup for i.MX95 (Desnes Nunes) [RHEL-147793]
  - usb: chipidea: ci_hdrc_imx: Set out of band wakeup for i.MX95 (Desnes Nunes) [RHEL-147793]
  - usb: chipidea: core: detach power domain for ci_hdrc platform device (Desnes Nunes) [RHEL-147793]
  - phy: core: Remove extra space after '=' (Desnes Nunes) [RHEL-147793]
  - phy: add new phy_notify_state() api (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: drop NDI quirk module parameter (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: clean up NDI speed hack (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: enable NDI speed hack consistently (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: rename quirk symbols (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: clean up quirk comments (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: rewrite 8u2232c quirk (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: silence jtag probe (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: match on interface number for jtag (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in xdomain.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in usb4.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in tunnel.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in tmu.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in tb_regs.h (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in tb.h (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in tb.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in switch.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in retimer.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in nhi.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in lc.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in icm.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in domain.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in debugfs.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in ctl.c (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: Add wake-up support for Tegra234 XUSB host controller (Desnes Nunes) [RHEL-147793]
  - usbnet: fix crash due to missing BQL accounting after resume (Desnes Nunes) [RHEL-147793]
  - usbnet: avoid a possible crash in dql_completed() (Desnes Nunes) [RHEL-147793]
  - net: usb: usbnet: adhere to style (Desnes Nunes) [RHEL-147793]
  - usbnet: Add support for Byte Queue Limits (BQL) (Desnes Nunes) [RHEL-147793]
  - net: usb: usbnet: coding style for functions (Desnes Nunes) [RHEL-147793]
  - usbnet: Prevents free active kevent (Desnes Nunes) [RHEL-147793] {CVE-2025-68312}
  - usbnet: Fix memory leak in usbnet_disconnect() (Desnes Nunes) [RHEL-147793]
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Desnes Nunes) [RHEL-147793]
  - net: usb: usbnet: fix name regression (Desnes Nunes) [RHEL-147793]
  - usbnet: modern method to get random MAC (Desnes Nunes) [RHEL-147793]
  - drivers/net/usb: Remove all strcpy() uses (Desnes Nunes) [RHEL-147793]
  - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Desnes Nunes) [RHEL-147793] {CVE-2023-53548}
  - thunderbolt: Replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147793]
  - Documentation: treewide: Replace marc.info links with lore (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Update deprecated firmware update site in icm.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Update NVM firmware upgrade documentation (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Add support for orientation (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Add SET_POWER_LEVEL UCSI command to debugfs (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: drop unnecessary initialisations (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: clean up set_termios() (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: add control request helpers (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: clean up device type checks (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: clean up tiocmset() (Desnes Nunes) [RHEL-147793]
  - USB: serial: belkin_sa: clean up tiocmset() (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC (Desnes Nunes) [RHEL-147793]
  - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: Allow usb role swich control from userspace (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,dwc3: Correct MSM8994 interrupts (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,dwc3: Correct IPQ5018 interrupts (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,snps-dwc3: Add the SM8750 compatible (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,snps-dwc3: Add Glymur compatible (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,snps-dwc3: Add Kaanapali compatible (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,snps-dwc3: Add Milos compatible (Desnes Nunes) [RHEL-147793]
  - usb: uhci: Work around bogus clang shift overflow warning from DMA_BIT_MASK(64) (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: Fix missing mutex_unlock() (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: Add USB4 mode and TBT3 altmode support (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: Rework ps883x_set() (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: Cache register settings, not Type-C mode (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: fix configuration error handling (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: fix missing accessibility check (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: fix registration race (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: fix probe error handling (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Report power supply change on sink path change (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Report power supply changes on power opmode changes (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: psy: Add power supply status (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: glue: Allow more fine grained control over mode switches (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: glue: Add documentation (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required (Desnes Nunes) [RHEL-147793]
  - usb: typec: pd: Register SPR AVS caps with usb_power_delivery class (Desnes Nunes) [RHEL-147793]
  - tcpm: Parse and log AVS APDO (Desnes Nunes) [RHEL-147793]
  - usbip: Use min to simplify stub_send_ret_submit (Desnes Nunes) [RHEL-147793]
  - usb: core: Add tracepoints for device allocation and state changes (Desnes Nunes) [RHEL-147793]
  - usb: core: Centralize device state update logic (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typo in tb_eeprom_ctl_read documentation (Desnes Nunes) [RHEL-147793]
  - usb: vhci-hcd: Replace pr_*() with dev_*() logging (Desnes Nunes) [RHEL-147793]
  - usb: vhci-hcd: Switch to dev_err_probe() in probe path (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Handle incorrect num_connectors capability (Desnes Nunes) [RHEL-147793] {CVE-2025-71108}
  - USB: Fix descriptor count when handling invalid MBIM extended descriptor (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: dwc3-generic-plat: Add layerscape dwc3 support (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: Add software-managed properties for flattened model (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: add missed compatible string for arm64 layerscape (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: add layerscape super speed usb support (Desnes Nunes) [RHEL-147793]
  - usb: typec: altmodes/displayport: do not enter mode if port is the UFP (Desnes Nunes) [RHEL-147793]
  - usb: typec: class: add typec_get_data_role symbol (Desnes Nunes) [RHEL-147793]
  - usb: chipidea: imx: add USB support for i.MX94 (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: usbmisc-imx: add fsl,imx94-usbmisc compatible (Desnes Nunes) [RHEL-147793]
  - usb: typec: tipd: Fix error handling in cd321x_read_data_status (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: xhci: Add "generic-xhci" compatible for Marvell Armada 37xx/8k (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: xhci: Allow "iommus" and "dr_mode" properties (Desnes Nunes) [RHEL-147793]
  - usb: hub: Use max() to improve usb_set_lpm_pel() (Desnes Nunes) [RHEL-147793]
  - usbip: Fix locking bug in RT-enabled kernels (Desnes Nunes) [RHEL-147793]
  - usb: usbtmc: Remove unnecessary local variable from usbtmc_ioctl_request (Desnes Nunes) [RHEL-147793]
  - usb: ehci: Add Aspeed AST2700 support (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: ehci: Add Aspeed AST2700 compatible (Desnes Nunes) [RHEL-147793]
  - usb: uhci: Add Aspeed AST2700 support (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: uhci: Add Aspeed AST2700 compatible (Desnes Nunes) [RHEL-147793]
  - usb: uhci: Add reset control support (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: uhci: Add reset property (Desnes Nunes) [RHEL-147793]
  - usb: core: Drop spaces after function names (Desnes Nunes) [RHEL-147793]
  - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180305] {CVE-2026-43260}
  - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179595] {CVE-2026-45984}
  - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179595] {CVE-2026-45984}
  - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179711] {CVE-2026-45852}
  - livepatch: Match old_sympos 0 and 1 in klp_find_func() (Rado Vrbovsky) [RHEL-152191]
  - selftests: livepatch: use canonical ftrace path (Rado Vrbovsky) [RHEL-152191]
  - objtool/x86: Reorder ORC register numbering (Rado Vrbovsky) [RHEL-152187]
  - objtool: Support Clang RAX DRAP sequence (Rado Vrbovsky) [RHEL-152187]
  - objtool: Fix Clang jump table detection (Rado Vrbovsky) [RHEL-152187]
  - objtool: Handle Clang RSP musical chairs (Rado Vrbovsky) [RHEL-152187]
  - objtool: Fix ERROR_INSN() error message (Rado Vrbovsky) [RHEL-152187]
  - kbuild: Leave objtool binary around with 'make clean' (Rado Vrbovsky) [RHEL-152187]
  - kbuild: Add objtool to top-level clean target (Rado Vrbovsky) [RHEL-152187]
  - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175822]
  - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175822]
  - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175819]
  - dpll: add pin operational state (Ivan Vecera) [RHEL-175819]
  - nfsd: fix file change detection in CB_GETATTR (Olga Kornievskaia) [RHEL-171546]
  - Revert "nfsd: don't set the ctime on delegated atime updates" (Olga Kornievskaia) [RHEL-171546]
  - NFS: Fix RCU dereference of cl_xprt in nfs_compare_super_address (Olga Kornievskaia) [RHEL-171546]
  - NFSv4.2: fix CLONE/COPY attrs in presence of delegated attributes (Olga Kornievskaia) [RHEL-171546]
  - pnfs/flexfiles: validate ds_versions_cnt is non-zero (Olga Kornievskaia) [RHEL-171546]
  - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot (Olga Kornievskaia) [RHEL-171546]
  - xprtrdma: Avoid 250 ms delay on backlog wakeup (Olga Kornievskaia) [RHEL-171546]
  - xprtrdma: Close sendctx get/put race that can block a transport (Olga Kornievskaia) [RHEL-171546]
  - nfs: update inode ctime after removexattr operation (Olga Kornievskaia) [RHEL-171546]
  - nfs: fix utimensat() for atime with delegated timestamps (Olga Kornievskaia) [RHEL-171546]
  - NFS: Fix LTP test failures when timestamps are delegated (Olga Kornievskaia) [RHEL-171546] {CVE-2025-68242}
  - NFSv4.2: fix setattr caching of TIME_[MODIFY|ACCESS]_SET when timestamps are delegated (Olga Kornievskaia) [RHEL-171546]
  - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-171546]
  - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() (Olga Kornievskaia) [RHEL-171546]
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Olga Kornievskaia) [RHEL-171546] {CVE-2026-31402}
  - sunrpc: fix cache_request leak in cache_release (Olga Kornievskaia) [RHEL-171546] {CVE-2026-31400}
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (Olga Kornievskaia) [RHEL-171546] {CVE-2026-31403}
  - NFSD: Defer sub-object cleanup in export put callbacks (Olga Kornievskaia) [RHEL-171546] {CVE-2026-31404}
  - NFSD: fix race between nfsd registration and exports_proc (Olga Kornievskaia) [RHEL-171546] {CVE-2025-38232}
  - xprtrdma: Decrement re_receiving on the early exit paths (Olga Kornievskaia) [RHEL-171546] {CVE-2026-43469}
  - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). (Olga Kornievskaia) [RHEL-171546] {CVE-2026-43394}
  - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). (Olga Kornievskaia) [RHEL-171546] {CVE-2026-23297}
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (Olga Kornievskaia) [RHEL-171546]
  - fs/nfs: Fix readdir slow-start regression (Olga Kornievskaia) [RHEL-171546]
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (Olga Kornievskaia) [RHEL-171546]
  - nfsd: fix return error code for nfsd_map_name_to_[ug]id (Olga Kornievskaia) [RHEL-171546]
  - nfsd: never defer requests during idmap lookup (Olga Kornievskaia) [RHEL-171546]
  - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() (Olga Kornievskaia) [RHEL-171546]
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Olga Kornievskaia) [RHEL-171546] {CVE-2026-23038}
  - pNFS: Fix a deadlock when returning a delegation during open() (Olga Kornievskaia) [RHEL-171546] {CVE-2026-23050}
  - nfsd: provide locking for v4_end_grace (Olga Kornievskaia) [RHEL-171546] {CVE-2026-22980}
  - NFSD: Remove NFSERR_EAGAIN (Olga Kornievskaia) [RHEL-171546]
  - NFS: trace: show TIMEDOUT instead of 0x6e (Olga Kornievskaia) [RHEL-171546]
  - nfsd: Drop the client reference in client_states_open() (Olga Kornievskaia) [RHEL-171546]
  - lockd: fix vfs_test_lock() calls (Olga Kornievskaia) [RHEL-171546]
  - NFSD: NFSv4 file creation neglects setting ACL (Olga Kornievskaia) [RHEL-171546] {CVE-2025-68803}
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap (Olga Kornievskaia) [RHEL-171546]
  - net/handshake: restore destructor on submit failure (Olga Kornievskaia) [RHEL-171546] {CVE-2025-71148}
  - nfsd: Mark variable __maybe_unused to avoid W=1 build break (Olga Kornievskaia) [RHEL-171546]
  - svcrdma: return 0 on success from svc_rdma_copy_inline_range (Olga Kornievskaia) [RHEL-171546]
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Olga Kornievskaia) [RHEL-171546] {CVE-2025-71120}
  - NFS: Fix up the automount fs_context to use the correct cred (Olga Kornievskaia) [RHEL-171546]
  - NFS: Fix inheritance of the block sizes when automounting (Olga Kornievskaia) [RHEL-171546]
  - Revert "nfs: ignore SB_RDONLY when mounting nfs" (Olga Kornievskaia) [RHEL-171546]
  - Revert "nfs: clear SB_RDONLY before getting superblock" (Olga Kornievskaia) [RHEL-171546]
  - Revert "nfs: ignore SB_RDONLY when remounting nfs" (Olga Kornievskaia) [RHEL-171546]
  - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (Olga Kornievskaia) [RHEL-171546] {CVE-2025-68764}
  - fs_context: drop the unused lsm_flags member (Olga Kornievskaia) [RHEL-171546]
  - NFSD: use correct reservation type in nfsd4_scsi_fence_client (Olga Kornievskaia) [RHEL-171546]
  - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state (Olga Kornievskaia) [RHEL-171546]
  - nfs/vfs: discard d_exact_alias() (Olga Kornievskaia) [RHEL-171546]
  - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() (Olga Kornievskaia) [RHEL-171546]
  - NFS: Initialise verifiers for visible dentries in readdir and lookup (Olga Kornievskaia) [RHEL-171546]
  - NFS: Avoid changing nlink when file removes and attribute updates race (Olga Kornievskaia) [RHEL-171546]
  - NFSD/blocklayout: Fix minlength check in proc_layoutget (Olga Kornievskaia) [RHEL-171546]
  - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174333]
  - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174333]
  - dmaengine: idxd: Add Max SGL Size Support for DSA3.0 (Eder Zulian) [RHEL-154486]
  - dmaengine: idxd: Expose DSA3.0 capabilities through sysfs (Eder Zulian) [RHEL-154486]
  - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: rz-dmac: Protect the driver specific lists (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Eder Zulian) [RHEL-172444]
  - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() (Eder Zulian) [RHEL-172444]
  - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix leaking event log memory (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix freeing the allocated ida too late (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix memory leak when a wq is reset (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix not releasing workqueue on .release() (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Wait for submitted operations on .device_synchronize() (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Flush all pending descriptors (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Flush kernel workqueues on Function Level Reset (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix possible invalid memory access after FLR (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix crash when the event log is disabled (Eder Zulian) [RHEL-172444]
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths (Eder Zulian) [RHEL-172444]
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() (Eder Zulian) [RHEL-172444]
  - dmaengine: tegra-adma: Fix use-after-free (Eder Zulian) [RHEL-172444]
  - dmaengine: ti: k3-udma: fix device leak on udma lookup (Eder Zulian) [RHEL-172444]
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Eder Zulian) [RHEL-172444]
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: rz-dmac: fix device leak on probe failure (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Eder Zulian) [RHEL-172444]
  - dmaengine: tegra210-adma: drop unused module alias (Eder Zulian) [RHEL-172444]
  - dmaengine: dw: drop unused module alias (Eder Zulian) [RHEL-172444]
  - dmaengine: bcm2835: drop unused module alias (Eder Zulian) [RHEL-172444]
  - dmaengine: qcom: gpi: Add GPI Block event interrupt support (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: drain ATS translations when disabling WQ (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: Kconfig: Drop ARCH_R7S72100/ARCH_RZG2L dependency (Eder Zulian) [RHEL-172444]
  - dmaengine: rcar-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172444]
  - dmaengine: rcar-dmac: Remove dummy Runtime PM callback (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: usb-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172444]
  - dmaengine: dw-edma: Set status for callback_result (Eder Zulian) [RHEL-172444]
  - dmaengine: Fix dma_async_tx_descriptor->tx_submit documentation (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: setup_xref error handling (Eder Zulian) [RHEL-172444]
  - dmaengine: Replace zero-length array with flexible-array (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Replace memset(0) + strscpy() with strscpy_pad() (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Allow registers.h to be included from tools/ (Eder Zulian) [RHEL-172444]
  - dmaengine: ioat: Move system_has_dca_enabled() to dma.h (Eder Zulian) [RHEL-172444]
  - ACPICA: Provide #defines for EINJV2 error types (Mark Langsdorf) [RHEL-169029]
  - ACPICA: actbl1: Add EINJv2 get error type action (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix less than zero comparison on a size_t variable (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Clean up on error in einj_probe() (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix EINJV2 memory error injection (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix EINJV2 initialization and injection (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: fix potential NULL dereference in __einj_error_inject() (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Check if user asked for EINJV2 injection (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix trigger actions (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix check and iounmap of uninitialized pointer p (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: prevent memory corruption in error_type_set() (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Update the documentation for EINJv2 support (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Enable EINJv2 error injections (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Create debugfs files to enter device id and syndrome (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Discover EINJv2 parameters (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Add einjv2 extension struct (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Enable the discovery of EINJv2 capabilities (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Remove redundant calls to einj_get_available_error_type() (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix kernel test sparse warnings (Mark Langsdorf) [RHEL-169029]
  - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-151897]
  - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-151897]
  - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-151897]
  - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-159916]
  - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-151898]
  - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-152411]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Waiman Long) [RHEL-171802]
  - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170540] {CVE-2026-31508}
  - ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug (Mark Langsdorf) [RHEL-156421]
  - ACPI: video: Clear driver_data pointer on remove (Mark Langsdorf) [RHEL-156421]
  - drm/amdgpu: Fix ISP segfault issue in kernel v7.0 (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Update the format of Arg3 of _DSM (Mark Langsdorf) [RHEL-156421]
  - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Update the _CPC definition to match ACPI 6.6 (Mark Langsdorf) [RHEL-156421]
  - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Save NVS memory on Lenovo G70-35 (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Tweak acpi_button_remove() (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Tweak system wakeup handling (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Drop redundant checks from acpi_battery_remove() (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs (Mark Langsdorf) [RHEL-156421]
  - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Call device_init_wakeup() earlier during probe (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Drop redundant check from acpi_battery_notify() (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: fix incorrect charging status when current is zero (Mark Langsdorf) [RHEL-156421]
  - hwmon: (acpi_power_meter) Replace deprecated strcpy() with strscpy() (Mark Langsdorf) [RHEL-156421]
  - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Use async schedule function in acpi_scan_clear_dep_fn() (Mark Langsdorf) [RHEL-156421]
  - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) (Mark Langsdorf) [RHEL-156421]
  - ACPI: sysfs: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Rename EPP constants for clarity (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Rework the handling of acpi_processor_ffh_lpi_probe() (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_dev() to void (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_states() to void (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu() (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Clean up cppc_perf_caps and cppc_perf_ctrls structs (Mark Langsdorf) [RHEL-156421]
  - ACPI: PCI: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156421]
  - ACPI: video: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Adjust messages regarding postponed ACPI PM (Mark Langsdorf) [RHEL-156421]
  - ACPI: x86: s2idle: Remove dead code in lps0_device_attach() (Mark Langsdorf) [RHEL-156421]
  - x86/acpi: Add acpi=spcr to use SPCR-provided default console (Mark Langsdorf) [RHEL-156421]
  - ACPICA: actbl3.h: ACPI 6.6: SRAT: New flag in Memory Affinity Structure (Mark Langsdorf) [RHEL-156421]
  - ACPICA: ACPI 6.6: Add _VDM (Voltage Domain) object (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Fix asltests using the Fatal() opcode (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Add support for the Microsoft display mux _OSI string (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() (Mark Langsdorf) [RHEL-156421]
  - ACPICA: ACPICA: replace ACPI_FREE() with acpi_ut_delete_object_desc() (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Clean up after recent changes (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons (Mark Langsdorf) [RHEL-156421]
  - ACPI: video: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: video: Adjust event notification routine (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Register platform devices for backlight device objects (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Add debug log for states with invalid entry methods (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (Mark Langsdorf) [RHEL-156421]
  - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Align acpi_device_get_match_data() with driver match order (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: GHES: Improve ghes_notify_sea() status check (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: GHES: Extract helper functions for error status handling (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: GHES: Improve ghes_notify_nmi() status check (Mark Langsdorf) [RHEL-156421]
  - APEI/GHES: ensure that won't go past CPER allocated record (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: s2idle: Add module parameter for LPS0 constraints checking (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: s2idle: Add missing checks to acpi_s2idle_begin_lps0() (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: Remove unused empty stubs of some functions (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: Do not expose global variable acpi_idle_driver (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Redefine two functions as void (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: Update cpuidle driver check in __acpi_processor_start() (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Optimize ACPI idle driver registration (Mark Langsdorf) [RHEL-156421]
  - ACPI: AGDI: Add interrupt signaling mode support (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: EINJ: make read-only array non_mmio_desc static const (Mark Langsdorf) [RHEL-156421]
  - ACPI: PCI: IRQ: Fix INTx GSIs signedness (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Drop outdated comment regarding removed function (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Use resource_type() for resource type checking (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Fix typo under sizeof() in acpi_run_osc() (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Adjust acpi_osc_handshake() parameter list (Mark Langsdorf) [RHEL-156421]
  - ACPI: driver: Drop driver_data pointer clearing from two drivers (Mark Langsdorf) [RHEL-156421]
  - ACPI: sysfs: Add device cid attribute for exposing _CID lists (Mark Langsdorf) [RHEL-156421]
  - ACPI: SBS: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: SMBUS HC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: EC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: EC: Register a platform device for ECDT EC (Mark Langsdorf) [RHEL-156421]
  - ACPI: HED: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Reduce code duplication related to cleanup (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Adjust event notification routine (Mark Langsdorf) [RHEL-156421]
  - ACPI: thermal: Rework system suspend and resume handling (Mark Langsdorf) [RHEL-156421]
  - ACPI: thermal: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: thermal: Adjust event notification routine (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Register platform devices for thermal zones (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Do not mark button ACPI devices as wakeup-capable (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Do not bind ACPI drivers to fixed event buttons (Mark Langsdorf) [RHEL-156421]
  - ACPI: tiny-power-button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Adjust event notification routines (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Reduce code duplication related to fixed event devices (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Register platform devices for fixed event buttons (Mark Langsdorf) [RHEL-156421]
  - ACPI: NFIT: core: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Rework the handling of \_SB._OSC USB4 features (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Adjust feature mask creation for \_SB._OSC (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Rework the handling of \_SB._OSC platform features (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Rename label and use ACPI_FREE() in acpi_run_osc() (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Split _OSC error processing out of acpi_run_osc() (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Split _OSC evaluation out of acpi_run_osc() (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Rework printing debug messages on _OSC errors (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Fix handling of _OSC errors in acpi_run_osc() (Mark Langsdorf) [RHEL-156421]
  - compiler_types: introduce at_least parameter decoration pseudo keyword (Mark Langsdorf) [RHEL-156421]
  - wifi: iwlwifi: trans: rename at_least variable to min_mode (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Register wakeup sources under physical devices (Mark Langsdorf) [RHEL-156421]
  - ACPI: PCI: PM: Rework root bus notification setup (Mark Langsdorf) [RHEL-156421]
  - ACPI: PNP: Drop acpi_nonpnp_device_ids[] (Mark Langsdorf) [RHEL-156421]
  - ACPI: PNP: Drop PNP0C01 and PNP0C02 from acpi_pnp_device_ids[] (Mark Langsdorf) [RHEL-156421]
  - ACPI: PCC: Fix race condition by removing static qualifier (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Mark Langsdorf) [RHEL-156421]
  - x86/acpi/boot: Correct acpi_is_processor_usable() check again (Mark Langsdorf) [RHEL-156421]
  - acpi: platform_profile - Add max-power profile option (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Fix a spelling mistake (Mark Langsdorf) [RHEL-156421]
  - ACPI: LPSS: Fix a spelling mistake (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: use min() instead of min_t() (Mark Langsdorf) [RHEL-156421]
  - ACPI: GTDT: Correctly number platform devices for MMIO timers (Mark Langsdorf) [RHEL-156421]
  - acpi/hmat: Fix lockdep warning for hmem_register_resource() (Mark Langsdorf) [RHEL-156421]
  - acpi/hmat: Return when generic target is updated (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Mark Langsdorf) [RHEL-156421]
  - ACPI: MRRM: Fix memory leaks and improve error handling (Mark Langsdorf) [RHEL-156421]
  - ACPI: DPTF: Use ACPI_FREE() for ACPI buffer deallocation (Mark Langsdorf) [RHEL-156421]
  - ACPI: DPTF: Remove int340x thermal scan handler (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Drop redundant C-state count checks (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Detect preferred core availability on online CPUs (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Check _CPC validity for only the online CPUs (Mark Langsdorf) [RHEL-156421]
  - ACPI: OSL: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156421]
  - ACPI: thermal: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156421]
  - ACPI: EC: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156421]
  - ACPI: OSL: replace use of system_wq with system_percpu_wq (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156421]
  - ACPI: SBS: Fix present test in acpi_battery_read() (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Fix typo in a comment (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Add support for Microsoft fan extensions (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Add hwmon notification support (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Add basic notification support (Mark Langsdorf) [RHEL-156421]
  - ACPI: SPCR: Check for table version when using precise baudrate (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Drop redundant locking (Mark Langsdorf) [RHEL-156421]
  - ACPI: PRM: Add acpi_prm_handler_available() (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Workaround for 64-bit firmware bug (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Use ACPI handle when retrieving _FST (Mark Langsdorf) [RHEL-156421]
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Call input_free_device() on failing input device registration (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Rework acpi_graph_get_next_endpoint() (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Make acpi_get_next_subnode() static (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Relocate state flags initialization (Mark Langsdorf) [RHEL-156421]
  - acpi,srat: Fix incorrect device handle check for Generic Initiator (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Fix argument order in __acpi_node_get_property_reference() (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: s2idle: Only retrieve constraints when needed (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: s2idle: Staticise LPS0 callback functions (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: s2idle: Drop acpi_get_lps0_constraint() (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Return present device nodes only on fwnode interface (Mark Langsdorf) [RHEL-156421]
  - cpufreq: Drop unused symbol CPUFREQ_ETERNAL (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Do not use CPUFREQ_ETERNAL as an error value (Mark Langsdorf) [RHEL-156421]
  - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay (Mark Langsdorf) [RHEL-156421]
  - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency (Mark Langsdorf) [RHEL-156421]
  - cpufreq: Honour transition_latency over transition_delay_us (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: Remove redundant rcu_read_lock/unlock() under spinlock (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Add synchronization between interface updates (Mark Langsdorf) [RHEL-156421]
  - ACPI: Add support for nargs_prop in acpi_fwnode_get_reference_args() (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Refactor acpi_fwnode_get_reference_args() to support nargs_prop (Mark Langsdorf) [RHEL-156421]
  - ACPI: debug: fix signedness issues in read/write helpers (Mark Langsdorf) [RHEL-156421]
  - ACPI: GTDT: Generate platform devices for MMIO timers (Mark Langsdorf) [RHEL-156421]
  - x86/acpi/cstate: Remove open coded check for cpu_feature_enabled() (Mark Langsdorf) [RHEL-156421]
  - ACPI: SPCR: Support Precise Baud Rate field (Mark Langsdorf) [RHEL-156421]
  - ACPICA: SPCR: Update the SPCR table to version 4 (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Adjust failure handling in acpi_nondev_subnode_extract() (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Do not pass NULL handles to acpi_attach_data() (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Add code comments explaining what is going on (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Disregard references in data-only subnode lists (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Fix buffer properties extraction for subnodes (Mark Langsdorf) [RHEL-156421]
  - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: EINJ: Allow more types of addresses except MMIO (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: Remove redundant assignments in erst_dbg_{ioctl|write}() (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Update dsmethod.c to get rid of unused variable warning (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Fix largest possible resource descriptor index (Mark Langsdorf) [RHEL-156421]
  - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Mark Langsdorf) [RHEL-156421]
  - ACPICA: ACPI_TYPE_ANY does not include the package type (Mark Langsdorf) [RHEL-156421]
  - ACPICA: acpidump: fix return values in ap_is_valid_checksum() (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Print error messages for too few or too many arguments (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Modify variable definition position (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Allow to skip Global Lock initialization (Mark Langsdorf) [RHEL-156421]
  - ACPICA: iASL: Fix printing CDAT table header (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: thermal: Release policy references using __free() (Mark Langsdorf) [RHEL-156421]
  - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Fold two simple functions into their only caller (Mark Langsdorf) [RHEL-156421]
  - ACPI: thermal: Get rid of a dummy local variable (Mark Langsdorf) [RHEL-156421]
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Mark Langsdorf) [RHEL-156421]
  - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Eliminate static variable flat_state_cnt (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Add module import namespace (Mark Langsdorf) [RHEL-156421]
  - ACPI: Use str_low_high() helper in two places (Mark Langsdorf) [RHEL-156421]
  - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Add HP EliteBook 855 G7 WWAN modem power resource quirk (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Add power resource init function (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Mark Langsdorf) [RHEL-156421]
  - drm/xe: Add missing <linux/sizes.h> include to xe_lrc.h (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/i915: Disable tracing points on PREEMPT_RT" (Anusha Srivatsa) [RHEL-151751]
  - redhat: Add new DRM modules to mod-internal.list (Anusha Srivatsa) [RHEL-151751]
  - redhat/configs: Add new configs from DRM 6.19 backport (Anusha Srivatsa) [RHEL-151751]
  - redhat: Add drm/tests to module filter list (Anusha Srivatsa) [RHEL-151751]
  - drm/tegra: nvjpg: Use .remove_new for void remove callback (Anusha Srivatsa) [RHEL-151751]
  - drm: Revert 4-arg pci_resize_resource() calls from upstream (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/client: Support emergency restore via sysrq for all clients" (Anusha Srivatsa) [RHEL-151751]
  - drm/xe/pm: Partially revert scope-based cleanup helper for runtime PM (Anusha Srivatsa) [RHEL-151751]
  - drm/amd/display: Do not use CC_FLAGS_FPU/CC_FLAGS_NO_FPU in dml2_0 (Anusha Srivatsa) [RHEL-151751]
  - drm/xe/pf: Set VF LMEM BAR size (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/i915: Remove driver side BAR release before resize" (Anusha Srivatsa) [RHEL-151751]
  - drm: Remove partial backport artifacts from mm/zone_device folio_free rename (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/xe: Limit number of jobs per exec queue" (Anusha Srivatsa) [RHEL-151751]
  - drm: Remove partial backport artifacts from mm/zone_device folio reinit (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/amdgpu: Use pci_rebar_get_max_size()" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/xe: Remove driver side BAR release before resize" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/xe/vram: Use PCI rebar helpers in resize_vram_bar()" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/xe/vram: Use pci_rebar_get_max_size()" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/i915/gt: Use pci_rebar_size_supported()" (Anusha Srivatsa) [RHEL-151751]
  - fix missing vmalloc.h includes (Anusha Srivatsa) [RHEL-151751]
  - Revert "accel/ivpu: Enable MCA ECC signalling based on MSR" (Anusha Srivatsa) [RHEL-151751]
  - drm/dma-buf: Remove partial backport of phys_vec scatter-gather mapping (Anusha Srivatsa) [RHEL-151751]
  - drm/dma-buf: Remove partial backport of FD_ADD() conversion (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/vblank: Add vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/hypervdrm: Use vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/virtgpu: Use vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/vkms: Convert to DRM's vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/qxl: Use vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/cirrus-qemu: Use vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/bochs: Use vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Merge DRM changes from upstream v6.18..v6.19 (Anusha Srivatsa) [RHEL-151751]
  - rxrpc: Fix recvmsg() unconditional requeue (Marc Dionne) [RHEL-147231] {CVE-2026-23066}
  - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-150472] {CVE-2026-23136}
  - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143898] {CVE-2026-22984}
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143880] {CVE-2026-22990}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-717.el9]
changelog:
  - s390/entry: Scrub r12 register on kernel entry (Jan Polensky) [RHEL-174818]
  - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185118]
  - platform/x86/intel-uncore-freq: Increase minor version (David Arcari) [RHEL-184964]
  - platform/x86/intel-uncore-freq: Handle autonomous UFS status bit (David Arcari) [RHEL-184964]
  - s390: Revert support for DCACHE_WORD_ACCESS (Charles Haithcock) [RHEL-184094]
  - nvme: make nvme_add_ns{_head}_cdev return void (Maurizio Lombardi) [RHEL-154109]
  - nvme: fix crash and memory leak during invalid cdev teardown (Maurizio Lombardi) [RHEL-154109]
  - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179756] {CVE-2026-43414}
  - watchdog: only run driver set_pretimeout op if device supports it (David Arcari) [RHEL-182246]
  - watchdog: Switch to use hrtimer_setup() (David Arcari) [RHEL-182246]
  - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Convert comma to semicolon (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Report firmware_version (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: No need to stop the timer in probe (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (David Arcari) [RHEL-182246]
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182246]
  - watchdog: wdat_wdt: Add timeout value as a param in ping method (David Arcari) [RHEL-182246]
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179986] {CVE-2026-46181}
  - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180105] {CVE-2026-46135}
  - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179997] {CVE-2026-46176}
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179312] {CVE-2026-46090}
  - Revert "media: cx231xx: add USB ID 2040:8360 for Hauppauge WinTV-HVR-935" (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix bug in error path of uvc_alloc_urb_buffers (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add support for P010 pixel format (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add D436 and D555 cameras metadata support (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Change comment to 'Intel RealSense' (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add a stream backpointer in uvc_video_queue (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Allow userspace to increase the meta buffersize (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: uvc_queue_to_stream(): Support meta queues (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Enable VB2_DMABUF for metadata stream (Kate Hsuan) [RHEL-162130]
  - media: subdev: Split v4l2_subdev_get_frame_desc_passthrough() into locked and unlocked (Kate Hsuan) [RHEL-162130]
  - media: subdev: Improve v4l2_subdev_get_frame_desc_passthrough() kdoc (Kate Hsuan) [RHEL-162130]
  - media: subdev: Minor v4l2_subdev_get_frame_desc_passthrough() cleanups (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Fix error check in v4l2_subdev_get_frame_desc_passthrough() (Kate Hsuan) [RHEL-162130]
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Kate Hsuan) [RHEL-162130] {CVE-2026-31473}
  - media: cx231xx: Fix AGC levels for NTSC-M (Kate Hsuan) [RHEL-162130]
  - media: cx25840: Fix NTSC-J, PAL-N, and SECAM standards (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: add USB ID 2040:8360 for Hauppauge WinTV-HVR-935 (Kate Hsuan) [RHEL-162130]
  - media: pulse8-cec: Handle partial deinit (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: drop redundant device reference (Kate Hsuan) [RHEL-162130]
  - media: remove unnecessary module_init/exit functions (Kate Hsuan) [RHEL-162130]
  - media: subdev: Add v4l2_subdev_get_frame_desc_passthrough helper (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Pass allocation size directly to uvc_alloc_urb_buffer (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix allocation for small frame sizes (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Return queued buffers on start_streaming() failure (Kate Hsuan) [RHEL-162130] {CVE-2026-43290}
  - media: uvcvideo: Create an ID namespace for streaming output terminals (Kate Hsuan) [RHEL-162130]
  - media: v4l: ctrls: add a control for enabling strobe output (Kate Hsuan) [RHEL-162130]
  - media: v4l: ctrls: add a control for flash/strobe duration (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Extend VIDIOC_SUBDEV_S_ROUTING error codes (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Set error v4l2_ctrl_new_fwnode_properties consistently (Kate Hsuan) [RHEL-162130]
  - Revert "media: uvcvideo: Remove nodrop parameter" (Kate Hsuan) [RHEL-162130]
  - media: mc: add debugfs node to keep track of requests (Kate Hsuan) [RHEL-162130]
  - media: mc: add manual request completion (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Document how to format GUIDs (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Remove nodrop parameter (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: UVC minimum relative pan/tilt/zoom speed fix. (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix support for V4L2_CTRL_FLAG_HAS_WHICH_MIN_MAX (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Replace dev_dbg() with uvc_dbg() (Kate Hsuan) [RHEL-162130]
  - media: vb2: drop wait_prepare/finish callbacks (Kate Hsuan) [RHEL-162130]
  - media: vb2: remove vb2_ops_wait_prepare/finish helpers (Kate Hsuan) [RHEL-162130]
  - media: v4l: Add helper to get number of active lanes via a pad (Kate Hsuan) [RHEL-162130]
  - media: videobuf2: forbid remove_bufs when legacy fileio is active (Kate Hsuan) [RHEL-162130] {CVE-2025-40302}
  - media: uvcvideo: Use heuristic to find stream entity (Kate Hsuan) [RHEL-162130]
  - media: cec: Fix debugfs leak on bus_register() failure (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (Kate Hsuan) [RHEL-162130] {CVE-2025-40016}
  - media: uvcvideo: Support UVC_CROSXU_CONTROL_IQ_PROFILE (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Run uvc_ctrl_init_ctrl for all controls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Shorten the transfer size non compliance message (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Do not re-reference dev->udev (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use intf instead of udev for printks (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Move video_device under video_queue (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Drop stream->mutex (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Move MSXU_CONTROL_METADATA definition to header (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add missing curly braces (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Drop unneeded memset() in meta device ioctl handlers (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix assignment in if condition (Kate Hsuan) [RHEL-162130]
  - media: mc: Clear minor number before put device (Kate Hsuan) [RHEL-162130] {CVE-2025-40197}
  - media: v4l2-common: Add legacy camera sensor clock helper (Kate Hsuan) [RHEL-162130]
  - media: mc: Clear minor number reservation at unregistration time (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: v4l2-dv-timings: support DRM IFs (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: eUSB2 double isochronous bandwidth support (Kate Hsuan) [RHEL-162130]
  - media: uapi: v4l2-controls: Cleanup codec definitions (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Constify media_pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-162130]
  - media: uapi: Cleanup tab after define in headers (Kate Hsuan) [RHEL-162130]
  - media: uapi: Move colorimetry controls at the end of the file (Kate Hsuan) [RHEL-162130]
  - media: mc: Improve unconnected pads debugging message in link exploration (Kate Hsuan) [RHEL-162130]
  - media: mc: Fix MUST_CONNECT handling for pads with no links (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Drop the workaround from v4l2_get_link_freq() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Make struct v4l2_subdev_stream_config private (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add a helper for obtaining the clock producer (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Rename second ioctl handlers argument to 'void *priv' (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: Rename second ioctl handlers argument to 'void *priv' (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Rename second ioctl handlers argument to 'void *priv' (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ioctl: Push NULL fh argument down to ioctl wrappers (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ioctl: Stop passing fh pointer to ioctl handlers (Kate Hsuan) [RHEL-162130]
  - media: usb: uvc: Access v4l2_fh from file (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ioctl: Access v4l2_fh from private_data (Kate Hsuan) [RHEL-162130]
  - media: Drop V4L2_FL_USES_V4L2_FH checks (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dev: Make open and release file operations mandatory (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Move v4l2_fh retrieval after V4L2_FL_USES_V4L2_FH check (Kate Hsuan) [RHEL-162130]
  - media: Reset file->private_data to NULL in v4l2_fh_del() (Kate Hsuan) [RHEL-162130]
  - media: Set file->private_data in v4l2_fh_add() (Kate Hsuan) [RHEL-162130]
  - media: Replace file->private_data access with file_to_v4l2_fh() (Kate Hsuan) [RHEL-162130]
  - media: Wrap file->private_data access with a helper function (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add mem2mem helpers for REMOVE_BUFS ioctl (Kate Hsuan) [RHEL-162130]
  - media: usb: uvcvideo: Store v4l2_fh pointer in file->private_data (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Introduce dev->meta_formats (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-162130]
  - media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Remove stream->is_streaming field (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-162130]
  - media: uapi: videodev2: Fix comment for 12-bit packed Bayer formats (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-162130]
  - media: cec: core: add rx-no-low-drive setting (Kate Hsuan) [RHEL-162130]
  - media: cec: core: add glitch error injection (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-162130]
  - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (Kate Hsuan) [RHEL-162130] {CVE-2025-39713}
  - media: gspca: Add bounds checking to firmware parser (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-162130] {CVE-2025-38680}
  - media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-162130]
  - media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-162130]
  - media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-162130]
  - media: gspca: Add error handling for stv06xx_read_sensor() (Kate Hsuan) [RHEL-162130]
  - media: videobuf2: check constants during build time (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-162130]
  - media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition (Kate Hsuan) [RHEL-162130]
  - media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-162130]
  - media: cec: use us_to_ktime() where appropriate (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Remove vidioc_queryctrl (Kate Hsuan) [RHEL-162130]
  - media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: set device_caps for 417 (Kate Hsuan) [RHEL-162130] {CVE-2025-38044}
  - media: cec: core: allow raw msg transmit while configuring (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Drop the uvc_driver structure (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add quirk for Actions UVC05 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: implement UVC v1.5 ROI (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Introduce uvc_mapping_v4l2_size (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: let v4l2_query_v4l2_ctrl() work with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: support V4L2_CTRL_WHICH_MIN/MAX_VAL (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Factor out query_boundaries from query_ctrl (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: add support for compound controls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Factor out clamping from uvc_ctrl_set (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Support any size for mapping get/set (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: uvc_ioctl_(g|s)_ext_ctrls: handle NoP case (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: refactor uvc_ioctl_g_ext_ctrls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Handle uvc menu translation inside uvc_set_le_value (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: add support for V4L2_CTRL_WHICH_MIN/MAX_VAL (Kate Hsuan) [RHEL-162130]
  - media: v4l2_ctrl: Add V4L2_CTRL_TYPE_RECT (Kate Hsuan) [RHEL-162130]
  - media: pwc: remove useless header files (Kate Hsuan) [RHEL-162130]
  - media: Switch to use hrtimer_setup() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-162130]
  - media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-162130]
  - media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-162130]
  - media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: remove redundant assignment to variable value (Kate Hsuan) [RHEL-162130]
  - media: mc: Rename pad as origin in __media_pipeline_start() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Refactor events (Kate Hsuan) [RHEL-162130]
  - media: vb2: fix confusing log message (Kate Hsuan) [RHEL-162130]
  - media: vb2: Fix comment (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: constify the class struct (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Kate Hsuan) [RHEL-162130]
  - media: video-i2c: drop vb2_ops_wait_prepare/finish (Kate Hsuan) [RHEL-162130]
  - media: videobuf2-core: update vb2_thread if wait_finish/prepare are NULL (Kate Hsuan) [RHEL-162130]
  - v4l2-subdev: Return -EOPNOTSUPP for unsupported pad type in call_get_frame_desc() (Kate Hsuan) [RHEL-162130]
  - media: videodev2: Add flag to unconditionally enumerate pixel formats (Kate Hsuan) [RHEL-162130]
  - media: vb2: use lock if wait_prepare/finish are NULL (Kate Hsuan) [RHEL-162130]
  - media: vb2: vb2_core_queue_init(): sanity check lock and wait_prepare/finish (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: add v4l2_debugfs_if_alloc/free() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: add v4l2_debugfs_root() (Kate Hsuan) [RHEL-162130]
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175528] {CVE-2026-31474}
  - serial: ce4100: fix build after serial_in/out() changes (Mark Salter) [RHEL-111649]
  - serial: port: Always update ->iotype in __uart_read_properties() (Mark Salter) [RHEL-111649]
  - serial: port: Assign ->iotype correctly when ->iobase is set (Mark Salter) [RHEL-111649]
  - device property: Implement device_is_big_endian() (Mark Salter) [RHEL-111649]
  - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt storm (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handling (Mark Salter) [RHEL-111649]
  - serial: 8250: Add serial8250_handle_irq_locked() (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Avoid unnecessary LCR writes (Mark Salter) [RHEL-111649]
  - serial: 8250: Protect LCR write in shutdown (Mark Salter) [RHEL-111649]
  - serial: 8250_pci: add support for the AX99100 (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Drop unneeded NULL checks in dw8250_quirks() (Mark Salter) [RHEL-111649]
  - serial: 8250: Fix TX deadlock when using DMA (Mark Salter) [RHEL-111649]
  - serial: 8250: sanitize uart_port::serial_{in,out}() types (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Comment possible corner cases in serial_out() implementation (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Call dw8250_quirks() conditionally (Mark Salter) [RHEL-111649]
  - serial: 8250: use serial_port_in/out() helpers (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Use reset array API to get resets (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Revert "Move definitions to the shared header" (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Don't use struct dw8250_data outside of 8250_dw (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Hide a cast in dw8250_serial_inq() (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Deduplicate LCR checks (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Replace ACPI device check by a quirk (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Switch to use uart_read_port_properties() (Mark Salter) [RHEL-111649]
  - serial: port: Introduce a common helper to read properties (Mark Salter) [RHEL-111649]
  - serial: core: Add UPIO_UNKNOWN constant for unknown port type (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Emit an error message if getting the baudclk failed (Mark Salter) [RHEL-111649]
  - serial: 8250: Use serial8250_do_set_termios for uartclk updating (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Do not bailout on UCV read returning zero (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Decouple DLF register check from UCV (Mark Salter) [RHEL-111649]
  - ice: use ice_update_eth_stats() for representor stats (CKI Backport Bot) [RHEL-73628]
  - ice: fix inverted ready check for VF representors (CKI Backport Bot) [RHEL-73628]
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (CKI Backport Bot) [RHEL-170799] {CVE-2026-23401}
  - dm-verity-fec: fix corrected block count stat (Benjamin Marzinski) [RHEL-154976]
  - dm-mpath: don't stop probing paths at presuspend (Benjamin Marzinski) [RHEL-138608]
  - dm mpath: make pg_init_delay_msecs settable (Benjamin Marzinski) [RHEL-154976]
  - dm: use bio_clone_blkg_association (Benjamin Marzinski) [RHEL-154976]
  - dm-unstripe: fix mapping bug when there are multiple targets in a table (Benjamin Marzinski) [RHEL-154976]
  - dm-integrity: fix recalculation in bitmap mode (Benjamin Marzinski) [RHEL-144459]
  - dm: clear cloned request bio pointer when last clone bio completes (Benjamin Marzinski) [RHEL-154976]
  - dm-integrity: fix a typo in the code for write/discard race (Benjamin Marzinski) [RHEL-154976]
  - dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-154976]
  - dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-154976]
  - dm: replace -EEXIST with -EBUSY (Benjamin Marzinski) [RHEL-154976]
  - dm: remove fake timeout to avoid leak request (Benjamin Marzinski) [RHEL-154976]
  - dm pcache: fix segment info indexing (Benjamin Marzinski) [RHEL-154976]
  - dm pcache: fix cache info indexing (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: advance slot index before writing slot (Benjamin Marzinski) [RHEL-154976]
  - dm raid: add documentation for takeover/reshape raid1 -> raid5 table line examples (Benjamin Marzinski) [RHEL-154976]
  - dm: ignore discard return value (Benjamin Marzinski) [RHEL-154976]
  - MAINTAINERS: add Benjamin Marzinski as a device mapper maintainer (Benjamin Marzinski) [RHEL-154976]
  - dm-mpath: Simplify the setup_scsi_dh code (Benjamin Marzinski) [RHEL-154976]
  - dm-bufio: align write boundary on physical block size (Benjamin Marzinski) [RHEL-154976]
  - dm-crypt: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-136803]
  - dm: test for REQ_ATOMIC in dm_accept_partial_bio() (Benjamin Marzinski) [RHEL-154976]
  - dm-verity: remove useless mempool (Benjamin Marzinski) [RHEL-154976]
  - dm-verity: disable recursive forward error correction (Benjamin Marzinski) [RHEL-154976] {CVE-2025-71161}
  - dm-ebs: Mark full buffer dirty even on partial write (Benjamin Marzinski) [RHEL-154976]
  - dm mpath: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-154976]
  - dm verity fec: Expose corrected block count via status (Benjamin Marzinski) [RHEL-154976]
  - dm: Don't warn if IMA_DISABLE_HTABLE is not enabled (Benjamin Marzinski) [RHEL-154976]
  - dm-verity: remove log message with shash driver name (Benjamin Marzinski) [RHEL-154976]
  - dm: sysfs: use sysfs_emit() in dm-sysfs.c (Benjamin Marzinski) [RHEL-154976]
  - dm: remove useless md->nr_zones variable (Benjamin Marzinski) [RHEL-154976]
  - dm-crypt: use folio_nr_pages() instead of shift operation (Benjamin Marzinski) [RHEL-136803]
  - dm: fix failure when empty flush's bi_sector points beyond the device end (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: zero cache_info before default init (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: reuse meta_addr in pcache_meta_find_latest (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: allow built-in build and rename flush helper (Benjamin Marzinski) [RHEL-154976]
  - dm raid: use proper md_ro_state enumerators (Benjamin Marzinski) [RHEL-154976]
  - dm-integrity: prefer synchronous hash interface (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: enable asynchronous hash interface (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: rename internal_hash (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: add the "offset" argument (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: allocate the recalculate buffer with kmalloc (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: introduce integrity_kmap and integrity_kunmap (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: replace bvec_kmap_local with kmap_local_page (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: use internal variable for digestsize (Benjamin Marzinski) [RHEL-136803]
  - dm: optimize REQ_PREFLUSH with data when using the linear target (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: use int type to store negative error codes (Benjamin Marzinski) [RHEL-154976]
  - dm: fix "writen"->"written" (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: cleanup: fix coding style report by checkpatch.pl (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: remove ctrl_lock for pcache_cache_segment (Benjamin Marzinski) [RHEL-154976]
  - redhat/configs: Add CONFIG_DM_PCACHE (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: add persistent cache target in device-mapper (Benjamin Marzinski) [RHEL-154976]
  - dm error: mark as DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-154976]
  - docs: device-mapper: fixed spelling mistakes in documentation (Benjamin Marzinski) [RHEL-154976]
  - dm bufio: remove redundant __GFP_NOWARN (Benjamin Marzinski) [RHEL-154976]
  - dm-ima: drop a useless argument (Benjamin Marzinski) [RHEL-154976]
  - dm: use vmalloc_array() to simplify code (Benjamin Marzinski) [RHEL-154976]
  - dm-ima: more strlen() drops (Benjamin Marzinski) [RHEL-154976]
  - cgroup/cpuset: Fix incorrect use of cpuset_update_tasks_cpumask() in update_cpumasks_hier() (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Consistently compute effective_xcpus in update_cpumasks_hier() (Waiman Long) [RHEL-154974]
  - cpuset: Treat cpusets in attaching as populated (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Don't track # of local child partitions (Waiman Long) [RHEL-154974]
  - cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-154974]
  - cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-154974]
  - cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-154974]
  - cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-154974]
  - cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-154974]
  - cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-154974]
  - cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-154974]
  - cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-154974]
  - cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-154974]
  - cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-154974]
  - cpuset: refactor out validate_partition (Waiman Long) [RHEL-154974]
  - cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-154974]
  - cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-154974]
  - cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-154974]
  - cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-154974]
  - cpuset: remove unused assignment to trialcs->partition_root_state (Waiman Long) [RHEL-154974]
  - cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-154974]
  - cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-154974]
  - cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-154974]
  - cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-154974]
  - cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-154974]
  - cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-154974]
  - cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-154974]
  - cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-154974] {CVE-2025-39953}
  - cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-154974]
  - memcg: always call cond_resched() after fn() (Waiman Long) [RHEL-154974]
  - cgroup: fix race between fork and cgroup.kill (Waiman Long) [RHEL-154974]
  - memcg: fix soft lockup in the OOM process (Waiman Long) [RHEL-154974] {CVE-2024-57977}
  - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142099] {CVE-2025-71116}
  - Disable TPM as hwrng source on aarch64 (Štěpán Horáček) [RHEL-66934]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-718.el9]
changelog:
  - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179583] {CVE-2026-45991}
  - KVM: s390: Increase permitted SE header size to 1 MiB (Ramesh Chhetri) [RHEL-185660]
  - ice: fix PTP timestamping broken by SyncE code on E825C (CKI Backport Bot) [RHEL-152500]
  - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170635]
  - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170635]
  - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170635]
  - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170635]
  - tcp: secure_seq: add back ports to TS offset (Paolo Abeni) [RHEL-152683]
  - net/tcp-md5: Fix MAC comparison to be constant-time (Paolo Abeni) [RHEL-152683]
  - tcp: tcp_tx_timestamp() must look at the rtx queue (Paolo Abeni) [RHEL-152683]
  - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-161661]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-719.el9]
changelog:
  - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-186905]
  - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182565] {CVE-2026-31739}
  - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182565]
  - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180692] {CVE-2026-31530}
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181904] {CVE-2026-46259}
  - dm-raid: only requeue bios when dm is suspending (Nigel Croxon) [RHEL-179131]
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172671] {CVE-2026-43038}
  - iommu/vt-d: Remove LPIG from page group response descriptor (CKI Backport Bot) [RHEL-169025]
  - rtla: Fix parsing of multi-character short options (Tomas Glozar) [RHEL-151361]
  - tracing: Fix potential deadlock in cpu hotplug with osnoise (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Convert links to RST format (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Document SIGINT behavior (Tomas Glozar) [RHEL-151361]
  - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-151361 RHEL-169238]
  - rtla/utils: Fix loop condition in PID validation (Tomas Glozar) [RHEL-151361]
  - rtla/utils: Fix resource leak in set_comm_sched_attr() (Tomas Glozar) [RHEL-151361]
  - rtla/trace: Fix I/O handling in save_trace_to_file() (Tomas Glozar) [RHEL-151361]
  - rtla/trace: Fix write loop in trace_event_save_hist() (Tomas Glozar) [RHEL-151361]
  - rtla/timerlat: Simplify RTLA_NO_BPF environment variable check (Tomas Glozar) [RHEL-151361]
  - rtla: Use str_has_prefix() for option prefix check (Tomas Glozar) [RHEL-151361]
  - rtla: Enforce exact match for time unit suffixes (Tomas Glozar) [RHEL-151361]
  - rtla: Use str_has_prefix() for prefix checks (Tomas Glozar) [RHEL-151361]
  - rtla: Add str_has_prefix() helper function (Tomas Glozar) [RHEL-151361]
  - rtla: Handle pthread_create() failure properly (Tomas Glozar) [RHEL-151361]
  - rtla/timerlat: Add bounds check for softirq vector (Tomas Glozar) [RHEL-151361]
  - rtla: Simplify code by caching string lengths (Tomas Glozar) [RHEL-151361]
  - rtla: Replace magic number with MAX_PATH (Tomas Glozar) [RHEL-151361]
  - rtla: Introduce common_threshold_handler() helper (Tomas Glozar) [RHEL-151361]
  - rtla/actions: Simplify argument parsing (Tomas Glozar) [RHEL-151361]
  - rtla: Use strdup() to simplify code (Tomas Glozar) [RHEL-151361]
  - rtla: Exit on memory allocation failures during initialization (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unneeded nr_cpus from for_each_monitored_cpu (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unneeded nr_cpus members (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unneeded nr_cpus arguments (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate nr_cpus usage across all tools (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Document --stack-format option (Tomas Glozar) [RHEL-151361 RHEL-155232]
  - rtla/timerlat: Add --stack-format option (Tomas Glozar) [RHEL-151361 RHEL-155232]
  - tools/rtla: Add unit tests for utils.c (Tomas Glozar) [RHEL-151361]
  - tools/build: Add feature test for libcheck (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Generate optstring from long options (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Add hwnoise to main page (Tomas Glozar) [RHEL-151361]
  - rtla: Fix build without libbpf header (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Include defaults for tracer options (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Mention default cgroup state (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Mention default priority (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Correct tracer name for common options (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in rtla-timerlat-top.rst (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in common_options.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: rename common_xxx.rst files to common_xxx.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/osnoise: Add osnoise/options documentation (Tomas Glozar) [RHEL-151361]
  - Documentation/osnoise: Escape underscore of NO_ prefix (Tomas Glozar) [RHEL-151361]
  - Documentation/osnoise: Add osnoise/options documentation (Tomas Glozar) [RHEL-151361]
  - rtla: Fix parse_cpu_set() bug introduced by strtoi() (Tomas Glozar) [RHEL-151361]
  - rtla: Make stop_tracing variable volatile (Tomas Glozar) [RHEL-151361]
  - rtla: Add generated output files to gitignore (Tomas Glozar) [RHEL-151361]
  - rtla: Fix NULL pointer dereference in actions_parse (Tomas Glozar) [RHEL-151361]
  - rtla: Remove unused headers (Tomas Glozar) [RHEL-151361]
  - rtla: Remove redundant memset after calloc (Tomas Glozar) [RHEL-151361]
  - rtla: Use standard exit codes for result enum (Tomas Glozar) [RHEL-151361]
  - rtla: Replace atoi() with a robust strtoi() (Tomas Glozar) [RHEL-151361]
  - rtla: Introduce for_each_action() helper (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Deduplicate cgroup path opening code (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -H/--house-keeping option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -P/--priority option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -e/--event option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -d/--duration option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -D/--debug option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -C/--cgroup option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -c/--cpus option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add common_parse_options() (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add common_usage() (Tomas Glozar) [RHEL-151361]
  - rtla: Set stop threshold after all instances are enabled (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unused function declarations (Tomas Glozar) [RHEL-151361]
  - tracing: Fix multiple typos in trace_osnoise.c (Tomas Glozar) [RHEL-151361]
  - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-151361 RHEL-155124]
  - rtla/tests: Don't rely on matching ^1ALL (Tomas Glozar) [RHEL-151361]
  - rtla: Fix -a overriding -t argument (Tomas Glozar) [RHEL-151361]
  - rtla: Fix -C/--cgroup interface (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace osnoise_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace osnoise_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace timerlat_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace timerlat_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add fatal() and replace error handling pattern (Tomas Glozar) [RHEL-151361]
  - rtla/tests: Fix osnoise test calling timerlat (Tomas Glozar) [RHEL-151361]
  - rtla/tests: Extend action tests to 5s (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Fix --on-threshold always triggering (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Fix unassigned nr_cpus (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unused optional option_index (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add for_each_monitored_cpu() helper (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add remaining support for osnoise actions (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Add test engine support for unexpected output (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Fix -A option name in test comment (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Consolidate code between osnoise/timerlat and hist/top (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Create common_apply_config() (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Move top/hist params into common struct (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Consolidate common parameters into shared structure (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - rtla: Ensure null termination after read operations in utils.c (Tomas Glozar) [RHEL-151361]
  - rtla: Fix parse_cpu_set() return value documentation (Tomas Glozar) [RHEL-151361]
  - tracing: Fix false sharing in hwlat get_sample() (Tomas Glozar) [RHEL-151361]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-720.el9]
changelog:
  - KVM: s390: Add capability that forwards operation exceptions (Christoph Schlameuss) [RHEL-136478]
  - KVM: s390: Add KVM capability for ESA mode guests (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Allow non-zarch guests (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Accommodate ESA prefix pages (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Disable some bits when in ESA mode (Mircea Dragan) [RHEL-136478]
  - KVM: s390: only deliver service interrupt with payload (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: retry SIE when unable to get vsie_page (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Check alignment of BSCA header (Mircea Dragan) [RHEL-136478]
  - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177395] {CVE-2026-46331}
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183964] {CVE-2026-46316}
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179859] {CVE-2026-46227}
  - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-164306]
  - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-164306]
  - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167748] {CVE-2026-31411}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-721.el9]
changelog:
  - watchdog: Fix NULL pointer dereference when releasing cdev (David Arcari) [RHEL-189449]
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189496] {CVE-2026-43112}
  - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Mark Salter) [RHEL-143322]
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Mark Salter) [RHEL-143322]
  - perf: arm_pmu: Move PMUv3-specific data (Mark Salter) [RHEL-143322]
  - perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions (Mark Salter) [RHEL-143322]
  - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-118669]
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172647] {CVE-2026-43037}
  - blk-mq: fix stale tag depth for shared sched tags in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-165529]
  - block: define alloc_sched_data and free_sched_data methods for kyber (Ming Lei) [RHEL-165529]
  - block: use {alloc|free}_sched data methods (Ming Lei) [RHEL-165529]
  - block: introduce alloc_sched_data and free_sched_data elevator methods (Ming Lei) [RHEL-165529]
  - block: move elevator tags into struct elevator_resources (Ming Lei) [RHEL-165529]
  - block: unify elevator tags and type xarrays into struct elv_change_ctx (Ming Lei) [RHEL-165529]
  - blk-mq: remove blk_mq_tag_update_depth() (Ming Lei) [RHEL-165529]
  - blk-mq: fix potential deadlock while nr_requests grown (Ming Lei) [RHEL-165529]
  - blk-mq-sched: add new parameter nr_requests in blk_mq_alloc_sched_tags() (Ming Lei) [RHEL-165529]
  - blk-mq: split bitmap grow and resize case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - blk-mq: cleanup shared tags case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - blk-mq: convert to serialize updating nr_requests with update_nr_hwq_lock (Ming Lei) [RHEL-165529]
  - blk-mq: check invalid nr_requests in queue_requests_store() (Ming Lei) [RHEL-165529]
  - blk-mq: remove useless checkings in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - blk-mq: remove useless checking in queue_requests_store() (Ming Lei) [RHEL-165529]
  - tick/nohz: Expose housekeeping CPUs in sysfs (Waiman Long) [RHEL-143910]
  - kernel/rcu/tree_stall: add /sys/kernel/rcu_stall_count (Waiman Long) [RHEL-143910]
  - kernel/watchdog: add /sys/kernel/{hard,soft}lockup_count (Waiman Long) [RHEL-143910]
  - watchdog: move softlockup_panic back to early_param (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: avoid large stack frames in watchdog_hardlockup_check() (Waiman Long) [RHEL-143910]
  - nmi_backtrace: allow excluding an arbitrary CPU (Waiman Long) [RHEL-143910]
  - powerpc: move arch_trigger_cpumask_backtrace from nmi.h to irq.h (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: in watchdog_hardlockup_check() use cpumask_copy() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails (Waiman Long) [RHEL-143910]
  - watchdog/perf: adapt the watchdog_perf interface for async model (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: have the perf hardlockup use __weak functions more cleanly (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: rename some "NMI watchdog" constants/function (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: move perf hardlockup watchdog petting to watchdog.c (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: add a "cpu" param to watchdog_hardlockup_check() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: style changes to watchdog_hardlockup_check() / is_hardlockup() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: move perf hardlockup checking/panic to common watchdog.c (Waiman Long) [RHEL-143910]
  - watchdog/perf: rename watchdog_hld.c to watchdog_perf.c (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: add comments to touch_nmi_watchdog() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: change watchdog_nmi_enable() to void (Waiman Long) [RHEL-143910]
  - watchdog: remove WATCHDOG_DEFAULT (Waiman Long) [RHEL-143910]
  - watchdog/perf: more properly prevent false positives with turbo modes (Waiman Long) [RHEL-143910]
  - lib/Kconfig.debug: remove more CONFIG_..._VALUE indirections (Waiman Long) [RHEL-143910]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-722.el9]
changelog:
  - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180044] {CVE-2026-46155}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180044]
  - thermal: intel: int340x: Read DDR data rate for Nova Lake (David Arcari) [RHEL-117278]
  - enable CONFIG_GPIO_NOVALAKE for RHEL (David Arcari) [RHEL-117350]
  - gpio: Add Intel Nova Lake ACPI GPIO events driver (David Arcari) [RHEL-117350]
  - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (David Arcari) [RHEL-184322]
  - sched: idle: Make skipping governor callbacks more consistent (Mark Langsdorf) [RHEL-176384]
  - cpuidle: menu: Remove single state handling (Mark Langsdorf) [RHEL-176384]
  - cpuidle: haltpoll: Remove single state handling (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Skip governor when only one idle state is available (Mark Langsdorf) [RHEL-176384]
  - cpuidle: governors: menu: Always check timers with tick stopped (Mark Langsdorf) [RHEL-176384]
  - cpuidle: menu: Remove incorrect unlikely() annotation (Mark Langsdorf) [RHEL-176384]
  - cpuidle: big_little: Simplify with of_machine_device_match() (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Warn instead of bailing out if target residency check fails (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Update header inclusion (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Respect the CPU system wakeup QoS limit for cpuidle (Mark Langsdorf) [RHEL-176384]
  - sched: idle: Respect the CPU system wakeup QoS limit for s2idle (Mark Langsdorf) [RHEL-176384]
  - PM: QoS: Introduce a CPU system wakeup QoS limit (Mark Langsdorf) [RHEL-176384]
  - redhat/configs: enable CONFIG_PM_QOS_CPU_SYSTEM_WAKEUP (Mark Langsdorf) [RHEL-176384]
  - cpuidle: psci: Replace deprecated strcpy in psci_idle_init_cpu (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Add sanity check for exit latency and target residency (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Fail cpuidle device registration if there is one already (Mark Langsdorf) [RHEL-176384]
  - cpuidle: sysfs: Use sysfs_emit()/sysfs_emit_at() instead of sprintf()/scnprintf() (Mark Langsdorf) [RHEL-176384]
  - cpuidle: qcom-spm: drop unnecessary initialisations (Mark Langsdorf) [RHEL-176384]
  - cpuidle: qcom-spm: fix device and OF node leaks at probe (Mark Langsdorf) [RHEL-176384]
  - cpuidle: dt: fix opencoded for_each_cpu() in idle_state_valid() (Mark Langsdorf) [RHEL-176384]
  - arm64: topology: Fix false warning in counters_read_on_cpu() for same-CPU reads (Mark Langsdorf) [RHEL-176382]
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (Mark Langsdorf) [RHEL-176382]
  - cpufreq: conservative: Reset requested_freq on limits change (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Don't skip cpufreq_frequency_table_cpuinfo() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: s5pv210: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-176382]
  - cpufreq: ondemand: Simplify idle cputime granularity test (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Add generic helpers for sysfs show/store (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Add ti,am62l3 to blocklist (Mark Langsdorf) [RHEL-176382]
  - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: scmi: correct SCMI explanation (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Block the driver from probing on more QC platforms (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Update FIE arch_freq_scale in ticks for non-PCC regs (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Factor out cppc_fie_kworker_init() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: add sentinel to qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Add Tegra186 and Tegra194 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Fix creating device on OPPv1 platforms (Mark Langsdorf) [RHEL-176382]
  - cpufreq: cpufreq_boost_trigger_state() optimization (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Return -EOPNOTSUPP if no policy supports boost (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Simplify with of_machine_get_match_data() (Mark Langsdorf) [RHEL-176382]
  - of: Add of_machine_get_match() helper (Mark Langsdorf) [RHEL-176382]
  - of: Add wrappers to match root node with OF device ID tables (Mark Langsdorf) [RHEL-176382]
  - of: Add of_machine_compatible_match() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: fix compilation warning for qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176382]
  - cpufreq: ACPI: Replace udelay() with usleep_range() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra194: add WQ_PERCPU to alloc_workqueue users (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: add compatible fallback for ipq806x for no SMEM (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters (Mark Langsdorf) [RHEL-176382]
  - cpufreq: nforce2: fix reference count leak in nforce2 (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: add OPP support and set bandwidth (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist (Mark Langsdorf) [RHEL-176382]
  - cpufreq: s5pv210: fix refcount leak (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Replace deprecated strcpy() in cpufreq_unregister_governor() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: preserve freq_table_sorted across suspend/hibernate (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: Initialize all cores to max frequencies (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: Set target frequency for all cpus in policy (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Replace pointer subtraction with iteration macro (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Add defensive check during driver registration (Mark Langsdorf) [RHEL-176382]
  - cpufreq: ACPI: Use on_each_cpu_mask() in drv_write() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: conservative: Replace sscanf() with kstrtouint() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: core: Rearrange variable declarations involving __free() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Use int type to store negative error codes (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Drop redundant freq_table parameter (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: s5pv210: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: brcmstb-avs: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: use strlen() for governor name comparison (Mark Langsdorf) [RHEL-176382]
  - cpufreq: simplify setpolicy/target check in driver verification (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Blacklist ti,am62d2 SoC (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Avoid calling get_governor() for first policy (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: Enable cpufreq for ipq5424 (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Remove unused parameter in cppc_perf_from_fbctrs() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: armada-37xx: use max() to calculate target_vm (Mark Langsdorf) [RHEL-176382]
  - bus: mhi: ep: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171418]
  - bus: mhi: host: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171418]
  - mhi: host: Add support for loading dual ELF image format (Jose Ignacio Tornos Martinez) [RHEL-171418]


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x"
  - Resolves: RHEL-83262


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Petr Lautrbach <lautrbach@redhat.com> - 3.6-5
changelog:
  - sandbox/seunshare: Replace system() with execv() to prevent shell injection
  - seunshare: fix the frail tmpdir cleanup


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.5.25-3
changelog:
  - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
    Resolves: RHEL-176544


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Karel Zak <kzak@redhat.com> 2.37.4-22
changelog:
  - fix RHEL-113638 - lscpu: update ARM identifiers
  - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification


author: Karel Zak <kzak@redhat.com> 2.37.4-23
changelog:
  - fix RHEL-123527 - mount: improve --all documentation
  - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
  - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1954531 - Update to Samba 4.14.4
  - resolves: rhbz#1949446 - Fix CVE-2021-20254
  - resolves: rhbz#1942378 - Disable nis support


author: Andreas Schneider <asn@redhat.com> - 4.14.4-7
changelog:
  - related: rhbz#1954531 - Fix build issues with gcc
  - resolves: rhbz#1959712 - Add iouring vfs module


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Marek Blaha <mblaha@redhat.com> - 0.7.24-5
changelog:
  - Backport "choice rules: also do solver_choicerulecheck for package downgrades"
    Resolves: RHEL-141449


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Petr Menšík <pemensik@redhat.com> - 1.24.2-2
changelog:
  - Switch TLS configuration to follow TLS sockets by crypto-policy again
    (RHEL-147860)
  - Change the default of tls-use-system-policy-versions at build-time


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-6
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143110
  Resolves: RHEL-143170
  Resolves: RHEL-144894


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-7
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143110, RHEL-143170, RHEL-144894


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64886, RHEL-70320


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-88897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98057, RHEL-98019, RHEL-97811, RHEL-98183, RHEL-98210


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143112
  Resolves: RHEL-143172
  Resolves: RHEL-144895


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-6
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143112, RHEL-143172, RHEL-144895


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  Related: RHEL-168159, RHEL-167917


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-168159, RHEL-167917


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144896, RHEL-143115, RHEL-143173


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144896, RHEL-143115, RHEL-143173


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-167918, RHEL-168160


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-167918, RHEL-168160


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-180642


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-9
changelog:
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144]
  - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193]
  - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193]
  - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193]
  - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193]
  - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193]
  - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193]
  - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193]
  - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193]
  - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193]
  - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193]
  - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193]
  - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193]
  - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193]
  - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193]
  - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193]
  - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193]
  - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193]
  - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193]
  - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193]
  - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193]
  - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193]
  - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193]
  - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193]
  - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193]
  - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193]
  - Resolves: RHEL-131144
    (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8])
  - Resolves: RHEL-132193
    ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-10
changelog:
  - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193]
  - Resolves: RHEL-132193
    ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-11
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
  - Resolves: RHEL-138240
    (QEMU crashes when stopping source VM during live migration [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-12
changelog:
  - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
  - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
  - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
  - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
  - Resolves: RHEL-132989
    (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
  - Resolves: RHEL-140187
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
  - Resolves: RHEL-139057
    ([qemu, rhel-9] increase default TSEG size)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
  - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
  - Resolves: RHEL-147422
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-130620
    (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-14
changelog:
  - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
  - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
  - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
  - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
  - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
  - Resolves: RHEL-67115
    ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-15
changelog:
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
  - Resolves: RHEL-149396
    (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-16
changelog:
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
  - Resolves: RHEL-151679
    ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-17
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
  - Resolves: RHEL-155947
    (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
  - Resolves: RHEL-155948
    (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
  - Resolves: RHEL-154174
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-18
changelog:
  - kvm-pc-bios-s390-ccw-Always-reset-virtio-device-on-faile.patch [RHEL-156851]
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-135379]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-135379]
  - Resolves: RHEL-156851
    (RHEL9.8 - [KVM] Guest configured with different boot order, crashed during "virsh reset".)
  - Resolves: RHEL-135379
    (Add stats-intervals support to --blockdev [rhel9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-19
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164535]
  - Resolves: RHEL-164535
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-20
changelog:
  - kvm-vmstate-Introduce-VMSTATE_VARRAY_INT32_ALLOC.patch [RHEL-174859]
  - kvm-target-arm-Move-compare_u64-to-helper.c.patch [RHEL-174859]
  - kvm-target-arm-Convert-init_cpreg_list-to-g_hash_table_f.patch [RHEL-174859]
  - kvm-target-arm-machine-Use-VMSTATE_VARRAY_INT32_ALLOC-fo.patch [RHEL-174859]
  - kvm-target-arm-kvm-Export-kvm_print_register_name.patch [RHEL-174859]
  - kvm-target-arm-kvm-Tweak-print_register_name-for-arm64-s.patch [RHEL-174859]
  - kvm-target-arm-machine-Trace-cpreg-names-which-do-not-ma.patch [RHEL-174859]
  - kvm-target-arm-machine-Trace-all-register-mismatches.patch [RHEL-174859]
  - kvm-target-arm-machine-Fix-detection-of-unknown-incoming.patch [RHEL-174859]
  - kvm-target-arm-cpu-Introduce-the-infrastructure-for-cpre.patch [RHEL-174859]
  - kvm-target-arm-machine-Handle-ToleranceNotOnBothEnds-mig.patch [RHEL-174859]
  - kvm-target-arm-machine-Handle-ToleranceOnlySrcTestValue-.patch [RHEL-174859]
  - kvm-target-arm-cpu64-Mitigate-migration-failures-due-to-.patch [RHEL-174859]
  - kvm-target-arm-cpu64-Define-cpreg-migration-tolerance-fo.patch [RHEL-174859]
  - kvm-target-arm-helper-Define-cpreg-migration-tolerance-f.patch [RHEL-174859]
  - kvm-Revert-target-arm-Reinstate-bogus-AArch32-DBGDTRTX-r.patch [RHEL-174859]
  - Resolves: RHEL-174859
    ([rhel9] Backport qemu cross-kernel migration mitigation series)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-21
changelog:
  - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-158243]
  - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-158243]
  - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-158243]
  - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-177969]
  - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-177969]
  - Resolves: RHEL-158243
    (live migration failed the VM just register key only [rhel-9.9])
  - Resolves: RHEL-177969
    (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-22
changelog:
  - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184528]
  - Resolves: RHEL-184528
    (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.9])


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-2
changelog:
  - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup
    Resolves: RHEL-104999
  - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices
    Resolves: RHEL-105004


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Remi Collet <remi@remirepo.net> - 7.0.10-2
changelog:
  - fix modules directory ownership and permissions #2176173
  - drop redis-shutdown helper and rely on systemd #2181181


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Jeremy Crafts <jcrafts@redhat.com> - 0.1.13-5
changelog:
  - Update rhc-worker-playbook to 0.1.13 (RHEL-137408)
  - Reduce size of rhc-worker-playbook messages (RHEL-142699)
  - Invoke rhc-playbook-verifier for playbook verification (RHEL-142700)


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-40
changelog:
  - Improve error handling on keystore load (RHEL-114837)
  - Sort files before passing to file attr dependency generators (RHEL-95376)


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.6-4
changelog:
  - Backport: https://github.com/coreos/rpm-ostree/pull/5322
    Backport: https://github.com/coreos/rpm-ostree/pull/5339
    Resolves: #RHEL-84466


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2026.1-5
changelog:
  - Backport https://github.com/coreos/rpm-ostree/pull/5575
    Backport https://github.com/coreos/rpm-ostree/pull/5576
    Resolves: RHEL-154808


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5
  - Modify rshim.spec accordingly
  - Switch to %autosetup to handle Patch0 and any future patches
  - Resolves: rhbz#1858577


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196626


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-114
changelog:
  - Fix wrong type conversion in cstrLen()
    resolves: rhbz#2157805
  - imjournal: by default retrieves _PID from journal as PID number
    resolves: rhbz#2176397
  - Systemd service file hardening
    resolves: rhbz#2176403
  - rsyslog.conf: load imuxsock and imjournal before loading rsyslog.d
    resolves: rhbz#2165899
  - rsyslog is now started after the network service during boot
    resolves: rhbz#2074318
  - imjournal: add second fallback to the message identifier
    resolves: rhbv#2129015


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-115
changelog:
  - omelasticsearch: make compatible with elasticsearch>=8
  - add new action specific parameter esversion.major
    resolves: rhbz#2209017


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-116
changelog:
  - libcapng: do not try to drop capabilities that are not present
  - add global libcapng.default to not abort when libcapng fails
    resolves: rhbz#2216919


author: Attila Lakatos <alakatos@redhat.com> - 8.2310.0-3
changelog:
  - Rebase to 8.2310.0
    Resolves: RHEL-5196
  - Allow setting certificates for separate connections
    Resolves: RHEL-937
  - Capability dropping feature can be turned off
    Resolves: RHEL-943
  - imjournal: new module parameter filecreatemode
    Resolves: RHEL-949


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-65177
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-38222
    Resolves: RHEL-70099
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-70100
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-70109
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-70111


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-66274
  - man page version update
    Resolves: RHEL-78220
  - omfwd: do not hang forever in case of broken TLS handshake
    Resolves: RHEL-67639


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-2
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-86031
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-42508
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-105782


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-1
changelog:
  - Rebase to 8.2604.0
    Resolves: RHEL-140914
  - Drop ossl-free-cert.patch (upstream)
  - Drop gtls-unused-certificates.patch (upstream)
  - Add SAN:IP validation support
    Resolves: RHEL-169794
  - Fix omelasticsearch IPv6 handling
    Resolves: RHEL-169492
  - Fix imfile not releasing deleted file FDs in inotify mode
    Resolves: RHEL-171897
  - Move logrotate configuration back to the main package
    Resolves: RHEL-173192


author: Jun Aruga <jaruga@redhat.com> - 3.1.2-142
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-5590
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-5590
  - Disable fiddle tests that use FFI closures.
    Related: RHEL-5590


author: Jarek Prokop <jprokop@redhat.com> - 3.3.1-2
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33976
  - Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-34130
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-34122
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-33872


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-3
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-55411
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57575
    Resolves: RHEL-57572
    Resolves: RHEL-57068
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-57569
  - Fix incorrect symlink for rubygem-irb's library.
    Resolves: RHEL-42646


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-4
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-68631
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86109
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-5
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-106821
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-126728


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-6
changelog:
  - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
    Resolves: RHEL-171260


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-32
changelog:
  - Upgrade to Ruby 4.0.3.
    Resolves: RHEL-170932
  - Fix ERB: Arbitrary code execution via deserialization bypass
   (CVE-2026-41316)
    Resolves: RHEL-171261
  - Fix JSON: Denial of Service or Information Disclosure via format string injection
   (CVE-2026-33210)
   Resolves: RHEL-169965


author: <msekleta@redhat.com> - 0.3.2-5
changelog:
  - Adjust packaging to account for differences between Fedora and CentOS/RHEL rust packaging (#1930369)


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73342)
  - LPAR level power consumption reporting (RHEL-72675)
  - Provide Topology-Map information to userspace (RHEL-72682)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73021)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390)
  - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100439)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745)
  - zipl: makedumpfile is required for ngdump support (RHEL-114663)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109215)
  - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100439)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent
  - Secure Execution: Add tool to verify host-key documents (RHEL-136796)
  - Resolves: RHEL-100439 RHEL-136796


author: Dan Horák <dhorak@redhat.com> - 2:2.41.0-1
changelog:
  - rebased to 2.41.0 (RHEL-136098)
  - hsci: Automatically set appropriate MTU for HSCI (RHEL-153547)
  - Resolves: RHEL-136098 RHEL-153547


author: Dan Horák <dhorak@redhat.com> - 2:2.42.1-1
changelog:
  - rebased to 2.42.1 (RHEL-174896)
  - hyptop: Backward compatibility options causes other issues (RHEL-166158)
  - zipl/boot: Fix stage3 secure boot trailer placement (RHEL-169659)
  - SEL-EBC: instrumentation of an SEL initramfs to support early boot customization (RHEL-136434)
  - SEL-EBC: tool to build basic SEL-qcow2 image supporting early boot customization (RHEL-136437)
  - KVM: Enhance pvimg info command to display additional SE image information (RHEL-73137)
  - Cannot configure "portno" of the network interface (RHEL-76751)
  - Resolves: RHEL-174896 RHEL-166158 RHEL-169659 RHEL-136434 RHEL-136437 RHEL-73137 RHEL-76751


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-1
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114548 - Update to version 4.23.4
  - resolves: RHEL-132995 - Fix Time Machine backup
  - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-1
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-143401 - Fix winbind group resolution
  - resolves: RHEL-141027 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-1
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156320 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161658 - CVE-2026-4480 Samba: Remote Code Execution in
    printing
  - resolves: RHEL-170594 - CVE-2026-40170 samba: ngtcp2
  - resolves: RHEL-177925 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166869 - build hardening with FORTIFY_SOURCE


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168579


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-26
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-118293
  - Eliminate use of obsolete %patchN syntax
    Related: RHEL-91101
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-91101
  - Add support for Image Mode
    Resolves: RHEL-91101


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.3-16
changelog:
  - Fix exit status (i. e. apply https://sourceforge.net/p/sblim/bugs/2761/)
  - Fix issues found by static analysis


author: Jan Černý <jcerny@redhat.com> - 1.2.1-5
changelog:
  - Remove qt5-devel from "Requires" section
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/WO625MVYEAAJNHNRLEEJDVZTIWMQOBRR/
  - Update for new CMake out of source builds
    https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
  - Fix Qt5 deprecated symbols
  - Fix FTBS in Rawhide/F33 (RHBZ#1865462)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.27-1
changelog:
  - sedispatch: check read_size
  - SafeConfigParser is deprecated and will be dropped
  - Fix typos in --help, man pages and developer's guide
  - Improve Python 3.10 compatibility
    https://pagure.io/setroubleshoot/issue/58
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.28-1
changelog:
  - Look for modules in /usr/share/selinux/packages
  - Always use rpm source package for reporting
  - Improve after_first email filter behavior


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.30-1
changelog:
  - Miscellaneous python and build system changes
   - Fix couple of typos
   - Drop Python2 support
   - Use inspect.signature() instead of instead.getargspec()
   - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.31-1
changelog:
  - Add a screen reader label to the icon
  - seapplet: avoid ValueError when parsing sealert.conf
  - doc: Document performance related changes
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB
  - Use setup from setuptools
  - Use `pip install` instead of `setup.py install`


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.32-1
changelog:
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  - Fix build with pip 23.1.2+
  - Remove dbus-glib-devel BR as it's only needed when compiled with seappletlegacy
  - Rename session bus name to org.fedoraproject.sealert
  - seapplet: wrap SEApplet() to try except
  - util.py: Add doctext test for build_module_type_cache()
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-1
changelog:
  - Update tmpfiles.d config (bz#2346971)
  - Do not hardcode /var/lib/selinux as store_root
  - data: update app icon
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  - Ship with contemporary app icon
  - Check that SELinux is enabled before running (rhbz#2178950)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80616


author: Jindrich Novy <jnovy@redhat.com> - 2:1.22.2-2
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.22.2
  - re-add test file installation to fix tier0 tests
  - Resolves: RHEL-170602


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - New upstream release
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-2
changelog:
  - Resolves: rhbz#1979619
    IPA: High CPU utilization (over 1000% plus) by ns-slapd process
  - Resolves: rhbz#1979623
    With base object scope, ldapsearch against compat tree does not return any data on Rhel8 IPA servers.


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB
  - Resolves: rhbz#2117299
    Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-5
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog
  - Resolves: RHEL-11983


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.3.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94765


author: Čestmír Kalina <ckalina@redhat.com> - 1.8.3-1
changelog:
  - Resolves: RHEL-11416 Upgrade smc-tools to latest version
  - smc_stats: Fix man page name
  - Bump version.


author: Lukáš Tyrychtr <lukastyrychtr@gmail.com> 2.5-9
changelog:
  - Add an obsoletes directive for the old speech-tools-libs as they're
    no longer part of the Festival package.


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Benjamin Berg <bberg@redhat.com> - 0.19.0-3
changelog:
  - Add patch to lookup graphical session
    https://gitlab.freedesktop.org/spice/linux/vd_agent/merge_requests/2
  - Resolves: #1750120


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-12
changelog:
  - Resolves: RHEL-28530 - squid: Denial of Service in HTTP Chunked
    Decoding (CVE-2024-25111)
  - Resolves: RHEL-26092 - squid: denial of service in HTTP header
    parser (CVE-2024-25617)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-13
changelog:
  - Resolves: RHEL-30352 - squid v5 crashes with SIGABRT when ipv6 is disabled
    at kernel level but it is asked to connect to an ipv6 address by a client


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-14
changelog:
  - Resolves: RHEL-45057 - squid: Out-of-bounds write error may lead to Denial of 
    Service (CVE-2024-37894)
  - Resolves: RHEL-22594 - squid: vulnerable to a Denial of Service attack against
    Cache Manager error responses (CVE-2024-23638)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-15
changelog:
  - Resolves: RHEL-62324 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-17
changelog:
  - Disable ESI support
  - Resolves: RHEL-65080 - CVE-2024-45802 squid: Denial of Service processing
    ESI response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-20
changelog:
  - Resolves: RHEL-77282 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-23
changelog:
  - Resolves: RHEL-122493 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-24
changelog:
  - Resolves: RHEL-119047 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-26
changelog:
  - Resolves: RHEL-160697 - squid: Squid: Denial of Service via heap
    Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  - Resolves: RHEL-160696 - squid: Squid: Denial of Service via crafted
    ICP traffic (CVE-2026-32748)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Tomas Halman <thalman@redhat.com> - 2.9.8-1
changelog:
  - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
  - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
  - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
  - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache


author: Iker Pedrosa <ipedrosa@redhat.com> - 2.9.9-1
changelog:
  - Resolves: RHEL-173741 - SSSD Rebase for RHEL 9.9
  - Resolves: RHEL-173740 - CVE-2026-6245 sssd: out-of-bounds read in the sssd
  - Resolves: RHEL-150439 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-143416 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-152067 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-173742 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-173743 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-173744 - Detect foreign security principals in AD group members and silently ignore them
  - Resolves: RHEL-156519 - GDM Support for IdM IdP feature and MFA [SSSD]


author: Justin Stephenson <jstephen@redhat.com> - 2.9.9-3
changelog:
  - Resolves: RHEL-192062 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192072 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Chris White <chwhite@redhat.com> - 1.19.5-1
changelog:
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-33662


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-33662


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109088


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-108827


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Remove LTO build flags
  - Make queue_track the default backend
  - Remove the -m64 build option
  Resolves: RHEL-111528 RHEL-111526 RHEL-96207 RHEL-96205 RHEL-111803


author: Bryan Gurney <bgurney@redhat.com> - 3.4.0-1
changelog:
  - Update to version 3.4.0
  - Resolves: rhbz#2124976
  - Allow a pool to make use of added capacity of a block device
  - Resolves: rhbz#2039955
  - Enforce per-pool consistency of block device sector sizes
  - Resolves: rhbz#2039957
  - Do not read data from device specified in udev remove event
  - Resolves: rhbz#2124681
  - Specify pool to start by its name
  - Resolves: rhbz#2125012


author: Bryan Gurney <bgurney@redhat.com> - 3.5.5-1
changelog:
  - Update to version 3.5.5
  - Resolves: rhbz#2167463
  - Take into account the sector size of crypt devices
  - Resolves: rhbz#2170318
  - Add stratisd-tools package with stratis-dumpmetadata program
  - Resolves: rhbz#2173726
  - Support key description key in kernel keyring
  - Resolves: rhbz#2038492


author: Bryan Gurney <bgurney@redhat.com> - 3.6.1-1
changelog:
  - Update to version 3.6.1
  - Resolves: RHEL-2278
  - Add filesystem growth limits
  - Resolves: RHEL-12898


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144070


author: John Kacur <jkacur@redhat.com> - 0.17.08-1
changelog:
  - Rebase to upstream V0.17.08
  - ARM: Don't declare inlined yield helper if yield is not available
  Resolves: RHEL-33304


author: John Kacur <jkacur@redhat.com> - 0.18.06-1
changelog:
  - Update the stress-ng-0.18.06 upstream
  - Include some upstream patches after 0.18.06
  Resolves: RHEL-65474


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-13
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916
  - CVE-2025-32462 sudo: LPE via host option
  Resolves: RHEL-100020


author: Alejandro López <allopez@redhat.com> - 1.9.17p2-2
changelog:
  - Request to backport support for regex in sudo [rhel-9]
  Resolves: RHEL-1376
  - Rebase of sudo to 1.9.17p2 [rhel-9]
  Resolves: RHEL-128623
  - sudo passes SHELL environment variable twice to the shell being executed [rhel-9]
  Resolves: RHEL-127359


author: Alejandro López <allopez@redhat.com> - 1.9.17p2-4
changelog:
  - CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls
  Resolves: RHEL-166066


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-12
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.5.4-8
changelog:
  - fix allocation errors with malformed sa files (RHEL-35684)
  - reorder patches to prevent errors during their application


author: Michal Sekletar <msekleta@redhat.com> 12.5.4-3
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#2044893)


author: Pavel Šimovec <psimovec@redhat.com> - 12.5.4-6
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-9
changelog:
  - test: don't install test-network-generator-conversion.sh w/o networkd (#2017035)
  - meson.build: change operator combining bools from + to and (#2017035)
  - openssl-util: use EVP API to get RSA bits (#2016042)
  - procfs-util: fix confusion wrt. quantity limit and maximum value (#2017035)
  - test-process-util: also add EROFS to the list of "good" errors (#2017035)
  - ci: use C9S chroots in Packit (#2017035)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#2017035)
  - core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2019468)
  - Drop Patch9001 - https://github.com/systemd/systemd/pull/17050 - Replaced by Patch0046


author: systemd maintenance team <systemd-maint@redhat.com> - 250-3
changelog:
  - Treat EPERM as "not available" too (#2017035)
  - test: copy portable profiles into the image if they don't exist there (#2017035)
  - test: introduce `get_cgroup_hierarchy() helper (#2047768)
  - test: require unified cgroup hierarchy for TEST-56 (#2047768)
  - tests: rework test macros to not take code as parameters (#2017035)
  - test: allow to set NULL to intro or outro (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-4
changelog:
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - man: mention System Administrator's Guide in systemctl manpage (#1982596)
  - Net naming scheme for RHEL-9.0 (#2052106)
  - core: decrease log level of messages about use of KillMode=none (#2013213)
  - ci: replace apt-key with signed-by (#2013213)
  - ci: fix clang-13 installation (#2013213)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-7
changelog:
  - test: check systemd RPM macros (#2017035)
  - test: do not assume x86-64 arch in TEST-58-REPART (#2017035)
  - tests: add repart tests for block devices with 1024, 2048, 4096 byte sector sizes (#2017035)
  - test: accept both unpadded and padded partition sizes (#2017035)
  - test: lvm 2.03.15 dropped the static autoactivation (#2017035)
  - test: accept GC'ed units in newer LVM (#2017035)
  - shared: Add more dlopen() tests (#2017035)
  - systemctl: Show how long a service ran for after it exited in status output (#2017035)
  - time-util: introduce TIMESTAMP_UNIX (#2017035)
  - systemctl,man: update docs for `--timestamp=` (#2017035)
  - systemctl: make `--timestamp=` affect the `show` verb as well (#2017035)
  - tests: allow running all the services with SYSTEMD_LOG_LEVEL (#2017035)
  - coredump: raise the coredump save size on 64bit systems to 32G (and lower it to 1G on 32bit systems) (#2017035)
  - repart: fix sector size handling (#2017035)
  - mkdir: allow to create directory whose path contains symlink (#2017035)
  - mkdir: CHASE_NONEXISTENT cannot used in chase_symlinks_and_stat() (#2017035)
  - meson: move efi file lists closer to where they are used (#2017035)
  - meson: move efi summary() section to src/boot/efi (#2017035)
  - meson: report SBAT settings (#2017035)
  - boot: Build BCD parser only on arches supported by Windows (#2017035)
  - meson: Remove efi-cc option (#2017035)
  - meson: Get objcopy location from compiler (#2017035)
  - meson: Use files() for source lists for boot and fundamental (#2017035)
  - meson: Use files() for tests (#2017035)
  - tests: add fuzz-bcd (#2017035)
  - meson: Use files() for fuzzers (#2017035)
  - meson: Add check argument to remaining run_command() calls (#2017035)
  - meson: Use echo to list files (#2017035)
  - test: add a test for mkdir_p() (#2017035)
  - util: another set of CVE-2021-4034 assert()s (#2017035)
  - basic: update CIFS magic (#2017035)
  - shared: be extra paranoid and check if argc > 0 (#2017035)
  - core: check if argc > 0 and argv[0] is set (#2017035)
  - core: check argc/argv uncoditionally (#2017035)
  - test: temporary workaround for #21819 (#2017035)
  - test: don't leak local variable to outer scopes (#2017035)
  - tree-wide: don't use strjoina() on getenv() values (#2017035)
  - man: clarify Environmentfile format (#2017035)
  - test-load-fragment: add a basic test for config_parse_unit_env_file() (#2017035)
  - core/execute: use _cleanup_ in exec_context_load_environment() (#2017035)
  - test-env-file: add tests for quoting in env files (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-8
changelog:
  - core: shorten long unit names that are based on paths and append path hash at the end (#2083493)
  - tests: add test case for long unit names (#2083493)
  - tests: reflect that we can now handle devices with very long sysfs paths (#2083493)
  - test: extend the "hashed" unit names coverage a bit (#2083493)
  - Revert "kernel-install: also remove modules.builtin.alias.bin" (#2065061)
  - Revert "kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT" (#2065061)
  - kernel-install: 50-depmod: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: port to /bin/sh (#2065061)
  - kernel-install: fix shellcheck (#2065061)
  - kernel-install: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: error out on nonexistent initrds instead of swallowing them quietly (#2065061)
  - kernel-install: don't pull out KERNEL_IMAGE (#2065061)
  - kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT (#2065061)
  - kernel-install: also remove modules.builtin.alias.bin (#2065061)
  - kernel-install: add new variable $KERNEL_INSTALL_INITRD_GENERATOR (#2065061)
  - kernel-install: k-i already creates $ENTRY_DIR_ABS, no need to do it again (#2065061)
  - kernel-install: prefix errors with "Error:", exit immediately (#2065061)
  - kernel-install: add "$KERNEL_INSTALL_STAGING_AREA" directory (#2065061)
  - kernel-install: add missing log line (#2065061)
  - kernel-install: don't try to persist used machine ID locally (#2065061)
  - kernel-install: add a new $ENTRY_TOKEN variable for naming boot entries (#2065061)
  - kernel-install: only generate systemd.boot_id= in kernel command line if used for naming the boot loader spec files/dirs (#2065061)
  - kernel-install: search harder for kernel image/initrd drop-in dir (#2065061)
  - kernel-install: add new "inspect" verb, showing paths and parameters we discovered (#2065061)
  - ci(Mergify): configuration update (#2087652)
  - ci(Mergify): fix copy&paste bug (#2087652)
  - shared: Fix memory leak in bus_append_execute_property() (#2087652)
  - fuzz: no longer skip empty files (#2087652)
  - networkctl: open the bus just once (#2087652)
  - json: align table (#2087652)
  - fuzz-json: optionally allow logging and output (#2087652)
  - shared/json: reduce scope of variables (#2087652)
  - fuzz-json: also do sorting and normalizing and other easy calls (#2087652)
  - shared/json: wrap long comments (#2087652)
  - shared/json: fix memory leak on failed normalization (#2087652)
  - shared/json: add helper to ref first, unref second (#2087652)
  - basic/alloc-util: remove unnecessary parens (#2087652)
  - fuzz-json: also try self-merge operations (#2087652)
  - shared/json: fix another memleak in normalization (#2087652)
  - shared/json: fix memleak in sort (#2087652)
  - execute: fix resource leak (#2087652)
  - tests: ignore dbus-broker-launcher (#2087652)
  - core/timer: fix memleak (#2087652)
  - timedatectl: fix a memory leak (#2087652)
  - test: fix file descriptor leak in test-psi-util (#2087652)
  - test: fix file descriptor leak in test-tmpfiles.c (#2087652)
  - test: fix file descriptor leak in test-fs-util (#2087652)
  - test: fix file descriptor leak in test-oomd-util (#2087652)
  - test: fix file descriptor leak in test-catalog (#2087652)
  - test: make masking of supplementary services configurable (#2087652)
  - test: fuzz our dbus interfaces with dfuzzer (#2087652)
  - test: skip TEST-21-DFUZZER without ASan (#2087652)
  - core: annotate Reexecute() as NoReply (#2087652)
  - test: always force a new image for dfuzzer (#2087652)
  - test: make dfuzzer less verbose (#2087652)
  - test: drop the at_exit() coredump check (#2087652)
  - test: make the shutdown routine a bit more "robust" (#2087652)
  - tree-wide: drop manually-crafted message for missing variables (#2087652)
  - test: allow overriding $QEMU_MEM when running w/ ASan (#2087652)
  - test: don't test buses we don't ship (#2087652)
  - shutdown: get only active md arrays. (#2047682)
  - bus: Use OrderedSet for introspection (#2068131)
  - logind-session-dbus: allow to set display name via dbus (#2100340)
  - ci: limit which env variables we pass through `sudo` (#2087652)
  - ci(Mergify): Add `ci-waived` logic (#2087652)
  - json: use unsigned for refernce counter (#2087652)
  - macro: check over flow in reference counter (#2087652)
  - sd-bus: fix reference counter to be incremented (#2087652)
  - sd-bus: introduce ref/unref function for track_item (#2087652)
  - sd-bus: do not read unused value (#2087652)
  - sd-bus: do not return negative errno when unknown name is specified (#2087652)
  - sd-bus: use hashmap_contains() and drop unnecessary cast (#2087652)
  - test: shorten code a bit (#2087652)
  - test: add several tests for track item (#2087652)
  - core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2087652)
  - core/unit: fix use-after-free (#2087652)
  - core/timer: fix potential use-after-free (#2087652)
  - core: command argument can be longer than PATH_MAX (#2073994)
  - shared/install: consistently use 'lp' as the name for the LookupPaths instance (#2082131)
  - shared/specifier: treat NULL the same as "" (#2082131)
  - shared/install: do not print aliases longer than UNIT_NAME_MAX (#2082131)
  - shared/install-printf: drop now-unused install_path_printf() (#2082131)
  - strv: declare iterator of FOREACH_STRING() in the loop (#2082131)
  - basic/unit-file: split out the subroutine for symlink verification (#2082131)
  - basic/stat-util: add null_or_empty_path_with_root() (#2082131)
  - shared/install: reuse the standard symlink verification subroutine (#2082131)
  - shared/install: add a bit more quoting (#2082131)
  - test: add test for systemctl link & enable (#2082131)
  - tests: add helper for creating tempfiles with content (#2082131)
  - man: clarify the descriptions of aliases and linked unit files (#2082131)
  - basic: add new variable $SYSTEMD_OS_RELEASE to override location of os-release (#2082131)
  - test-os-util: add basic tests for os-release parsing (#2082131)
  - basic/env-file: make load-env-file deduplicate entries with the same key (#2082131)
  - man/os-release: add a note about repeating entries (#2082131)
  - shared/specifier: clarify and add test for missing data (#2082131)
  - shared/specifier: provide proper error messages when specifiers fail to read files (#2082131)
  - shared/install: provide proper error messages when invalid specifiers are used (#2082131)
  - shared/install: move scope into InstallContext (#2082131)
  - shared/specifier: fix %u/%U/%g/%G when called as unprivileged user (#2082131)
  - shared/install: simplify unit_file_dump_changes() (#2082131)
  - shared/install: propagate errors about invalid aliases and such too (#2082131)
  - shared/install: return failure when enablement fails, but process as much as possible (#2082131)
  - systemctl: fix silent failure when --root is not found (#2082131)
  - shared/install: also check for self-aliases during installation and ignore them (#2082131)
  - docs: Correct WantedBy= regarding template units (#2082131)
  - man: fix invalid description of template handling in WantedBy= (#2082131)
  - shared/install: drop unnecessary casts (#2082131)
  - strv: make iterator in STRV_FOREACH() declaread in the loop (#2082131)
  - core: ExecContext::restrict_filesystems is set of string (#2082131)
  - install: when linking a file, create the link first or abort (#2082131)
  - shared/install: split unit_file_{disable,enable}() so _reenable doesn't do setup twice (#2082131)
  - shared/install: fix reenable on linked unit files (#2082131)
  - test-systemctl-enable: extend the test for repeated WantedBy/RequiredBy (#2082131)
  - shared/install: when we fail to chase a symlink, show some logs (#2082131)
  - shared/install: do not try to resolve symlinks outside of root directory (#2082131)
  - test-systemctl-enable: enhance the test for unit file linking (#2082131)
  - shared/install: skip unnecessary chasing of symlinks in disable (#2082131)
  - shared/install: also remove symlinks like .wants/foo@one.service → ../foo@one.service (#2082131)
  - shared/install: create relative symlinks for enablement and aliasing (#2082131)
  - shared/install: when looking for symlinks in .wants/.requires, ignore symlink target (#2082131)
  - shared/install: stop passing duplicate root argument to install_name_printf() (#2082131)
  - basic/unit-file: reverse negative conditional (#2082131)
  - shared/install: split UNIT_FILE_SYMLINK into two states (#2082131)
  - shared/install: fix handling of a linked unit file (#2082131)
  - test-systemctl-enable: make shellcheck happy (#2082131)
  - shared/install: when creating symlinks, accept different but equivalent symlinks (#2082131)
  - test-systemctl-enable: use magic syntax to allow inverted tests (#2082131)
  - test-systemctl-enable: also use freshly-built systemd-id128 (#2082131)
  - test-systemctl-enable: disable the test for %a for now (#2082131)
  - Rename UnitFileScope to LookupScope (#2082131)
  - core: handle lookup paths being symlinks (#2082131)
  - shared/install: use correct cleanup function (#2082131)
  - udev/net_id: avoid slot based names only for single function devices (#2073003)
  - test: import logind test from debian/ubuntu test suite (#2087652)
  - test: drop redundant IMAGE_NAME= (#2087652)
  - test: import timedated test from debian/ubuntu test suite (#2087652)
  - test: introduce assert_not_in() helper function (#2087652)
  - test: drop unnecessary --no-pager option (#2087652)
  - test: support debian/ubuntu specific timezone config file (#2087652)
  - test: import hostnamed tests from debian/ubuntu test suite (#2087652)
  - locale-util: fix memleak on failure (#2087652)
  - locale-util: check if enumerated locales are valid (#2087652)
  - locale-util: align locale entries (#2087652)
  - core: inline an iterator variable (#2087652)
  - locale-setup: merge locale handling in PID1 and localed (#2087652)
  - locale: rename keymap-util.[ch] -> localed-util.[ch] (#2087652)
  - test: add one more path to search keymaps (#2087652)
  - test: introduce inst_recursive() helper function (#2087652)
  - hmac/sha256: move size define to sha256.h (#2087652)
  - tpm2: support policies with PIN (#2087652)
  - cryptenroll: add support for TPM2 pin (#2087652)
  - cryptsetup: add support for TPM2 pin (#2087652)
  - cryptsetup: add libcryptsetup TPM2 PIN support (#2087652)
  - cryptenroll: add TPM2 PIN documentation (#2087652)
  - cryptsetup: add manual TPM2 PIN configuration (#2087652)
  - cryptenroll: add tests for TPM2 unlocking (#2087652)
  - env-util: replace unsetenv_erase() by new getenv_steal_erase() helper (#2087652)
  - test: install libxkbcommon and x11 keymaps (#2087652)
  - test: install C.UTF-8 and English locales (#2087652)
  - test: import localed tests from debian/ubuntu test suite (#2087652)
  - unit: check for mount rate limiting before checking active state (#2087652)
  - tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2087652)
  - test: insert space in for loop (#2087652)
  - test: move "do" at the end of line (#2087652)
  - test: use trap RETURN (#2087652)
  - test: ignore the error about our own libraries missing during image creation (#2087652)
  - test: wrap binaries using systemd DSOs when running w/ ASan (#2087652)
  - test: set $ASAN_RT_PATH along with $LD_PRELOAD to the ASan runtime DSO (#2087652)
  - test: drop all LD_PRELOAD-related ASan workarounds (#2087652)
  - test: don't wrap binaries built with ASan (#2087652)
  - test: send stdout/stderr of testsuite units to journal & console (#2087652)
  - test: make the busy loop in TEST-02 less verbose (#2087652)
  - test: always wrap useradd/userdel when running w/ ASan (#2087652)
  - test: don't flush debug logs to the console (#2087652)
  - test: fix a couple of issues found by shellcheck (#2087652)
  - test: pass the initdir to check_result_{qemu,nspawn} hooks (#2087652)
  - test: run the custom check hooks before common checks (#2087652)
  - test: check journal directly instead of capturing console output (#2087652)
  - test: use saved process PID instead of % (#2087652)
  - test: account for ADDR_NO_RANDOMIZE if it's set (#2087652)
  - fuzz-bcd: silence warning about always-true comparison (#2087652)
  - test: disable test_ntp on RHEL (#2087652)
  - core: do not filter out systemd.unit= and run-level specifier from kernel command line (#2087652)
  - test: add a simple test for daemon-reexec (#2087652)
  - test: install /usr/libexec/vi as well (#2087652)
  - test: resize the terminal automagically with INTERACTIVE_DEBUG=yes (#2087652)
  - test: create an ASan wrapper for `getent` and `su` (#2087652)
  - test: mark partition bootable (#2087652)
  - test: bump the data partition size if we don't strip binaries (#2087652)
  - test: use PBKDF2 with capped iterations instead of Argon2 (#2087652)
  - locale: drop unnecessary allocation (#2087652)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-9
changelog:
  - Revert "shared/install: create relative symlinks for enablement and aliasing" (#2118668)
  - glyph-util: add new glyphs for up/down arrows (#2118297)
  - tree-wide: allow ASCII fallback for → in logs (#2118297)
  - tree-wide: allow ASCII fallback for … in logs (#2118297)
  - core: allow to set default timeout for devices (#2116681)
  - man: document DefaultDeviceTimeoutSec= (#2116681)
  - man: update dbus docs (#2116681)
  - hwdb: 60-keyboard: Fix volume-button mapping on Asus TF103C (#2087778)
  - hwdb: CH Pro Pedals not classified correctly due to no buttons (#2087778)
  - hwdb: Add accel orientation quirk for the GPD Pocket 3 (#2087778)
  - hostname: Allow overriding the chassis type from hwdb (#2087778)
  - hwdb: Add Microsoft Surface Pro 1 chassis quirk (#2087778)
  - hwdb: treat logitech craft keyboard as a keyboard (#2087778)
  - test: frequency in mouse DPI is optional (#2087778)
  - hwdb: add two Elecom trackballs (#2087778)
  - hwdb: add new database file for PDA devices (#2087778)
  - hwdb: add support for Surface Laptop 2 & 3 (#22303) (#2087778)
  - hwdb: add HP calculators (#2087778)
  - hwbd: 60-sensor.hwdb: Add Pipo W2Pro (#2087778)
  - hwdb: 60-keyboard: Support the buttons on CZC P10T tablet (#2087778)
  - hwdb: add CST Laser Trackball (#22583) (#2087778)
  - hwdb: Force release calculator key on all HP OMEN laptops (#2087778)
  - Add support for NEC VersaPro VG-S (#2087778)
  - Fix mic mute on Acer TravelMate B311-31 (#22677) (#2087778)
  - Add AV production controllers to hwdb and add uaccess (#2087778)
  - hwdb: Add AV production access to Elgado Stream Deck devices (#2087778)
  - Add HP Elitebook 2760p support (#22766) (#2087778)
  - hwdb: Add mic mute key mapping for HP Elite x360 (#2087778)
  - hwdb: fix parser to work with newer pyparsing (#2087778)
  - hwdb: update for v251 (#2087778)
  - hwdb: update autosuspend entries (#2087778)
  - hwdb: drop boilerplate about match patterns being unstable (#2087778)
  - hwdb: Update 60-keyboard.hwdb (#23074) (#2087778)
  - hwdb: 60-keyboard: Add Acer Aspire One AO532h keymappings (#2087778)
  - hwdb 60-keyboard Add HP/Compaq KBR0133 (#2087778)
  - hwdb: add resolutions for the Vaio FE14 touchpad (#23136) (#2087778)
  - hwdb: Remap micmute to f20 for ASUS WMI hotkeys (#2087778)
  - hwdb: Fix rotation for HP Pro Tablet 408 G1 (#2087778)
  - hwdb: add keyboard mapping for HP ProBook 11G2 (#2087778)
  - hwdb: make sure "ninja update-hwdb" works on f35 (#2087778)
  - hwbd: run "update-hwdb" for v251-rc2 (#2087778)
  - hwdb: run "ninja update-hwdb-autosuspend" for v251-rc2 (#2087778)
  - Fix orientation detection for Asus Transformer T100TAF, copied T100TA rule (#2087778)
  - Fix orientation detection for HP Pavilion X2 10-k010nr (#2087778)
  - fix typo (#2087778)
  - Adding a description of the keyboard shortcut Fn+F12 for the HP EliteBook 845 G7 device. (#23253) (#2087778)
  - hwdb: run "update-hwdb" (#2087778)
  - hwdb: add rammus accelerometer support (#2087778)
  - Add support to set autosuspend delay via hwdb (#2087778)
  - Set autosuspend delay for Fibocom LG850-GL (#2087778)
  - Add HUION Inspiroy H420X to hwdb (#2087778)
  - hwdb: run 'update-hwdb' for v251-rc3 (#2087778)
  - hwdb: add touchpad parameters for Lenovo T15g Gen1 (#23373) (#2087778)
  -  hwdb: Add accel orientation for the I15-TG (#2087778)
  - hwdb: fix accelerometer mount matrix for Aquarius NS483 (#2087778)
  - hwdb: Add Google Hangouts Meet speakermic (#2087778)
  - hwdb: update via ninja -C build update-hwdb (#2087778)
  - hwdb: Add Google Meet speakermic (#2087778)
  - hwdb: Add accel orientation quirk for the Aya Neo Next (#2087778)
  - hwdb: Add HP Dev One (#2087778)
  - hwdb: analyzers: remove generic "STM Device in DFU Mode" (#2087778)
  - hwdb: Add Lenovo ThinkPad C13 Yoga (#2087778)
  - Fix automatic screen rotation for Asus Transformer T100TAM (#2087778)
  - hwdb: Add Acer Aspire A317-33 (#24050) (#2087778)
  - Add ACCEL_MOUNT_MATRIX for OXP Mini (#2087778)
  - Added DERE DBook D10 (#24173) (#2087778)
  - hwdb: analyzers: Clarify the type of devices we want listed (#2087778)
  - hwdb: Add Greaseweazle "drives" to the list of analyzers (#2087778)
  - hwdb: Apply existing accel orientation quirk to all Chromebooks (#2087778)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-11
changelog:
  - scope: allow unprivileged delegation on scopes (#2120604)
  - udev/net_id: add "rhel-9.1" naming scheme (#2121144)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-2
changelog:
  - basic/unit-name: do not use strdupa() on a path (#1984299)
  - basic/unit-name: adjust comments (#1984299)
  - tmpfiles: don't create resolv.conf -> stub-resolv.conf symlink (#1989472)
  - Copy 40-redhat.rules from RHEL-8 (#1978639)
  - Avoid /tmp being mounted as tmpfs without the user's will (#1959826)
  - unit: don't add Requires for tmp.mount (#1619292)
  - units: add [Install] section to tmp.mount (#1959826)
  - rc-local: order after network-online.target (#1954429)
  - ci: drop CIs irrelevant for downstream (#1960703)
  - ci: reconfigure Packit for RHEL 9 (#1960703)
  - ci: run unit tests on z-stream branches as well (#1960703)
  - Check return value of pam_get_item/pam_get_data functions (#1973210)
  - random-util: increase random seed size to 1024 (#1982603)
  - journal: don't enable systemd-journald-audit.socket by default (#1973856)
  - journald.conf: don't touch current audit settings (#1973856)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-8
changelog:
  - Really don't enable systemd-journald-audit.socket (#1973856)
  - rules: add elevator= kernel command line parameter (#2003002)
  - boot: don't build bootctl when -Dgnu-efi=false is set (#2003130)
  - unit: install the systemd-bless-boot.service only if we have gnu-efi (#2003130)
  - units: don't enable tmp.mount statically in local-fs.target (#2000927)
  - pid1: bump DefaultTasksMax to 80% of the kernel pid.max value (#2003031)
  - sd-device: introduce device_has_devlink() (#2005024)
  - udev-node: split out permission handling from udev_node_add() (#2005024)
  - udev-node: stack directory must exist when adding device node symlink (#2005024)
  - udev-node: save information about device node and priority in symlink (#2005024)
  - udev-node: always update timestamp of stack directory (#2005024)
  - udev-node: assume no new claim to a symlink if /run/udev/links is not updated (#2005024)
  - udev-node: always atomically create symlink to device node (#2005024)
  - udev-node: check stack directory change even if devlink is removed (#2005024)
  - udev-node: shorten code a bit and update log message (#2005024)
  - udev-node: add random delay on conflict in updating device node symlink (#2005024)
  - udev-node: drop redundant trial of devlink creation (#2005024)
  - udev-node: simplify the example of race (#2005024)
  - udev-node: do not ignore unexpected errors on removing symlink in stack directory (#2005024)
  - basic/time-util: introduce FORMAT_TIMESPAN (#2005024)
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - set core ulimit to 0 like on RHEL-7 (#1998509)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-57
changelog:
  - Revert "boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices" (RHEL-108596)
  - boot: Use correct memory type for allocations (RHEL-108555)
  - meson: /etc/systemd/network is also used by udevd (RHEL-109096)
  - sd-bus: make bus_add_match_full accept timeout (RHEL-31756)
  - core/unit: add get_timeout_start_usec in UnitVTable and define it for service (RHEL-31756)
  - core/unit: increase the NameOwnerChanged/GetNameOwner timeout to the unit's start timeout (RHEL-31756)
  - core,sd-bus: drop empty lines between function call and error check (RHEL-31756)
  - core: do not disconnect from bus when failed to install signal match (RHEL-31756)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-31756)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-31756)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-31756)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-31756)
  - core/manager: drop duplicate bus track deserialization (RHEL-31756)
  - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-31756)
  - shell completion: add kernel-identify/inspect verbs for bootctl (RHEL-108576)
  - test: add tests for format_timestamp() and parse_timestamp() with various timezone (RHEL-109488)
  - test-time-util: disable failing tests (RHEL-109488)
  - test: test parse_timestamp() in various timezone (RHEL-109488)
  - systemctl: logind: add missing asserts (RHEL-109488)
  - systemctl: logind: make logind_schedule_shutdown accept action as param (RHEL-109488)
  - systemctl: add option --when for scheduled shutdown (RHEL-109488)
  - test-time-util: add test cases to invalidate "show" and "cancel" (RHEL-109488)
  - Introduce RET_GATHER and use it in src/shared/ (RHEL-108598)
  - fd-util: don't eat up errors in fd_cloexec_many (RHEL-108598)
  - sd-bus: refuse to send messages with an invalid string (RHEL-108584)
  - test: check if we correctly handle invalid UTF-8 in mount stuff (RHEL-108584)
  - test: fix a typo in the cleanup stuff (RHEL-108584)
  - test: explicitly specify a UTF-8 locale for UTF-8 shenanigans (RHEL-108584)
  - test: use the correct file name when restoring the original fstab (RHEL-108584)
  - core: escape UTF-8 in mount unit Where field before sending to clients (RHEL-108584)
  - Revert "test-time-util: disable failing tests" (RHEL-109488)
  - test: use get_timezones() to iterate all known timezones (RHEL-109488)
  - test-time-util: do not fail on DST change (RHEL-109488)
  - test-time-util: suppress timestamp conversion failures for Africa/Khartoum timezone (RHEL-109488)
  - test-time-util: do more suppression of time zone checks (RHEL-109488)
  - test-time-util: fix truncation of usec to sec (RHEL-109488)
  - test: unset TZ before timezone-sensitive unit tests are run (RHEL-109488)
  - meson: extend timeout for test-time-util (RHEL-109488)
  - time-util: use DEFINE_STRING_TABLE_LOOKUP_TO_STRING() macro (RHEL-109488)
  - time-util: align string table (RHEL-109488)
  - time-util: rename variables (RHEL-109488)
  - time-util: add assertions (RHEL-109488)
  - time-util: drop redundant else (RHEL-109488)
  - time-util: do not use strdupa() (RHEL-109488)
  - time-util: use result from startswith_no_case() (RHEL-109488)
  - time-util: use usec_add() and usec_sub_unsigned() (RHEL-109488)
  - time-util: shorten code a bit (RHEL-109488)
  - time-util: rename variables (RHEL-109488)
  - time-util: drop unnecessary assignment of timezone name (RHEL-109488)
  - time-util: make parse_timestamp() use the RFC-822/ISO 8601 standard timezone spec (RHEL-109488)
  - time-util: fix typo (RHEL-109488)
  - ci: bump the tools tree to F42 (RHEL-109488)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-111065)
  - Revert "Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT"" (RHEL-50103)
  - udev-builtin-net_id: ignore firmware_node/sun == 0 (RHEL-50103)
  - fundamental: fix compile check for explicit_bzero (RHEL-108568)
  - time-util: make USEC_TIMESTAMP_FORMATTABLE_MAX for 32bit system off by one day (RHEL-109488)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-59
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118215)
  - timer: don't run service immediately after restart of a timer (RHEL-118215)
  - test: store and compare just the property value (RHEL-118215)
  - test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
  - basic: add PIDFS magic (#31709) (RHEL-114974)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-60
changelog:
  - man: fix a missing word (RHEL-115182)
  - cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
  - cryptsetup: fix typo (RHEL-97175)
  - cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
  - coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
  - coredump: restore compatibility with older patterns (RHEL-104138)
  - coredump: use %d in kernel core pattern (RHEL-104138)
  - pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
  - fd-util: introduce parse_fd() (RHEL-104138)
  - coredump: add support for new %F PIDFD specifier (RHEL-104138)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-61
changelog:
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
  - strv: introduce string_strv_hashmap_remove() (RHEL-14112)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-62
changelog:
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
  - timer: rebase last_trigger timestamp if needed (RHEL-118215)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-63
changelog:
  - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
  - cryptsetup-generator: continue parsing after error (RHEL-127859)
  - cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
  - cryptsetup-generator: always process cmdline devices (RHEL-127859)
  - logind: add "background-light" session class (RHEL-109833)
  - pam_systemd: honor session class provided via PAM environment (RHEL-109833)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-64
changelog:
  - core: fix array size in unit_log_resources() (RHEL-131338)
  - pid1: add env var to override default mount rate limit burst (RHEL-129153)
  - pid1: add env var to override default mount rate limit interval (RHEL-129153)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-65
changelog:
  - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-66
changelog:
  - core/service: fix error cause in the log (RHEL-138414)
  - fstab-generator: drop assertions for mount opts (RHEL-92752)
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
  - core: reorder systemd arguments on reexec (RHEL-111135)
  - basic: add RuntimeScope enum (RHEL-137252)
  - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
  - sd-path: add support for XDG_STATE_HOME (RHEL-137252)
  - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
  - path tool: add some basic ansi highlighing (RHEL-137252)
  - execude: include RuntimeScope field in ExecParameters (RHEL-137252)
  - execute: remove redundant assignment (RHEL-137252)
  - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
  - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
  - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
  - execute: shorten some code by using RET_NERRNO() (RHEL-137252)
  - execute: shorten code by making use of laccess() return code properly (RHEL-137252)
  - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
  - test: add test for new XDG_STATE_HOME handling (RHEL-137252)
  - man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
  - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
  - man: properly close XML tags (RHEL-137252)
  - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
  - test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
  - man: fully adopt ~/.local/state/ (RHEL-137252)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-68
changelog:
  - integritysetup: Add support for hmac-sha512 (RHEL-50213)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-50213)
  - manager: fix scope for environment generators (RHEL-159230)
  - core: validate input cgroup path more prudently (RHEL-155393)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-69
changelog:
  - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163871)
  - nspawn: normalize pivot_root paths (RHEL-163871)
  - core/service: do not propagate reload for combined RELOADING=1 + READY=1 when notify-reload (RHEL-108575)
  - udev: check for invalid chars in various fields received from the kernel (RHEL-163877)
  - udev: fix review mixup (RHEL-163877)
  - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163877)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-70
changelog:
  - core: cleanup unit's dropin directories from global cache (RHEL-127425)
  - udev: allow persistent storage rules for rbd devices (RHEL-3631)
  - udev/net_id: introduce naming scheme for RHEL-9.9 (RHEL-25518)
  - fstab-generator: support swap on network block devices (RHEL-166187)
  - core: increment start limit counter only when we can start the unit (RHEL-164539)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-164539)
  - test: extend start limit interval (RHEL-164539)


author: Martin Cermak <mcermak@redhat.com> - 5.1-4
changelog:
  - RHEL-50107.patch:  Make systemtap compatible with kernel
    commit 68cbd415dd4b .  Related: RHEL-56962 .


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Sergio Correia <scorreia@redhat.com> - 7.8
changelog:
  - Move build system to meson
    Upstream commits (fed9020, 590de27)
  - Move key handling to tang itself
    Upstream commits (6090505, c71df1d, 7119454)


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-2
changelog:
  - Modernize spec file
  - License corrected to
    ((LGPLv2+ or CPL) and (LGPLv2+ or GPLv2+ or MPLv2.0 or MPLv1.1))


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-82
changelog:
  - Changing LD_FLAGS to RPM_LD_FLAGS
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-36
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066855)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066858)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-37
changelog:
  - Review and fix issues reported by static analysers (rhbz#2069613)
  - Use systemd-rpm-macros and modernise the specfile a bit
    - Based on changes made by Dominik 'Rathann' Mierzejewski in Fedora.
      Thanks a lot!


author: Jan Grulich <jgrulich@redhat.com> - 1.14.1-2
changelog:
  - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
    Resolves: RHEL-62001


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-1
changelog:
  - 1.15.0
    Resolves: RHEL-78617
  - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
    Resolves: RHEL-77973
  - Add SELinux policy rules allowing to create directories under /root
    Resolves: RHEL-77975
  - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
    Resolves: RHEL-80208
  - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
    Resolves: RHEL-80189
  - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
    Resolves: RHEL-80194
  - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
    Resolves: RHEL-80196
  - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
    Resolves: RHEL-80197
  - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
    Resolves: RHEL-80206
  - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
    Resolves: RHEL-80205
  - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
    Resolves: RHEL-80209


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-5
changelog:
  - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
    Resolves: RHEL-97284

  - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
    Resolves: RHEL-97303

  - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
    Resolves: RHEL-97379

  - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
    Resolves: RHEL-97414

  - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
    Resolves: RHEL-97429


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-7
changelog:
  - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
    Resolves: RHEL-119989

  - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
    Resolves: RHEL-120009

  - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
    Resolves: RHEL-120770


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Rebuild against updated xorg-x11-server
    Fixes CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
          CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
    Resolves: RHEL-163282
    Resolves: RHEL-163268
    Resolves: RHEL-163214


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording
    transfer exit condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-65
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-81721
  - Remove deprecated path from systemd service file
    Resolves: RHEL-81716


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-66
changelog:
  - Use systemd-sysusers for the 'pegasus' user and group creation
  - Fix Requires of subpackages
    Related: RHEL-90737
  - Add support for Image Mode
    Resolves: RHEL-90737


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-7
changelog:
  - Rebuild for CVE-2023-39318, CVE-2023-39319, CVE-2023-39325 and
    CVE-2023-44487
  Resolves: RHEL-4435, RHEL-4439, RHEL-12694


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104455


author: Kalev Lember <klember@redhat.com> - 3.38.2-2
changelog:
  - Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
  - Resolves: rhbz#1949422


author: Štěpán Horáček <shoracek@redhat.com> - 5.2-4
changelog:
  - Backport upstream fixes.
  - tpm2_checkquote: Fix check of magic number. (CVE-2024-29038)
  - tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039)
  - Fix check of magic number.
    Resolves: RHEL-23198
    Resolves: RHEL-41031
    Resolves: RHEL-41035


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-2
changelog:
  - Update to 3.1.0.rc, based on earlier tracker3-miners packaging
  - Obsolete separate tracker3-miners package


author: Tom Stellard <tstellar@redhat.com> - 3.0.9-59
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.3.12-1
changelog:
  - Rebase to version 2.3.12
  - Add unixODBC-c89.patch for GCC 14 compatibility
  - Update so-version-bump.patch for new version
  - Fix multilib_fix_c_header path to match actual header location
  - Resolves: RHEL-94798


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-1
changelog:
  - rebase usbguard to 1.0.0
  - added support for rules covering combination of classes
  - fix usbguard being killed
  Resolves: rhbz#1916039
  Resolves: rhbz#1861330
  Resolves: rhbz#1905257


author: Radovan Sroka <rsroka@redhat.com> - 1.0.0-7
changelog:
  RHEL 9 BETA
  - starting usbguard service complains about PIDFile= references a path below legacy directory /var/run/
  Resolves: rhbz#1985627
  - file conflict when installing usbguard on rhel
  Resolves: rhbz#1986785


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-10
changelog:
  - fix DSP module definition in spec file
  Resolves: rhbz#2014442
  - fix IPC access control files override
  Resolves: rhbz#2009227
  - validate ACL permission existence
  Resolves: rhbz#2009229
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2009226


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-11
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak when connection to dbus is broken
  Resolves: rhbz#2059068


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-12
changelog:
  - Set OOMScoreAdjust to -1000 in service file
  Resolves: rhbz#2097419
  - Fix race condition in usbguard-daemon when forking
  Resolves: rhbz#2042345
  - Add missing files to documentation
  Resolves: rhbz#2122107
  - Neither RuleFolder nor RuleFile exists bugfix
  Resolves: rhbz#2122109
  - Remove build for i686 arch
  Resolves: rhbz#2126622


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-15
changelog:
  - Disable logging to console, logging to syslog is still enabled
  Resolves: rhbz#2122109
  - Store permanent rules even if RuleFile is not set but RuleFolder is
  Resolves: rhbz#2155910


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Jiri Kucera <jkucera@redhat.com> - 1.114-3
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1984417


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-4
changelog:
  - Add VALGRIND_3_26_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
    - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
    - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
    - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
    - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
    - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch
    - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
    - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.1.6-1
changelog:
  - Rebase to version 8.1
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689
  - add sub-package for rdma module
  - use patch for configuration changes
  - add /etc/valkey/modules drop-in directory for module configuration files
  - add %valkey_version and %valkey_modules_cfg macros
  - fix module linker flags using patch from
    https://github.com/valkey-io/valkey/pull/3344


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.17.0-0.1.klarlack.20200916git
changelog:
  - Switched upstream to Nils Goroll's fork which is the defacto current upstream
  - Synced description to reality
  - This is a snapshot build that needs autotools for building
  - Rebuilt for varnish-6.5.0


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.17.1-1
changelog:
  - New upstream release
  - Switched back to original varnish github upstream, as it has catched up
  - Includes fix for CVE-2021-28543, VSV00006, bz#1939669


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-23
changelog:
  - RHEL-112005 CVE-2025-53905 vim: Vim path traversial
  - RHEL-112009 CVE-2025-53906 vim: Vim path traversal


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-26
changelog:
  - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
  - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-28
changelog:
  - Resolves: RHEL-159631 vim: Vim: Arbitrary code execution via command injection
    in glob() function


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-44
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1948570


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-45
changelog:
  - Temporary pass -Wno-deprecated-declarations to gcc to ignore
    deprecated warnings to be able to build against OpenSSL-3.0
  - Resolves: rhbz#1958028


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-92.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2164560
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-9.4.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1035
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Brian C. Lane <bcl@redhat.com> - 35.12-3
changelog:
  - tests: OSTree does not support the qcow2 image type
  - Add test repositories for RHEL 9.6 and 9.7
  - Rebuild for CVE-2025-22871
    Resolves: RHEL-89344


author: Brian C. Lane <bcl@redhat.com> - 35.12-4
changelog:
  - Bump release for y-stream AND z-stream building using
    centpkg build --rhel-target=zstream
    Related: RHEL-89344


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052601
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Michal Ruprich <mruprich@redhat.com> - 1.21.1-7
changelog:
  - Resolves: #2017842 - Two different segfaults when downloading multiple files
  - Removing metalink from manpage


author: Joe Doss <joe@solidadmin.com> - 1.0.20200820-1
changelog:
  - Update to 1.0.20200820
  - ipc: split into separate files per-platform
  - wincompat: fold random into genkey
  - systemd: add reload target to systemd unit
  - man: wg-quick: use syncconf instead of addconf for strip example
  - pubkey: isblank is a subset of isspace
  - ctype: use non-locale-specific ctype.h
  - wg-quick: wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20200827-1
changelog:
  - Update to 1.0.20200827
  - wg-quick: android: use iproute2 to bring up interface instead of ndc
  - wg-quick: Revert wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


author: Joe Doss <joe@solidadmin.com> - 1.0.20210315-1
changelog:
  - Makefile: fix version indicator
  - wireguard-tools: const correctness
  - wireguard-tools: drag in headers for prototypes
  - ipc: uniformly ignore preshared keys that are zero
  - wg-quick: freebsd: add kernel support
  - ipc: freebsd: add initial FreeBSD support
  - wg-quick: freebsd: avoid writing private keys to /tmp


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-4
changelog:
  - Resolves: #2152064 - CVE-2022-3190 wireshark: f5ethtrailer Infinite loop in legacy style dissector


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-5
changelog:
  - Resolves: #2210864 - Candump log file parser crash
    Resolves: #2210865 - VMS TCPIPtrace file parser crash
    Resolves: #2210868 - NetScaler file parser crash
    Resolves: #2210870 - RTPS dissector crash
    Resolves: #2210871 - IEEE C37.118 Synchrophasor dissector crash


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-8
changelog:
  - Package woff2_decompress, woff2_compress and woff2_info in a tools subpackage.
    Thanks to Tomasz Gąsior <kontakt@tomaszgasior.pl>


author: Tomas Popela <tpopela@redhat.com> - 1.8.1-3
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1929237


author: Debarshi Ray <rishi@fedoraproject.org> - 41.1-2
changelog:
  - Make the Supplements specific to Fedora to retain consistency with
    xdg-desktop-portal-gtk
  Resolves: #2051473


author: Pavel Reichl <preichl@redhat.com> - 5.19.0-1
changelog:
  - New upstream release
  - Tolerate tiny (<300MB) filesystems
  - Rename xfsprogs-5.12.0-default-bigtime-inobtcnt-on.patch to
      xfsprogs-5.19.0-disable-old-kernel-bigtime-inobtcnt-on.patch
      and amend it to reflect upstream changes
  - Backport all "Fixing" patches relevant to 5.19
    Related: rhbz#2142910


author: Pavel Reichl <preichl@redhat.com> - 6.3.0-1
changelog:
  - Rebase to upstream version 6.3.0
  -
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
  - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
  -
  - Rename the remaining patches so the name contains upstream version in which
  - they are implemented, or "rhelonly".
  -
  - Drop Eric Sandeen's public key used to check tarball signature and replace it by
  - Carlos Maiolino's (current upstream xfsprogs maintainer).
  -
  - Following is a list of newly backported patches from versions released after 6.3
  - which are fixing patches present in version 6.3:
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  -
  - Backport:
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  - to implement RHEL-RHEL-8284
  -
  - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
  - to implement RHEL-7900
  -
  - Related: RHEL-15399
  - Related: RHEL-8284
  - Related: RHEL-7900


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-1
changelog:
  - Rebase to a more recent upstream release
  - Related: RHEL-28339
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
  - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  -
  - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
  -	version it was merged in.


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-2
changelog:
  - Fix various CVE issues.
  - Related: RHEL-32996
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
  - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-3
changelog:
  - Fix coverity issue
  - Related: RHEL-39449
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-7
changelog:
  - xfs unrepairable filesystem if directory block not junked in phase 3 - more
  - fixes
  - Related: RHEL-54342


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.0.0-5
changelog:
  - Emulate a zero axis events after REL_WHEEL (RHEL-153540)
  - Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532)


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21203
    Resolves: https://issues.redhat.com/browse/RHEL-20531
    Resolves: https://issues.redhat.com/browse/RHEL-20380
    Resolves: https://issues.redhat.com/browse/RHEL-20386
    Resolves: https://issues.redhat.com/browse/RHEL-21193
    Resolves: https://issues.redhat.com/browse/RHEL-21200


author: José Expósito <jexposit@redhat.com> - 1.20.11-25
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-28
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
                 CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
                 CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
                 CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.11-30
changelog:
  - xfree86: Fix potentially NULL reference to platform device's PCI device
    Resolves: https://issues.redhat.com/browse/RHEL-84253


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-31
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
                 CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
                 CVE-2025-49180 (RHEL-97253)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-32
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
                 CVE-2025-62231 (RHEL-125003)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-34
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163227
    Resolves: https://redhat.atlassian.net/browse/RHEL-163309
    Resolves: https://redhat.atlassian.net/browse/RHEL-163240


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.11-35
changelog:
  - dri2: Protect against dri2ClientPrivate assertion failures
    Resolves: https://redhat.atlassian.net/browse/RHEL-169728


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-36
changelog:
  - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
                 CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
                 CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
    Resolves: https://redhat.atlassian.net/browse/RHEL-182428


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-3
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
                 CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
                 CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
                 CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
                 CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
                 CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023),
                 CVE-2025-62231 (RHEL-125018)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-3
changelog:
  - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
    Resolves: https://redhat.atlassian.net/browse/RHEL-169765


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-4
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163200
    Resolves: https://redhat.atlassian.net/browse/RHEL-163296
    Resolves: https://redhat.atlassian.net/browse/RHEL-163254


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-5
changelog:
  - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
                 CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
                 CVE-2026-50262, CVE-2026-50263
    Resolves: https://redhat.atlassian.net/browse/RHEL-182448


author: Vladis Dronov <vdronov@redhat.com> - 0.8.2-1
changelog:
  - Update to version 0.8.2
  - Drop patch 1-fix-man-page-installation.patch
  - Use SPDX license identifiers


author: Petr Kubat <pkubat@redhat.com> - 5.2.4-7
changelog:
  - Use relative path for COPYING files so that rpm moves them to correct place
    Related: rhbz#1741074


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


